All terms
Malicious code that empties a wallet in one signature.
Drainer kits are sold as ready made software. They present a page that looks legitimate and ask you to sign what appears to be a login or a claim. The signature actually grants permission to transfer your tokens.
The signature can look harmless in a wallet that does not simulate transactions, which is exactly why simulation matters.
Use a wallet like Rabby that shows what a transaction will actually do before you sign it.
That you have to enter your seed phrase to be drained. Most modern drainers never ask. They get you to sign a transaction or an approval that looks routine, and the wallet does the rest, which is why reading what you are signing matters more than guarding what you type.
Common questions
How does one signature empty a whole wallet?
What do I do if I think I signed one?
Where this comes up on the site
The guides that actually use this word, rather than a list of everything we have written.
Where to go next
More security terms
Want this explained out loud?
Some of these land faster in conversation than in writing. Sessions are one to one and you can ask anything, including the things that feel too obvious to ask.