On Aug 6, I sent 115 AVAX from my Core wallet to Kraken (confirmed, all good). A couple minutes later, I received a dust amount from an address that looked similar to my Kraken address. Right after, my Core wallet shows another 115 AVAX leaving via an unverified contract call:
Contract: 0xDfB36372d91968Ad68fbfeEC92BA50072BeCA55C
I’m happy to provide the tx ID if needed.
This “extra” 115 AVAX shows as an ERC-20 token transfer (sometimes labeled “VAX” in CoinTracking), but in Core it looks like a real withdrawal. My final Core balance is 115 lower than expected, and I can only reconcile my records if I treat it as a loss.
Can anyone confirm if this is a known scam contract or some kind of phantom ERC-20 log?
And more importantly, is there any risk if I move more AVAX from P-Chain → C-Chain → Kraken?
Thanks for the warning about the phishing address - that makes sense now. The contract call I noticed was just a fake attempt to trick me into sending funds to a look-alike address. Fortunately, I didn’t interact with it, and the fact that the amount matched what I was troubleshooting was just coincidence.
The actual issue I was facing was that some AVAX appeared to have “disappeared” from my P-Chain balance in both Core and Avascan. After investigation, I discovered the coins were still there but spread across many small UTXOs under change addresses automatically generated by the P-Chain.
Core’s main P-Chain balance view was only summing the largest UTXO, so the rest didn’t show up unless I clicked MAX when attempting to send or cross-chain transfer coins at which point the full balance became available. Using the UTXO Selector inside “Staking/Cross-chain transfer” in the CoreApp confirmed where the missing amounts were.
So the funds were never gone - just hidden due to how fragmented UTXOs are displayed. It would be a real improvement if Core and Avascan could surface the total P-Chain balance across all UTXOs by default, so users don’t think funds have vanished.