Phishing & Wallet Drains
Malicious approvals, fake dApps, seed-phrase theft, and drainer contracts.
My MetaMask wallet was drained — what should I do?
Woke up to a zero balance. Last thing I did was sign a transaction on what I thought was the OpenSea site. How did this happen and what now?
What is a wallet drainer contract and how does it work?
I keep seeing 'drainer' mentioned. What does the smart contract actually do?
What is a Permit2 signature scam?
Someone told me 'never sign Permit2 on unknown sites' but didn't explain why. What does Permit2 actually do?
I claimed a 'free airdrop' and lost everything — how do these work?
I saw a tweet about an airdrop, connected my wallet, signed something, and within minutes all my crypto was gone.
How can a hardware wallet still get drained?
I thought Ledger was supposed to protect me. How did mine get emptied?
Fake customer support asked for my seed phrase — should I assume I'm done?
I entered my seed into a 'support form' from someone who messaged me on Discord. Realized minutes later.
What is address poisoning and how do I avoid it?
I sent USDT to an address that looked exactly like one I'd used before, but the funds went to a stranger.