My Binance wallet got drained after connecting to a new 'yield farming' platform – is it all gone?

asked 18d ago8 views23 answers
0

Feeling totally gutted right now. I've been dabbling in crypto for a bit, mostly just holding on Binance, nothing too crazy. But then I saw this ad, or maybe it was a Telegram group, for a new yield farming platform promising insane APYs, like 500%+. It looked legit, had all the usual UI, even some audit reports they linked. I connected my Binance Smart Chain wallet (MetaMask linked to Binance) and approved a few transactions thinking I was staking my BNB and some stablecoins. Woke up this morning, and everything's gone. Literally everything in that wallet – BNB, USDT, some small altcoins. I disconnected the platform immediately but the damage is done. Is there *any* way to trace this or get it back? I feel so stupid for falling for this. It was a substantial amount, enough to really hurt.

Mentioned in this discussion
Binance· neutral

23 Answers

45

Ugh, this is a tough one, Hannah. I'm really sorry this happened to you. Yield farming scams and wallet drainers are super common on BSC because transaction fees are low, making it easy for scammers to move funds quickly. Generally, when you 'approved a few transactions,' you likely signed a malicious smart contract allowing the scammer to transfer *all* tokens of a certain type (e.g., all USDT, all BNB) out of your wallet without further permission. This is called an approve exploit or token approval scam.

First, check the specific transactions on BSCScan. Look for the approve function calls and see what contract you approved and what allowance you gave. Then, see where your funds went – typically they're moved to multiple wallets and then laundered through mixers or exchanges. You can use blockchain explorers like BSCScan to follow the trail. If the funds end up on a centralized exchange like Binance or Coinbase, sometimes, *sometimes*, with a police report and direct contact from law enforcement, the exchange might freeze the funds. However, often they go to smaller, less regulated exchanges or are mixed. I'd definitely still file a police report in Singapore and an IC3 report (if applicable) and give them all the transaction hashes and wallet addresses you can find. Also, revoke all suspicious token approvals from your wallet using a tool like Revoke.cash or approval.xyz *immediately* to prevent any further drains from other tokens you might still have. Be realistic about recovery; it's very difficult but not entirely impossible if they land on a KYC'd CEX and law enforcement acts fast.

Lea Wolf · Hamburg, Germanyanswered 18d ago
38

I really feel for you, Hannah. It's an awful experience. While everyone is right about the difficulty of recovery, don't just give up without trying *everything*. Definitely use revoke.cash or a similar service to check and revoke any lingering approvals on your wallet. This is super important. You should also reach out to Binance support and provide them with all the transaction IDs and the scammer's wallet address. While they might not be able to *recover* the funds if they've left their platform, if the funds were ever sent to a Binance-controlled wallet, they *might* be able to do something or at least flag the address. Also, for future reference, using a hardware wallet like Ledger or Trezor adds an extra layer of security because you have to physically confirm every transaction, making these approval scams harder to pull off accidentally.

Lea Weber · Dusseldorf, Germanyanswered 18d ago
28

Damn, Hannah, that sucks big time. Been there, sort of. Not yield farming, but I almost fell for a fake airdrop once. My friend who's a total crypto nerd basically drilled into me to *never* connect my main wallet to anything new or unverified, and *always* use a burner wallet with only the exact amount you want to stake/swap. It's too late for you now, I know, but for anyone else reading, this is the golden rule. Always, always, always use burner wallets for new DeFi protocols, especially those with insane APYs. Anything too good to be true usually is. I hope you get some of it back, but yeah, it's a tough road. I'd report it to the Singapore police for sure.

Samuel Chua · Singapore, Singaporeanswered 18d ago
18

Okay, look, I hate to be the bearer of bad news but let's be realistic here. Once those funds are gone, especially via a smart contract approval, they're typically gone for good. You gave permission for your tokens to be moved. It's not like they hacked your wallet; you essentially signed away your rights to the tokens. Tracing them is possible, yeah, Chainalysis and TRM Labs do that for big institutions, but for an individual user? Unless it's a massive amount (like millions), law enforcement usually doesn't have the resources or expertise to chase down crypto scammers across international borders. Even if they trace it to an exchange, getting that exchange to cooperate without a major legal order is tough. File your reports, but manage your expectations. It's a harsh lesson, but that's the wild west of crypto for ya.

Daniel Chan · Singapore, Singaporeanswered 18d ago
25

Oh no, Hannah, I'm so sorry! This is exactly what happened to my cousin last year, different platform, but same outcome. They tricked him into giving unlimited approval for his USDT. He lost about 5k AUD. He reported it to the Aussie police, and also tried to contact Binance support but they just gave him generic advice about securing his wallet. The police basically said unless it's a really large sum and they can trace it to an actual person, there's not much they can do. He ended up getting a new wallet and being super careful now. It's a horrible feeling. Take a deep breath. It's not your fault, these scammers are professionals.

Sophie Jones · Brisbane, Australiaanswered 18d ago
12

Ugh, this is just heartbreaking. Don't beat yourself up too much, these scams are incredibly sophisticated now and designed to look 100% legit. Anyone can fall for it. The best thing you can do now is secure any other wallets you have (change passwords, review approvals, etc.) and report it to every authority you can think of. Even if the chances of recovery are slim, you create a paper trail and contribute to the data that helps these agencies fight cybercrime. And importantly, disconnect that malicious dapp from your MetaMask, like right now! There are tools online for revoking permissions.

Aoife Byrne · Belfast, Irelandanswered 18d ago
10

It's a tough pill to swallow, but I agree with Daniel. Chances are incredibly slim. The moment you approved those transactions, you essentially signed over control. It's a common trick. High APYs are almost always a red flag. Think about it, if a bank offered 500% interest, everyone would dump their money there. Crypto might be different but not *that* different. For anyone reading this, this is why you need to research projects extensively, read audits from reputable firms, and if something smells fishy, it probably is. Never approve blind transactions or give unlimited approvals.

Lukas Bauer · Berlin, Germanyanswered 18d ago
9

This hit close to home, Hannah. Not yield farming, but I was caught in a pig butchering scam from ZG.com and lost a significant chunk. Similar feeling of utter despair. I tried everything. Reported to the police, my bank, even emailed Chainalysis – just grasping at straws. They did trace some of the funds through multiple wallets, but it went to some obscure exchange eventually and just disappeared. Never got a cent back. It's a sickening feeling, the helplessness. I hope your outcome is different, but prepare yourself for the worst. It’s a very harsh lesson, man.

Joshua Coetzee · Pretoria, South Africaanswered 18d ago
15

Hannah, I'm so, so sorry this happened to you. It's a terrible situation to be in. Please, don't internalise this as a personal failing. These scammers are sophisticated and prey on people's hopes for financial improvement. You've gotten some good advice already about revoking permissions and reporting to authorities. My only additional suggestion is to document *everything*. Screenshots of the platform, the ad you saw, the Telegram messages if any, all transaction hashes, wallet addresses. The more detail you have, the better for any official report. And take care of your mental health right now, this kind of loss is truly traumatic.

Ciara Smith · Limerick, Irelandanswered 18d ago
11

Yeah, Hannah, this is rough. My buddy lost about 3k in ETH to a similar 'staking' platform on Polygon last year. The 'approve unlimited' permission is what gets you. It looks like a normal transaction to kick things off, but it basically hands over the keys to your tokens. He did all the reporting, followed the trail on Etherscan for a while, saw it go through a mixer and then vanish. It's a sad reality that once it's off-chain or mixed, it's virtually impossible to get back for normal people. It's a harsh lesson learned about DeFi. Always double-check contract interactions and never, ever grant unlimited approvals. Only approve specific amounts if you absolutely have to.

Wei Tan · Singapore, Singaporeanswered 18d ago
12

Ah, the classic drainer scam. They prey on the greed for high APYs. The wallet connection is the primary vector here. Once you approve a contract interaction, especially with token transferFrom permissions, the malicious smart contract can move your assets. You likely approved a contract that wasn't for yield farming but a token sniffer and drainer. The speed at which these scams operate is alarming. The reports you saw were probably fake, a common tactic. Checking smart contract code *before* interacting is paramount, though most users won't do that.

Michael Klein · Cologne, Germanyanswered 18d ago
5

Mate, that sounds absolutely brutal. I'm so sorry this happened to you. These scams are getting scarily sophisticated, and it's easy to get caught out, especially with those crazy APY promises. Don't beat yourself up too much; they're designed to look convincing. The community's here to help, even if recovering the funds is tough.

Henry Davies · Liverpool, United Kingdomanswered 18d ago
3

500%+ APY? Seriously? Anyone with half a brain cell should know that's a massive red flag. If it sounds too good to be true, it almost always is. Connecting your wallet to some random Telegram-linked platform? Big yikes. What audit reports? Probably fake. Did you even check the contract address on BSCScan? Or verify it with a more reputable source? Sounds like a textbook rug pull or drainer.

William Smith · Canberra, Australiaanswered 18d ago
8

I lost about $10k last year to a similar thing. The platform disappeared overnight. I felt sick for weeks. They promised incredible returns. I connected my wallet and boom. It felt like my fault then too, but honestly, they're just predators. What helped me a little, though it didn't get my money back, was reporting it to the FTC. It's a long shot, but at least it goes on record. You're not alone in this.

Maryam Iqbal · Sharjah, UAEanswered 18d ago
6

This is exactly what happened to me last month. Same situation with a 'DeFi' platform. Connect wallet, approve a few things, next thing you know, my MetaMask is empty. I was in shock for like an hour. I couldn't believe I was so stupid. That was my rent money. I tried contacting Binance support but they said they can't do anything if the funds left my wallet and went to other networks. I'm still trying to figure out if there's any recourse, but it feels hopeless.

Matthew Wilson · New York, USAanswered 18d ago
9

Oh no, that's awful. I fell for a similar scam last year. My partner kept telling me to be careful with those high APY sites, but I was so tempted. Once I connected my wallet, they cleaned me out in minutes. I remember seeing the transactions pop up on MetaMask and just freezing. I did manage to report it to the FTC. They couldn't recover my funds, but they said it helps them track scam patterns. It’s a small comfort, but reporting is worth it.

Samantha Miller · Miami, USAanswered 18d ago
10

This is a very common attack vector, unfortunately. The platform likely deployed a malicious smart contract disguised as a yield farming opportunity. When you connected your wallet and approved transactions, you essentially gave the contract permission to execute arbitrary actions, including transferring your tokens. These contracts often have functions that allow the owner to drain all approved tokens to their own address. The key takeaway here is to *always* scrutinize contract interactions. Use tools like BscScan to inspect the contract code and permissions before authorizing anything, though admittedly, this is challenging for non-developers. Blockchain analytics firms like Chainalysis or TRM Labs can trace funds, but recovery is another matter entirely.

Lea Simon · Marseille, Franceanswered 18d ago
7

STOP connecting your wallets to random sites promising riches! This is how they get you. They create fake interfaces, fake audits, everything. You approve a transaction, and poof, your crypto is gone. It happened to me, and I lost a good chunk. If it sounds too good to be true, it's a scam. Always, always, always do your own research and be extremely wary of anything that looks like a 'deal' that's too good to pass up. Stay safe out there people!

Chloe Kruger · Port Elizabeth, South Africaanswered 18d ago
4

Hey, that's a terrible situation, and I'm really sorry you're going through it. It's tough when you see those massive APY numbers, they're designed to make you jump. Don't let this experience completely crush your spirit, though. Many of us have made mistakes in this space, especially early on. What's important now is to learn from it and move forward safely. Focus on understanding the risks better.

Ethan Morin · Calgary, Canadaanswered 18d ago
5

Same thing happened to me. I was so excited about the profits, I didn't even think twice. It was a new platform, I saw it on some crypto influencer's page, and it had a slick website. Connected my MetaMask, approved the stake, and then woke up to an empty wallet. It was like $5k worth of ETH and some other coins. I felt like such an idiot. I reported it to the police here, but they just shrugged. They said crypto is too hard to track. I wish I'd read more warnings before.

Lucas Petit · Nice, Franceanswered 17d ago
4

Wait — are you sure it was Binance Smart Chain? Because sometimes these sites will *claim* to be on BSC but they're actually running something else entirely. Did you check the contract address on a block explorer like BscScan before approving? I got hit by a phishing link last year, claimed to be for a new NFT mint. Connected my wallet, approved *one* transaction, and my entire SOL was gone. They are incredibly good at impersonating legitimate platforms.

Hannah Kruger · Port Elizabeth, South Africaanswered 17d ago
5

I'm so sorry to hear this. I lost a bunch of money last year to a fake lending platform. The website looked identical to a real one, and the promises were insane. I connected my wallet and approved a transaction to 'lend' my USDT. Woke up and it was all gone. I felt so foolish and angry. I tried reporting it to the CFTC, but they said it wasn't their jurisdiction as it was crypto-related and not a traditional security. It's a mess.

Thomas Wagner · Leipzig, Germanyanswered 17d ago
4

Yeah, this happened to my buddy. He connected his wallet to what he thought was a new DEX aggregator. Turned out it was a scam. They took everything. He was devastated. He tried talking to Binance, but they said if the funds left your wallet through your own approval, they can't do anything. He said he's learned his lesson the hard way about what 'connecting your wallet' really means. He's not touching DeFi again anytime soon, sadly.

Andreas Koch · Berlin, Germanyanswered 17d ago

Your answer

You'll be asked to sign in to post.