Wallet Drainer

A wallet drainer is malicious code embedded in a website that empties a visitor's crypto wallet once they connect it and sign a prompt. Unlike classic phishing, a drainer usually does not ask for a seed phrase at all. It presents an ordinary-looking action — claim an airdrop, mint an NFT, verify your wallet — and the signature actually authorises transfers or approvals that let the attacker sweep assets. Drainer kits are sold as ready-made services, which is why fake mint pages and cloned sites appear so quickly around any popular launch. Defences include reading the decoded transaction your wallet shows before signing, using a separate low-value wallet for unfamiliar sites, and keeping long-term holdings in a hardware wallet that never connects to random front ends.