{"id":"poison.events.24h.v2","title":"Poisoning transfers into agent wallets' history, last 24 hours","unit":"transfers","chain_set":"eip155:8453 (Base)","window":"rolling 24 hours","definition":"A poisoning transfer is (a) a Transfer of zero from the wallet in USDC, USDT, DAI, USDbC, EURC, WETH or cbBTC (anyone can call transferFrom for zero without an approval) to an address whose first 3 and last 4 hex characters both match a different payee of the wallet (rule v2; v1 required the first 4), or (b) a Transfer from the wallet in a token that is not one of those contracts but whose symbol, after removing accents and invisible characters and mapping look-alike letters (Cyrillic, Greek, Georgian, Lisu) to Latin, reads as one of them, sent to an address whose last 4 hex characters match one of the wallet's payees, or (c) any other token sent to an address that has no contract code and whose first 3 and last 4 hex characters both match a payee. Counted over the last 24 hours across every watched wallet.","method":"Every Base wallet that has made at least one counted agent payment (money_events kind PAY), with the payees it has paid. One eth_getLogs per 2,000 wallets returns every ERC-20 Transfer whose sender is one of them, from any token contract.","excludes":["Fake-symbol tokens sent to addresses that resemble none of the wallet's payees (they are not tied to a payment to copy).","NFT transfers."],"does_not_assert":["That the wallet's owner noticed, or lost anything."],"source":"AFG-Pulse poisoning watch","since":"2026-10-12","validation":"Measured on 12 Oct 2026 against Tsuchiya, Dong, Soska & Christin, Blockchain Address Poisoning (USENIX Security 2025): of 82,132 plants either rule counts, rule v1 counted 80,509 and the paper's first-3 + last-4 rule 80,880; v2 counts all of them. A second, independent read from the chain on a random sample of 300 counted plants found every one sent by somebody other than the wallet (directly or through an ERC-4337 UserOperation) to an address without contract code; the same check on 50 zero-value plants that only the 3 + 4 rule catches found the same. Incoming tiny transfers (look-alike to wallet, a real token, under 10 USD), the paper's third kind, are not read by this watch.","revisions":[{"date":"2026-10-12","what":"From the 22:44 UTC run on 12 October 2026 the watch also reads incoming tiny transfers (a look-alike sending the wallet under 10 USD of a real token), the third kind in Tsuchiya et al. They are published on their own as poison.tiny.24h.v1 and are not part of this count; the validation note's last sentence describes the watch before that run."}],"body_sha256":"83cdc0a2212ac7e0d0b788d773b62712d849c83f505c3ea21c7739e8e7c778c5","url":"https://agenticfinancegraph.com/def/poison.events.24h.v2","ladder":"https://agenticfinancegraph.com/ai-agent-liveness-methodology-l0-l9-ladder","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Agentic Finance Graph — https://agenticfinancegraph.com"}