What it is
A wallet drainer is a type of phishing attack where scammers create fake websites, decentralized applications (dApps), or social media posts that mimic legitimate services. When a user connects their cryptocurrency wallet to such a fraudulent site, the drainer script prompts them to sign a transaction that appears benign but, in reality, grants the attacker permission to transfer all or specific assets from the user's wallet to their own address without further authorization.
Wallet drainers frequently appear in news related to crypto security breaches and scams, often targeting users of popular dApps or NFT marketplaces. These attacks can be sophisticated, employing social engineering tactics to convince users to approve malicious transactions. Retail investors must exercise extreme caution, verify website URLs, and meticulously review transaction details before signing, as approving a drainer's request results in irreversible loss of assets.
Why it matters
Retail investors care about wallet drainers because they pose a direct threat to the security of their digital assets, leading to potential total loss of funds.
Reviewed under editorial standardsUpdated September 26, 2026Not investment advice