Stablecoin-driven dusting attacks are increasingly shaping Ethereum’s daily activity profile. After the Fusaka upgrade, which aimed to cut on-chain data costs and streamline postings from layer-2 networks back to Ethereum, observers say cost reductions have coincided with a rise in tiny-value transfers. In practical terms, dusting is now contributing a meaningful share of on-chain activity, even as the majority of transfers remain economically meaningful.
Key takeaways
- The Fusaka upgrade lowered data-availability costs on Ethereum, leading to a noticeable uptick in overall transaction volume and active addresses. Daily transactions have exceeded 2 million on average, with a mid-January peak near 2.9 million and about 1.4 million daily active addresses—roughly a 60% uptick from prior baselines.
- Dusting activity tied to stablecoins now accounts for about 11% of daily transactions and 26% of active addresses on an average day, a sizable jump from pre-Fusaka levels of roughly 3–5% of transactions and 15–20% of addresses.
- Analyses of USDC and USDT on Ethereum from November 2025 to January 2026 show growing decentralization effects: approximately 43% of dust-related updates involve transfers under $1, and 38% under a single cent, highlighting wallets seeded with tiny amounts.
- Security researchers flag a surge in address creation linked to dusting, with a reported 170% rise in new addresses during the week of January 12, often tied to low gas fees and the ability to move minuscule sums cheaply.
- Despite the dusting trend, the majority of stablecoin activity remains organic. Roughly 57% of balance updates exceed $1, suggesting meaningful, economically relevant use alongside the dusting flow.
Tickers mentioned: $ETH, $USDC, $USDT
Sentiment: Neutral
Market context: The surge in on-chain activity coincides with broader shifts in gas economics and the adoption of layer-2 data posting, signaling a transitional period in Ethereum’s usage patterns as users navigate cheaper transaction costs and new data handling efficiencies.
Why it matters
Ethereum’s post-Fusaka landscape presents a nuanced picture for users, developers, and market observers. On the one hand, the upgrade has delivered tangible benefits: lower costs and improved throughput for posting data from layer-2 networks, which translates into more affordable interactions on the main chain. On the other hand, the same efficiency gains appear to have lowered the friction barrier for dusting campaigns—malicious attempts to seed wallets with tiny, nearly worthless amounts designed to contaminate transaction analytics and entice recipients to transact with the wrong counterparties.
Coin Metrics recently analyzed more than 227 million balance updates for USDC (USDC) and USDt (USDT) on Ethereum from November 2025 through January 2026. The findings show a shift in composition: while a portion of this activity clearly reflects genuine use (payments, settlements, liquidity provisioning), a non-trivial slice now consists of very small transfers that serve as digital footprints, wallet seeding attempts, or poisoning attempts. The data show that 43% of observed dust transfers were under $1, and 38% were under a single penny, underscoring the economic minimalism of many such transactions.
The number of addresses holding small “dust” balances, greater than zero but less than 1 native unit, has grown sharply, consistent with millions of wallets receiving tiny poisoning deposits.
Before Fusaka, stablecoin dust accounted for roughly 3–5% of Ethereum transactions and 15–20% of active addresses. Post-Fusaka, those figures climbed to about 10–15% of transactions and 25–35% of active addresses on a typical day, representing a two- to threefold increase in the dust footprint. Yet, the remaining 57% of balance updates involved transfers above $1, indicating that a significant portion of activity continues to reflect genuine economic activity rather than precautionary or malicious watering of the chain.
Post-Fusaka growth in activity reflects genuine usage, though dust activity is a factor worth noting when interpreting headline metrics.
Dusting has also produced tangible financial losses for some victims. One security researcher noted a reported $740,000 in losses tied to address poisoning attacks. In a striking display of scale, the top attacker executed nearly 3 million dust transfers at a cost of only about $5,175 in stablecoins, highlighting how cheap these techniques can be to deploy relative to the potential impact on victims and analytics platforms.
Dust does not represent genuine economic usage
Analysts emphasize that while stablecoin dust activity has surged, it does not necessarily reflect meaningful growth in demand for goods or services on the network. Rough estimates suggest that around 250,000 to 350,000 daily Ethereum addresses participate in stablecoin dust activity, a non-trivial but still partial window into Ethereum’s overall usage. The broader takeaway is that the network’s growth remains real in many dimensions, even as dust-related actions complicate the interpretation of raw metrics.
The majority of post-Fusaka growth reflects genuine usage, though dust activity is a factor worth noting when interpreting headline metrics.
What to watch next
- Monitoring the ongoing impact of Fusaka on gas pricing and data-posting efficiency across layer-2 ecosystems and any subsequent network upgrades.
- Tracking changes in dusting patterns as wallet hygiene tools and defender initiatives evolve, and as user education campaigns address address-poisoning risks.
- Observing whether regulatory guidance or industry standards lead to improved transparency around dust activity and its impact on on-chain analytics.
- Evaluating whether new anti-dust measures or protocol-level mitigations reduce the feasibility or profitability of dusting campaigns.
Sources & verification
- Coin Metrics, State of the Network, issue 349 (Substack) — analysis of stablecoin balance updates on Ethereum from November 2025 through January 2026.
- Coin Metrics balance updates for USDC (USDC) and USDt (USDT) on Ethereum — dataset cited in the analysis.
- Andrey Sergeenkov, observations on new wallet addresses and address-poisoning dynamics in January 2026.
- Cointelegraph — reporting on address poisoning attacks and the broader dusting phenomenon on Ethereum.
Dusting dynamics and the Fusaka uplift
Ethereum (CRYPTO: ETH) has become a focal point for evaluating how protocol upgrades reshape user behavior and on-chain signals. The Fusaka upgrade, completed in December, broadened the network’s capacity to absorb data from layer-2 bridges and rollups by reducing the cost of posting information. As a result, average daily transactions crossed the 2 million mark, with a sharp jump to nearly 2.9 million in mid-January. Daily active addresses also rose to about 1.4 million, marking a 60% uplift from prior baselines. In this shifting environment, dusting activity has moved from a relatively modest slice of the activity pie to a more prominent feature of the daily ledger, complicating the task of parsing “real” usage from artificial traffic.
Coin Metrics’ analysis, based on a substantial data sample from USDC (USDC) and USDt (USDT), underscores a nuanced narrative. While a meaningful portion of dust transfers is sub-dollar in value, there remains a substantial portion of the activity above traditional thresholds that implies legitimate use—staking, payments, liquidity provisioning, and other routine operations. By juxtaposing post-Fusaka metrics with historical baselines, the report illustrates a two- to threefold expansion in stablecoin dust prevalence, without dismissing the persistent proportionality of bona fide usage on the network. The conversation around dust thus sits at the intersection of efficiency gains, on-chain economics, and security considerations for users navigating a more permissive but also more complex transaction landscape.
As researchers continue to scrutinize the data, the narrative remains that dusting is a real factor in Ethereum’s on-chain activity—but not a wholesale indictment of the network’s growth. The balance between authentic demand and opportunistic traffic will likely shape how developers and researchers frame Ethereum’s success in the months ahead. In the near term, users should remain vigilant about dust-induced address-poisoning vectors and ensure they transact with clear, verified destinations to minimize risk. The broader market will watch how these dynamics influence perceptions of network health, gas economics, and the resilience of security models in the wake of evolving usage patterns.
