Lookalike addresses Verdix's poisoning watcher has flagged on Base. It reads every ERC-20 transfer on Base as blocks arrive. Last updated 2026-10-20 20:00 UTC; data through block 52,868,540 (2026-10-20 20:00 UTC).
UTC days. The last bar is today so far. Grey stubs are days before the watcher started.
How an address gets flagged
An address L is flagged as an address-poisoning lookalike when one ERC-20 transfer on Base links it to a wallet V, and both of these hold:
It is a poisoning transfer: either a real stablecoin moved for exactly zero (a zero-value transferFrom needs no allowance, so anyone can forge one), or a token that is not the real one sent an amount while its on-chain symbol() imitates a real money symbol (USDC, USDT, WETH, EURC, …) with homoglyphs or invisible characters.
It is a lookalike:L shares the first 4 and last 4 hex characters with an address V really exchanged $1 or more of USDC/USDT with in the last 7 days. Runs of one repeated character (0000, ffff) don't count.
The goal is to make the lookalike show up in the victim's history, so the victim copies it into the next payment. Each address is counted once. A “transfer seen” (hit) is one poisoning transfer involving an already-flagged lookalike. Flags corrected by hand are left out. Counts come only from our own reading of the chain; no explorer labels are used.
Verified: on 2026-10-11 we drew a random sample of 20 flagged addresses and decoded each one's evidence transaction from the chain itself: 20/20 matched the rule above. The rule has one known rare failure (an attacker's lookalike that later makes a real payment can swap roles); it has been seen once and corrected by hand.
Examples you can check
0xff771758…49edf700: one bulk dusting transaction: a dispatcher sends fake-token and zero-value transfers to many wallets at once (46 Transfer logs)
0x86ebc1be…91cf9079: a single zero-value real-USDC transfer forged from a victim to a lookalike
0xdaac5931…c52cbb0c: the reverse direction: a lookalike sends a fake “USDC”-named token, posing as someone who paid the victim
Check one address for free on the poisoning checker.
Every Verdix tier, from Lite at $0.01, checks a recipient against this data before you send.
For agents: the verdix skill calls it before a payment.
This page is rebuilt from the database once an hour. It shows counts only, not the flagged addresses.