Wallet Drainer

Malicious smart contracts and signature requests designed to drain a connected wallet's tokens once a user signs a fraudulent approval or Permit message. Drainers are deployed behind fake airdrop sites, fake mint pages, and fake support tools. Often packaged as drainer-as-a-service kits sold to less-technical attackers. Defence: never sign transactions you don't understand, simulate transactions before signing, and run a weekly revoke routine on the approvals you've granted.