Ethereum hits 1.29M active addresses, but security risks loom – Why?

ambcryptoPublished on 2026-01-24Last updated on 2026-01-24

Abstract

Ethereum recently reached a record 1.297 million daily active addresses, largely driven by a surge in stablecoin transactions. However, a significant portion of this activity is attributed to malicious "address poisoning" attacks, where scammers send small amounts of tokens ("dust") to wallets from spoofed addresses. This tactic has already resulted in $740k stolen from 116 addresses. Despite these security risks, the network's fundamentals remain strong following the successful Fusaka upgrade, which drastically reduced transaction fees. Institutional demand and accumulation are high, with Ethereum dominating the real-world asset (RWA) sector and on-chain metrics showing strong market absorption.

Activity on the Ethereum [ETH] network has never been higher. In a post on X, Token Terminal revealed that the daily active addresses surpassed those of the Layer 2 solutions.

On the 16th of January, the number of Active Addresses was 1.297 million, according to Etherscan data.

At the time of writing, this figure has dropped to 945k. Yet, the trend was unmistakable. The Fusaka upgrade was completed in early December, which cut network transfer fees by nearly 6x.

This has likely had other consequences, as blockchain security specialist Andrey Sergeenkov wrote.

Dusting and poisoning on Ethereum

The specialist found that the massive increase in the number of active addresses and on-chain transactions was due to stablecoin transactions. 67% of the new addresses received less than 1 dollar as their first stablecoin transaction.

Sergeenkov identified this as “dust” and also found smart contracts that automate the mass distribution of poisoning dust.

This is address poisoning. Attackers send small amounts of tokens, or dust, to wallets using addresses that closely match their own. Later, when these users copy an address from their transaction history without closely checking it, they end up sending funds to the attacker.

Even with a low conversion rate of 0.01%, $740k has been stolen from 116 addresses in this way. It should be said that $509k came from a single victim.

Assessing the fundamentals

The Fusaka upgrade was a success. Cheap transactions should be the goal for any network. This would be a key step toward “institutionalization“. AMBCrypto pointed out that Ethereum was the leader in the real-world asset (RWA) sector, controlling roughly 60% of the market.

Aggressive ETH accumulation from entities such as Bitmine was a positive sign. In Q4 2025, Ethereum treasuries acquired 1.2 million ETH. On-chain metrics also highlight buyer dominance in the spot markets, reflecting absorption instead of distribution.

The kind of divergence between price and fundamentals right now, argued Bitwise CIO Matt Hougan, is what marks the bottom of bear markets.


Final Thoughts

  • The record-high daily active addresses were not as hopeful a sign as it appears on first glance.
  • Despite the threat from address poisoning, fundamentals, including on-chain metrics and institutional demand, remained strong.

Trending Cryptos

Related Questions

QWhat was the peak number of daily active addresses on the Ethereum network in January, and what was the figure at the time of writing?

AThe peak number of daily active addresses was 1.297 million on the 16th of January. At the time of writing, this figure had dropped to 945k.

QAccording to the article, what was the primary reason for the massive increase in active addresses and on-chain transactions?

AThe massive increase was primarily due to stablecoin transactions, with 67% of new addresses receiving less than 1 dollar as their first stablecoin transaction.

QWhat is 'address poisoning' as described in the article, and how does the attack work?

AAddress poisoning is an attack where attackers send small amounts of tokens, or 'dust', to wallets using addresses that closely resemble the victim's. The victim may later mistakenly copy this fake address from their transaction history and send funds to the attacker.

QWhat positive impact did the Fusaka upgrade have on the Ethereum network?

AThe Fusaka upgrade, completed in early December, successfully cut network transfer fees by nearly six times.

QDespite the security risks, what positive fundamental factors for Ethereum does the article highlight?

AThe article highlights strong fundamentals including Ethereum's dominance in the real-world asset (RWA) sector, aggressive ETH accumulation by entities like Bitmine, on-chain metrics showing buyer dominance, and institutional demand.

Related Reads

Podcast Notes | Conversation with GSR Asset Management Head: To Determine if This Crypto Rally is Real, Just Watch the Lending Rates on Aave

Podcast Summary: Dialogue with GSR's Head of Asset Management: To Determine if This Crypto Rally is Real, Just Check Lending Rates on Aave Andy Baehr, Managing Director of Asset Management at GSR, discusses the current crypto market, characterizing it as stuck in a state of "ambivalence" with short-lived, unsustainable rallies. He outlines a simple framework: the market moves between "ambivalence" and "conviction" (sustained upward momentum). Currently, every rally resembles a single-stage rocket booster that quickly fizzles out. Baehr identifies three key signals to watch: 1) DeFi lending rates, 2) the potential passage of the CLARITY Act, and 3) the market forming a consensus on the "Fed hawkish peak." He emphasizes that the most immediate indicator for the sustainability of the recent CPI-triggered rally is the USDC borrowing rate on Aave, currently around 3.75%—close to U.S. Treasury yields. The absence of a credit spread indicates low leverage demand and a lack of market energy. He explains that a healthy, sustained rally requires layered buying pressure. Last year's rally progressed from an ETH short squeeze to crypto-native trader influx and finally to ETF inflows. Currently, this structure is missing. Other potential structural buyers like Digital Asset Treasury (DAT) companies are absent, and ETF flows have proven transient. Baehr notes that while small-cap crypto tokens outperformed large caps in Q2—a potential sign of capitation in major assets—capital is also flowing to more exciting opportunities like AI stocks and tech IPOs, leaving crypto sidelined. Regarding DeFi, he highlights that platforms like Aave provide a clear, real-time signal of leverage demand through their supply/demand-driven interest rates. A significant, sustained rate increase would signal genuine market conviction. He also observes the quiet emergence of fixed-income-like products and vaults in DeFi. On regulation, the probability of the CLARITY Act passing before the August 7th deadline has dropped linearly from 75% to below 40% on Polymarket. Baehr suggests its passage would be treated as a bullish surprise, a potent driver for price movement. However, political hurdles, including ethical clause debates and disclosures about the First Family's crypto profits, remain significant obstacles. Ultimately, the market awaits clarity on the Fed's terminal rate under Chair Warsh. Until the "Fed Solstice"—the point where the market collectively understands the peak of hawkish policy—sustained conviction will be difficult to achieve.

marsbit31m ago

Podcast Notes | Conversation with GSR Asset Management Head: To Determine if This Crypto Rally is Real, Just Watch the Lending Rates on Aave

marsbit31m ago

7 Months After the Collapse of Huiwang, Southeast Asia's Escrow Platforms Undergo a Major Reshuffle

Following the collapse of Huione Pay—dubbed the "Alipay of Southeast Asia"—seven months ago, the region's underground financial guarantee platform sector is undergoing a significant reshuffle. This power vacuum has been swiftly filled by emerging platforms such as XinBi, Tiger/Navigator, JinBei (renamed JinBo), Dali/Tiancheng, and FullyLight. These platforms, operating largely via Telegram and offering services like escrow for illicit transactions, have absorbed the vast user base and markets left behind by Huione. While positioning themselves as "trust intermediaries," their primary clientele consists of networks involved in online scams, money laundering, illegal gambling, and even human trafficking. For instance, the Tiger/Navigator platform explicitly provides "escrow" services for kidnapping-for-ransom operations ("强押车交易"). Data underscores the immense scale: Huione alone processed over $103 billion in cryptocurrency payments and facilitated over $31 billion through its escrow market before its downfall, linking it to Cambodia's notorious Prince Group. Since its collapse, competitors have seen explosive growth. For example, the XinBi platform has accumulated over $1.6 billion in total USDT revenue, while platforms like NewPay, OkPay (under Dali), and FullyLight Wallet collectively processed over $4.8 billion in USDT in a single year. This ecosystem thrives in regions like Cambodia and Myanmar, where regulatory gaps allow these platforms to act as critical financial infrastructure for sprawling cybercrime industries, from scam compounds to online casinos. The article concludes that the moniker "Southeast Asian Alipay" is a misnomer, obscuring the platforms' fundamental role in enabling serious criminal enterprises rather than representing legitimate financial innovation.

Odaily星球日报1h ago

7 Months After the Collapse of Huiwang, Southeast Asia's Escrow Platforms Undergo a Major Reshuffle

Odaily星球日报1h ago

Trading

Spot

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of ETH (ETH) are presented below.

活动图片