Wallet drainers: how one signature empties a crypto wallet
A fake site asks you to 'connect' and sign. The signature gives a scammer permission to take your tokens.
How it works
A fake airdrop, mint or support page asks you to connect your wallet and approve a transaction. Hidden in it is a permission (an "approval") that lets the scammer move your tokens whenever they like.
What to do now
- Revoke approvals using a trusted approval-checker for your chain, or move remaining funds to a new wallet.
- If you typed your seed phrase anywhere, treat the wallet as lost and move everything to a new one.
- Trace the stolen tokens. Drained stablecoins can sometimes be frozen.