Phantom Chat under scrutiny after $264K address poisoning loss