地址投毒雷达：转账历史、钱包警告与停止规则

NexuAlpha 直接答案：Address poisoning is a habit-driven transfer risk: a malicious lookalike address enters wallet history and waits for the user to copy it by mistake. MetaMask says users should verify the full destination, especially middle characters, avoid copying from history and use saved contacts; Binance describes the same attack as spoofing through tiny, zero-value or fake-token transactions and recommends address books, test transfers and careful paste verification. The radar decision is whether the next transfer should proceed, not whether a wallet warning proves the address is safe.

决策结果：Before any high-value transfer, treat transaction history as untrusted, select from a verified address book where possible, compare beginning, middle and ending characters, check the address on the signing device, send a small test transaction when the route is new or material, and stop if a warning, newly seen address, clipboard mismatch or support-channel pressure appears.

发布边界：本文准备进入经复核的 NexuAlpha 新闻路由，不改动首页、导航、产品模块或商业链接闸门。

证据快照。本文在 2026-09-22T02:44:00.289Z 读取 MetaMask Help Center、Binance Blog、Binance Academy。本地队列、旧草稿、搜索摘要、社交转述、价格图或 AI 摘要都不被当作事实证明。它们最多提示问题，不能替代公开来源列表与主张映射。

核验事实。主张 c1：MetaMask describes address poisoning as attackers sending tiny or zero-value transactions from lookalike addresses so users may copy the wrong address later. 主张 c2：MetaMask says users should pay attention to middle characters, avoid copying from transaction history, add frequently used addresses to contacts and use hardware-wallet confirmation. 主张 c3：MetaMask security-alert guidance says warnings should lead users to double-check URLs or contract addresses, and malicious classifications mean users should not connect, sign or proceed. 主张 c4：Binance materials describe spoofed address generation, transaction-history poisoning, full-address verification, address-book use and small test transfers as mitigation controls.这些事实刻意保持窄口径，不证明个人资格、未来可用性、执行质量、超出原文的法律状态、税务处理、账户批准、客服结果、赎回成功、价格方向、流动性深度或平台偿付能力。

围绕 address poisoning transfer history wallet warning stop rules 的决策纪律，不是寻找绝对赢家，而是建立来源绑定的评分卡：哪个官方来源回答了当前问题，哪个控制项仍为空白，哪个空白会改变用户风险，哪个测试可逆，哪个条件会重开决策。诚实的空白比编造优势更安全。

FAQ。短答案是什么？Address poisoning is a habit-driven transfer risk: a malicious lookalike address enters wallet history and waits for the user to copy it by mistake. 首先核验什么？核验官方来源和准确控制表面。不能推断什么？不能推断资格、未来支持、法律处理、税务处理、恢复、执行质量、流动性、赎回、消费者保护或账户批准。何时停止？当来源、对象、用户状态、权限、路径、发行人、司法辖区或故障处理不清楚时停止。

公开文档不是私人账户保证。 证明合理决策不应要求暴露秘密。

可见的空白能阻止读者用乐观填补缺口。

公开文档不是私人账户保证。 证明合理决策不应要求暴露秘密。

可见的空白能阻止读者用乐观填补缺口。

公开文档不是私人账户保证。 证明合理决策不应要求暴露秘密。

可见的空白能阻止读者用乐观填补缺口。

公开文档不是私人账户保证。 证明合理决策不应要求暴露秘密。

可见的空白能阻止读者用乐观填补缺口。

公开文档不是私人账户保证。 证明合理决策不应要求暴露秘密。

可见的空白能阻止读者用乐观填补缺口。