Wallet drainers are responsible for an enormous share of crypto theft, and they succeed because they trick you into approving your own loss. Understanding how they work is the best defense, because once you can spot the pattern, they stop working on you.
What a drainer is
A drainer is malicious code, usually behind a fake website, that gets you to sign a transaction or approval handing it access to your funds. You are not "hacked" in the traditional sense. You approve the theft yourself, believing you're claiming an airdrop, minting an NFT, or connecting to a legit app.
How drainers get you
- Fake airdrops and claim sites. A message says you're eligible for a token. The claim button asks you to sign an approval that drains you.
- Malicious approvals. You grant a contract permission to spend your tokens, and it takes them.
- Fake app or wallet sites reached through search ads or phishing links that mimic a real project.
- Compromised social accounts posting a "mint live" link that leads to a drainer.
- Seed-phrase phishing, where a fake support page asks for your recovery phrase.
The warning signs
- Any site asking for your seed phrase or private key. No legitimate site ever does this.
- Unexpected "you won an airdrop" messages, especially with urgency.
- A connect or claim flow that asks you to sign a token approval you didn't expect.
- Links from DMs, comments, or search ads rather than the project's verified channel.
How to stay safe
- Use a dedicated wallet for risky activity (memecoins, new apps) with only what you can afford to lose, kept separate from your main holdings.
- Never enter your seed phrase anywhere except your own wallet's recovery flow.
- Read what you sign. If a transaction requests broad approval or looks unfamiliar, reject it.
- Revoke old approvals periodically with a reputable revoke tool.
- Verify URLs and reach projects through their official channels, not ads or DMs.
- Verify contracts before trading tokens. Practice on established coins with our SOL memecoin tracker.
If you've been drained
Move fast. Get any remaining assets to a new, clean wallet, revoke the compromised wallet's approvals, and treat the affected seed as permanently burned. Our full checklist is in Crypto Wallet Drained? What to Do. Drainers rely on speed and surprise; a calm, separate-wallet, read-before-you-sign habit defeats almost all of them.