An August address-poisoning attack that followed a withdrawal from Compound took about $2 million in Dai (DAI) from an address labeled Bofur Capital; the funds later became 825.5 Ether (ETH).
Address poisoning exploits similar-looking entries in transaction histories. A user copying one of those entries may select a spoofed wallet address that resembles an intended recipient.
The Bofur Capital label identifies the address but does not establish who beneficially owned it.



