An Ethereum user lost 4,556 ETH, worth $12.4M, after copying a poisoned address that mimicked a Galaxy Digital deposit wallet.