Get the extension What is a crypto wallet drainer?
A wallet drainer is malicious code, usually on a fake or hacked website, that asks your wallet for signatures designed to transfer your assets to the attacker. It is sold as a ready-made kit, which is why drainer sites appear by the thousand.
Why it matters
Drainers do not need your key. They need you to approve: an unlimited token approval, a permit, a setApprovalForAll, or on Solana a transaction that hands over authority on your accounts. The request is dressed up as a mint, an airdrop claim or a login.
How Locker Protocol Wallet handles it
Locker Protocol Wallet checks the site against a bundled list of about 105,000 known phishing hosts when it connects, flags drainer patterns such as unlimited approvals, EIP-7702 delegations and Solana SetAuthority, and shows the decoded transaction on the offline Vault before anything is signed.
Questions
Can a drainer empty a hardware wallet?
Yes, if you approve its request. A hardware wallet protects the key, not your judgement, so what counts is whether the device shows you what the signature does.
What should I do if I signed a drainer request?
Revoke the approvals you gave at once, and move the remaining funds to a new address from a recovery phrase that was never exposed.