Enter Platform
← Glossary
Security

Drainer

Malicious software that extracts wallet assets via user-signed transactions on phishing sites. The transaction is technically valid on-chain; the victim authorized it without understanding what it authorized. Named drainer kits include Riddance, Rublevka Team, CLINKSINK, and MS Drainer.

See also
Security Drainer-as-a-Service (DaaS) A drainer kit rented to affiliate operators on a commission basis, typically 10-20% of proceeds. Rublevka Team (documented December 2025) explicitly supports Axiom and Photon among 90+ wallet types. MS Drainer extracted roughly $59M from 63,000 victims before its source code leaked. → Security Phishing Site A website designed to look identical to a legitimate platform to capture wallet signatures. The defense is exact URL verification against a saved bookmark. Real Axiom: axiom.trade. Real Phantom: phantom.com. Real Jupiter: jup.ag. Never type these; never click links from DMs, X posts, or Telegram. → Security Blind Signing Approving a transaction without verifying its instructions. Exploited by drainers whose wallet popups show only that a transaction is being signed rather than what it will do. Even hardware wallets fail when blind signing is enabled. →
← Back to Glossary Search all content →