A poisoning attack involves the attacker mimicking the victim's address to trick them into sending funds to the wrong destination.