Check a Bridge Recipient Before Sending
Clipboard malware can swap a copied wallet address before a bridge transfer. Check the full recipient, chain and final review screen before approving.
The Token Wire Desk3 min read
Clipboard malware can replace a copied wallet address with one controlled by someone else, so check the bridge recipient before you send. A bridge moves assets between blockchains, and its form may ask for a destination address as well as the destination network. A correct-looking transfer can still go to the wrong place if malware changes that address when you copy and paste it.
How can you spot a replaced address?
Compare the address in the bridge form with the recipient you intended to use, character by character. Do not rely only on the first and last few characters: malicious software can substitute an address designed to look similar. Use a trusted record, such as the receiving wallet’s address screen or an address book you set up earlier.
If you copy an address, paste it into the form, then check it again against that trusted source. For a long address, comparing in sections can make mistakes easier to spot. If a swap stalls while you prepare assets for a bridge, this guide explains how to choose a quickswap route when swaps stall.
What should you check in the bridge form?
Check the network and recipient together. The address may be valid on more than one network, but the transfer still needs to match the destination you chose. Then review the token and amount. A correct address does not fix a wrong network or an unintended asset.
- Confirm the destination network shown in the form.
- Compare the full recipient address with your trusted copy.
- Check the token and amount, including any displayed fees.
- After connecting your wallet, review its transaction prompt too.
Some bridge flows let you enter a recipient that differs from the connected wallet. That can be useful when sending to another wallet, but it also makes careful checking more important. Make sure the field says what you expect before continuing.
When is it safe to approve the transfer?
Approve only after the bridge page and your wallet show the details you expect. The wallet prompt is another chance to catch a changed recipient or an unexpected request. Read what it asks you to sign; a request to approve a token is different from confirming a transfer, and the details should fit the action you started.
If the address changes after you paste it, stop and replace it from a trusted source. Do not approve a transfer just because the wallet shows a familiar token or amount. Clipboard malware can alter copied text without changing what you see in the source wallet. Keep a trusted address record, and check the destination again when the bridge says the transfer is ready. Watch the final recipient and network details on both the bridge screen and wallet prompt.