We built Address Guard, an open-source TypeScript toolkit designed to detect crypto address poisoning before transactions are signed.
Address poisoning is a common attack where scammers generate wallet addresses resembling legitimate recipients and inject them into transaction histories through small transfers. Users who copy addresses from their history can accidentally send funds to an attacker.
What Address Guard does:
- Detects look-alike wallet addresses.
- Builds a trusted recipient list from outgoing transactions.
- Validates Ethereum addresses using EIP-55 checksums.
- Checks payout files in CI/CD pipelines before signing.
The goal is simple: catch suspicious destination addresses before funds are transferred, rather than relying on users to manually spot subtle differences.
GitHub: https://t.co/78fDjc0Ack
We'd appreciate feedback from developers working on wallet security, blockchain infrastructure, and automated crypto payments.
What other attack patterns or edge cases should we consider?
Top comments (0)