My MetaMask wallet was drained — what should I do?

You signed a malicious approval. Modern wallet drainers don't steal your seed phrase — they trick you into approving unlimited spending of every token in your wallet, then sweep everything in one transaction.

Immediate actions:

1. Move anything still in the wallet to a new wallet right now — not just tokens, also any staked positions, NFTs, and assets on other chains using the same address.
2. Generate the new wallet on a different device if possible. Assume the original device may be compromised.
3. Revoke all approvals from the old address via revoke.cash or Etherscan's Token Approvals page. Even if it looks like nothing's left, the approvals persist and any future incoming tokens will get drained the moment they land.
4. Document the drain transaction hash. You'll need it for any report or trace.
5. Report to MetaMask phishing list and to the chain explorers — they update warnings for other users.

Recovery from a drainer is hard. The drainer-as-a-service operators (Inferno, Pink, Angel) split proceeds with the affiliate who hosted the phishing site, then bridge to TRON USDT within hours. A trace is technically possible; recovery depends on the cash-out venue and timing.