Fusaka Upgrade Fuels Record Address Poisoning on Ethereum

The Ethereum Fusaka upgrade cut gas fees by sixfold, unintentionally enabling large-scale address poisoning attacks via low-cost spam transactions according to reports.

Attackers have sent over 167,000 daily dust transactions, leading to more than $63 million in losses in two months post-upgrade, a 13x increase compared to pre-upgrade periods.

The surge in dust transactions has strained the Ethereum network, with 43% of stablecoin transactions under $1 and 38% under a penny, and 11% of all transactions classified as dust.

The Fusaka upgrade, intended to improve Ethereum's scalability and user experience, has had unintended consequences. By reducing gas fees, it made it economically feasible for attackers to spam millions of low-value transactions designed to mimic real contacts.

This technique—address poisoning—exploits user behavior when copying and pasting wallet addresses. When a victim mistakenly sends funds to a forged address, attackers profit. This method has turned into a kind of lottery for scammers, with millions of spam transactions increasing the probability of hitting large accounts.

Researchers have highlighted that the losses are not just limited to a few large-scale thefts. Even excluding a single $50 million USDT theft in December 2025, victims still lost $13.3 million, a 2.7x increase from the pre-Fusaka period.

The Ethereum Foundation is now under pressure to address these security risks as part of its broader 2026 roadmap, which includes increasing gas limits and improving user experience. While the protocol upgrade aims to make Ethereum more scalable and quantum-resistant, the current situation shows the need to balance growth with security.

How Do Address Poisoning Attacks Work?

Address poisoning attacks exploit the reduced transaction costs post-upgrade to send tiny-value transfers that mimic legitimate contact addresses. When users copy and paste these addresses, they often send funds to the wrong recipient.

Attackers treat this as a high-volume, low-cost strategy. Sending millions of spam transactions increases the chances of hitting high-value targets. This has made Ethereum a more attractive platform for malicious actors, despite the overall reduction in fees.

The impact is not limited to individual users. The surge in dust transactions has also affected the broader network, with stablecoin activity increasing significantly. This has created challenges for network performance and raised concerns about long-term usability.

What Are the Proposed Mitigations and Challenges?

Researchers and Ethereum Foundation members have proposed solutions such as visually truncating addresses in block explorers to reduce confusion. This approach allows users to verify full addresses before sending funds without being overwhelmed by long strings of characters.

However, experts emphasize that address books remain a safer alternative. Users are encouraged to store and verify addresses directly in their wallets or personal records rather than relying on block explorers.

Despite these suggestions, the Ethereum Foundation faces the challenge of balancing user safety with growth metrics. While the Fusaka upgrade was successful in reducing transaction costs, it has also exposed vulnerabilities in the network's security infrastructure.

The Ethereum Foundation's 2026 roadmap includes plans to harden the Layer 1 (L1) protocol against quantum computing threats and improve user experience. Addressing the current security issues is expected to be a critical part of these efforts, especially as the network prepares for mainstream adoption.

What's Next for Ethereum's Development Strategy?

The Ethereum Foundation has outlined three development tracks for 2026: Scale, Improve UX, and Harden the L1. These tracks aim to make Ethereum more scalable, user-friendly, and secure.

The Scale track will focus on increasing gas limits beyond 100 million, enabling more transactions per second. This is expected to reduce congestion and improve performance.

The Improve UX track will simplify interactions for everyday users and enhance interoperability between Layer 2 solutions. This includes features like account abstraction, which makes transactions more flexible and accessible.

The Harden the L1 track will address security concerns such as quantum computing threats. The foundation has also formed a dedicated research team to prepare for these emerging risks.

These upgrades aim to maintain Ethereum's security and censorship resistance while supporting broader adoption. However, the recent surge in address poisoning attacks highlights the need to address security risks before implementing large-scale changes.