Ethereum sees surge in tiny stablecoin transfers after Fusaka upgrade, raising security alarms

Ethereum’s December protocol improvement that reduced on‑chain posting costs has been followed by a pronounced uptick in microscopic stablecoin transfers that analysts classify as deliberate wallet‑seeding. Network-wide activity rose to more than two million transactions per day, peaking near 2.9 million in mid‑January, and daily active addresses climbed to roughly 1.4 million — a roughly 60% jump versus earlier norms. Detailed ledger analysis covering November 2025 through January 2026 examined hundreds of millions of balance updates for USDC and USDT and found a substantial fraction of transfers carry negligible monetary value: many updates moved sums under $1 and a large share were worth less than a penny. Those tiny movements now represent a material slice of reported metrics: double‑digit percentages of daily transactions and address counts are tied to these low‑value stablecoin flows, a marked increase from the pre‑upgrade baseline. Researchers estimate a quarter to a third of active addresses on a typical day receive such dust, though slightly more than half of balance changes still reflect transfers above $1, indicating ongoing genuine usage. Security analysts have connected the pattern to address‑confusion tactics in which adversaries send minuscule amounts from look‑alike wallets to trick victims into pasting incorrect destination addresses. Tracing costs and losses shows attackers can generate millions of these micro‑transfers at modest expense, and public reports attribute roughly three‑quarters of a million dollars in victim losses to these schemes so far. The phenomenon complicates interpretation of headline network statistics: higher transaction and address counts no longer map directly to proportional increases in economic activity or user engagement. From an operational perspective, the upgrade achieved its design goal of lowering friction for posting L2 calldata, but it also lowered the barrier for adversarial actors to weaponize low fees at scale. Mitigation will require improved wallet UX, address verification tools, and monitoring that separates economic transfers from noise-inducing dust. Absent rapid defensive changes, exchange and wallet operators should expect continued pressure from this class of manipulative transfers, even as the broader ecosystem’s legitimate activity base grows.