Crypto Drainer
Share post
In Brief
A crypto drainer is malicious code — usually behind a fake website or app — designed to empty a wallet by tricking the owner into signing transactions or approvals that hand over control of their assets.
What Is a Crypto Drainer?
A crypto drainer (or wallet drainer) is a malicious tool built to empty crypto wallets. Unlike a hack that breaks encryption, a drainer tricks you into authorizing the theft: a fake mint page, airdrop claim, or "wallet verification" site asks you to sign a transaction or token approval that quietly grants the attacker control over your assets.
Drainers are sold as ready-made kits ("drainer-as-a-service"), which is why the same scam appears across thousands of fake sites, ads, and hijacked social media accounts.
How Drainers Steal Funds
The lure: a too-good offer — free mint, urgent airdrop, support agent, giveaway.
The connection: the site asks you to connect your wallet, which is harmless by itself.
The signature: it then requests a transaction or approval — often disguised or unreadable — that transfers assets or grants unlimited token allowances.
The drain: scripts sweep everything the signature unlocked, across multiple tokens and chains, in minutes.
How to Protect Yourself
Read every signature request. If you can't tell what it does, reject it.
Never sign on sites you reached from ads, DMs, or comments. Type known URLs yourself.
Review and revoke token approvals you no longer use.
Keep long-term holdings in a wallet that never touches dApps.
Drainers and Trust Wallet
Trust Wallet's Security Scanner analyzes transactions and flags known drainer contracts and risky approvals before you sign. Combined with self-custody — where nothing moves without your signature — the best defense is simple: sign only what you understand.