What Is a Wallet Drainer?
A wallet drainer is a malicious smart contract that, when approved by a user, transfers all assets out of their wallet in a single transaction. It is one of the most common tools used in crypto phishing attacks.
How Drainer Attacks Work
The attacker deploys a wallet drainer contract and builds a fake website that mimics a legitimate dApp, NFT mint, or airdrop claim page. When the user connects their wallet and approves what appears to be a routine transaction, the drainer contract moves all tokens and NFTs to the attacker’s address. The drain is irreversible and typically takes seconds.
Common Attack Vectors
Fake airdrop claim sites are among the most frequent entry points: a user receives a link for a supposed token drop and approves the claim. Compromised social media accounts promoting fake mints are another major source. Phishing links in paid search results that appear above official dApp URLs have also been used, catching users who do not check addresses carefully.
How to Protect Yourself
Never click unsolicited airdrop or mint links. Verify the official URL before connecting your wallet to any site. Use a wallet that displays human-readable transaction descriptions rather than raw data. Keep your main holdings in a cold wallet and use a separate hot wallet with minimal funds when testing new projects.
A wallet drainer is a malicious smart contract that transfers a victim’s entire wallet balance to an attacker when they approve a transaction on a phishing site.
The attacker creates a fake website. When the user connects and signs a transaction, the drainer contract executes and moves all tokens and NFTs to the attacker’s wallet instantly.
No. On-chain transactions are irreversible. Once a drainer empties your wallet, there is no technical mechanism to recover the assets.
Never click unsolicited airdrop or mint links. Always verify the official URL before connecting. Review what a transaction will do before approving it, and keep large holdings in a cold wallet that you rarely connect to websites.
Outperform your competitors?
Join our Newsletter and get weekly Blockchain news tailored for web3 builders.
