What is a wallet drainer?
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 5 min
In short
A wallet drainer is tooling built to sweep assets out of any wallet that connects to it, embedded in fake sites and malicious apps. It is designed so that a single signature moves multiple assets, which makes refusing signatures you cannot read the key defence. The wallet holding your savings should never connect to a site at all.
Key points
- Tooling that sweeps assets from any connected wallet
- Built so one signature can move several assets
- Distributed inside fake sites and malicious extensions
- Never connect the wallet that holds your savings
Definition
A toolkit designed to have a user connect a wallet and then, via a signature or approval, transfer their holdings to the attacker in one sweep. It is distributed inside counterfeit sites, apps and browser extensions.
A drainer first reads the connected wallet. Holdings and their values are public, so it can build signature requests that move the most valuable items first. To the user, all of this is presented as pressing one confirm or claim button.
Distribution runs through counterfeit sites reached from search adverts, fake airdrop claim pages promoted on social media, compromised legitimate sites, and malicious extensions or apps posing as official ones. 'Exclusive tools' offered in streams and chats belong to the same family.
On an approval screen, read what moves and who gains authority. Better wallets translate the request into human-readable terms. If nothing is shown, or you cannot follow what it means, decline it there and then — and if you hesitate at all, disconnect entirely.
The structural answer is to separate wallets by role. Only a small everyday wallet ever connects to sites; long-term holdings stay somewhere that never connects, such as a hardware wallet. That decides in advance how much a bad judgement call can cost you.
Watch out for
- · Decline any signature request you cannot read, and disconnect on the spot
- · Split a small connecting wallet from a storage wallet, and never connect the storage one
- · Install wallets and extensions from the official site's own link, never from an advert