Clipboard Hijacking

Clipboard hijacking is a malware attack that silently monitors a computer's copy-paste clipboard and swaps a copied cryptocurrency address for one controlled by the attacker. Because bitcoin addresses are strings of 26 to 62 characters that few people read closely, victims paste the substituted address, confirm the transaction, and send funds directly to the thief.

Why it matters

The attack succeeds because it exploits a habit, not a vulnerability in bitcoin itself: nearly everyone copies and pastes addresses, and nearly no one verifies more than a few characters. Once broadcast, the transaction is irreversible, and some malware variants even generate lookalike addresses sharing the same first and last characters as the intended one. Defenses are behavioral: verify the full address, send a small test amount first, and use a hardware wallet whose screen displays the true destination before signing.

In the gold vs bitcoin debate

There is no gold equivalent of clipboard hijacking; stealing metal requires reaching it physically. Digital bearer assets invert the threat model: attacks arrive through software, scale across millions of potential victims at once, and cost the attacker nearly nothing per attempt. Bitcoin's defenders note the countermeasures are cheap and effective once learned. Critics answer that money whose safe use requires operational security training is asking a lot of ordinary savers.