Ethereum is at the moment reporting its highest day by day community development in historical past. This can be a statistical spike that ostensibly represents a major rebound in consumer exercise.
Over the previous week, Ethereum's mainnet processed 2.9 million transactions, an all-time excessive, based on knowledge from Token Terminal.
This exercise led to a pointy improve in day by day lively addresses, from about 600,000 in late December to about 1.3 million.
Importantly, this throughput explosion occurred whereas transaction prices remained negligible. Regardless of file demand, common transaction charges stay within the “penny” vary of $0.10 to $0.20.
For a community whose charges have traditionally soared between $50 and $200 in the course of the 2021-2022 NFT growth, this meant a elementary shift in financial entry.
Nevertheless, forensic evaluation means that this improve is just not solely natural. Whereas superficial indicators level to a return to the bull market, safety researchers warn that a good portion of this site visitors is being pushed by malicious actors.
These attackers are exploiting the community's newly diminished charges to launch industrial-scale “handle poisoning” campaigns, concentrating on customers with automated scams disguised as official exercise.
Scaling context
To know the sudden spike in quantity, we have to have a look at current structural adjustments to the Ethereum protocol. For a few years, the community was highly effective however uneconomical for most individuals.
Leon Weidman, head of analysis on the Onchain Basis, identified that since getting into the cryptocurrency area, Ethereum's mainnet charges have merely been too excessive for the typical consumer.
He identified that the community is simply too costly for retailers, too costly for frequent use, and too costly for constructing consumer-scale apps.
Nevertheless, issues modified a couple of yr in the past as Ethereum builders systematically expanded the community whereas trying to decentralize and shield its safety.
This resulted in three main protocol upgrades that transfer the roadmap ahead.
The primary was the Pectra improve in Could 2025, which elevated blob capability by growing the goal blobs per block from 3 to six and the utmost from 6 to 9. This successfully doubled the anticipated BLOB throughput.
This was adopted by a “Fusaka” community improve in December 2025, delivery Peer Information Availability Sampling (PeerDAS). This allowed validators to validate blob availability via sampling reasonably than downloading all the dataset, permitting for increased throughput whereas retaining node necessities affordable.
Most not too long ago, the Blob Parameters Solely (BPO) fork in January 2026 elevated the blob goal from 10 to 14 and the utmost to 21. These sensible updates have been designed to unencumber important capability for the blockchain community.
The economics of those upgrades rapidly grew to become obvious because the community's mainnet charges dropped considerably and easy transactions grew to become low cost once more.
Waidmann identified that constructing immediately on high of Layer 1 has change into viable at scale, prompting prediction markets, real-world property, and funds to return to mainnet.
On the similar time, stablecoin transfers on the community reached roughly $8 trillion within the fourth quarter.
Ethereum recording exercise is just not including worth
Whereas file exercise reveals indicators of blockchain dominance, on-chain knowledge suggests these actions aren’t including actual worth to the community.
Information from Alhpractal reveals that the Metcalfe ratio, which compares market capitalization to the sq. of the variety of lively customers, has declined. This means that evaluations haven’t stored tempo with precise community deployments.
Moreover, Ethereum's adoption rating is at the moment at stage 1, the bottom stage in its historic vary. This displays decrease valuations and a cooling market relative to on-chain exercise.
With this in thoughts, Matthias Seidl, co-founder of GrowThePie, urged that the community's improve in exercise will not be natural.
He gave an instance of a single handle receiving 190,000 native ETH transfers from 190,000 distinctive wallets in a single day.
Seidl identified that whereas the variety of wallets receiving native transfers has remained comparatively secure, the variety of wallets sending native transfers has elevated considerably (doubling). He highlighted that many native transfers (vanilla ETH sending) solely use 21,000 gasoline, making it the most affordable type of EVM transaction.
These now account for nearly 50% of all transactions. By comparability, sending an ERC20 token prices round 65,000 gasoline, and one stablecoin switch requires the identical quantity of gasoline as three native ETH transfers.
Hooked on addresses?
In the meantime, it has been urged that Ethereum's current surge in on-chain exercise may be traced again to previous scams that have been repackaged for an period of decrease charges.
Safety researcher Andrey Sergeenkov famous that since December, a sequence of handle poisoning campaigns have exploited low gasoline prices to inflate community metrics whereas seeding transaction historical past with comparable addresses aimed toward tricking customers into transferring actual funds to attackers.
The mechanics of those assaults are easy. Scammers generate a “poisoning” handle that resembles the goal’s official pockets handle by matching the primary and final characters. After the sufferer completes a standard switch, the attacker sends a small “mud” transaction to the sufferer, inflicting the spoofed handle to look of their current historical past.
Maybe the consumer will later copy a well-recognized handle from the exercise feed with out checking the complete string.
With this in thoughts, Sergenkov ties the proliferation of latest Ethereum addresses to that playbook. He estimates that new handle creation is about 2.7 instances the 2025 common, peaking at about 2.7 million new addresses within the week of January twelfth.
He broke down the dynamics behind the expansion and concluded that round 80% is pushed by stablecoin exercise reasonably than intrinsic consumer demand.
To check whether or not this appeared like poisoning, Sergenkov appeared for telltale signatures, addresses that acquired stablecoin transfers of lower than $1 as the primary interplay.
By his calculations, 67% of latest addresses match that sample. In absolute phrases, we discovered that 3.86 million addresses out of 5.78 million addresses acquired “mud” as their first stablecoin transaction.
He then narrowed his search to senders, concentrating on accounts that transferred lower than $1 in USDT and USDC between December 15, 2025 and January 18, 2026.
Sergeenkov counted distinctive recipients for every sender and filtered out recipients who delivered to at the least 10,000 addresses. What has surfaced, he says, are good contracts designed to industrialize campaigns. These are codes that may fund and reconcile lots of of poisoning addresses in a single transaction.
One of many contracts he reviewed included a characteristic labeled “fundPoisoners,” which he described as distributing small quantities of ETH for stablecoin mud and gasoline to massive quantities of poisoning addresses without delay.
These addresses then unfold and ship mud to thousands and thousands of potential targets creating deceptive entries of their pockets transaction historical past.
This mannequin is scale-dependent as a result of most recipients won’t ever be fooled by it, however the economics will work if solely a small fraction are fooled by it.
Sergeenkov places the efficient conversion charge at round 0.01%, suggesting that the enterprise is constructed to tolerate excessive failure charges. Within the dataset he analyzed, 116 victims collectively misplaced roughly $740,000, with one loss totaling $509,000.
Traditionally, gate parts have been prices. Deal with poisoning includes thousands and thousands of on-chain transactions that don’t immediately generate income except the sufferer by accident transfers funds.
Sergenkov argues that Ethereum’s community charges made it troublesome to justify a high-volume sending technique till late 2025. However with transaction prices about six instances decrease, the risk-reward calculus instantly shifted within the attacker's favor.
With this in thoughts, Sergenkov argued that increasing Ethereum's throughput with out growing safety on the consumer facet has created an atmosphere the place “recording” exercise is indistinguishable from automated abuse.
In his view, the business's obsession with headline community metrics dangers obscuring the darkish actuality that cheaper blockspace will simply subsidize mass-market scams as official adoption, with retail customers bearing the brunt of the losses.
(Tag to translate) Ethereum
