How the scam works
- A scammer watches who you send to.
- They generate an address that starts and ends like that one.
- They slip it into your history with a dust transaction, a zero-value transfer, or a fake transfer displayed as “sent”.
- Next time, you copy the “recent” address from your history. The middle is different, and your money goes to them.
It works because most people check only the first and last few characters, and because a long address is hard to read.
What Kyro does
- A blocking red alert appears if a recipient shares the first 4 and last 4 characters with a known address without being identical.
- Known addresses are your address book, your accounts and sends signed by this Kyro. The server’s history is never trusted.
- Addresses are displayed in blocks, and anything outside the address book is marked “Unknown address”.
- After you paste, Kyro watches the field for clipboard tampering.
- The native confirmation window shows the recipient Rust decoded.
1.2345 ETHWhat it cannot catch
A lookalike that already differs within those 8 characters is not detected. A clipboard swap that happens before you paste cannot be seen either. Only comparing against your source will find those, so these habits still matter.
Habits that stop it
- Never copy a recipient from your transaction history.
- Save the addresses you use in the address book. Send offers “Save” for a new recipient.
- Compare the whole address with your source, block by block.
- For large amounts, send a small test and have the recipient confirm it.
- Ignore unexpected tiny deposits. You do not need to do anything about them.
If it already happened
Transfers on a blockchain cannot be reversed, and neither Kyro nor anyone else can pull funds back. Your keys were not stolen, so your wallet itself remains safe to use. Be wary of anyone offering to “recover” the money for a fee.