Inferno Drainer
¿Qué es Inferno Drainer?
Inferno DrainerA 2022–2023 crypto-wallet-drainer-as-a-service that emptied tens of thousands of victims' wallets by phishing them into signing token-approval transactions on fake mint and airdrop sites, before shutting down in November 2023.
Inferno Drainer was a prolific 'wallet drainer' service operating from late 2022 through November 2023 — the canonical example of the 2023-era surge in Web3 phishing. Operators of the service paid Inferno's developers a percentage of stolen funds for access to a turnkey kit: a JavaScript-based drainer payload, a phishing-site template, integration with multiple wallet protocols, and laundering through mixers and cross-chain bridges. Victims arrived at lookalike NFT-mint or token-airdrop sites (often promoted via hijacked Twitter accounts, Discord scams, and Google Ads), connected their wallet, and were prompted to sign 'mint' or 'claim' transactions that were actually unlimited ERC-20 / ERC-721 `setApprovalForAll` or `Permit` calls. The drainer then drained the approved tokens to operator-controlled addresses. Chainalysis and ScamSniffer estimated Inferno stole at least $80 million from 100,000+ victims before its operators announced shutdown in November 2023. Successor and copycat drainers — Pink Drainer, Angel Drainer, MS Drainer, AngelX — picked up the same kit-and-affiliate model and remained active through 2024–2025.
● Ejemplos
- 01
A user clicks a Twitter ad for a 'free mint', signs what looks like a mint transaction, and an Inferno-powered drainer empties their ERC-20 holdings within seconds.
- 02
An NFT-focused security firm publishes the public addresses associated with the Inferno Drainer kit and integrates them into a wallet-warning extension.
● Preguntas frecuentes
¿Qué es Inferno Drainer?
A 2022–2023 crypto-wallet-drainer-as-a-service that emptied tens of thousands of victims' wallets by phishing them into signing token-approval transactions on fake mint and airdrop sites, before shutting down in November 2023. Pertenece a la categoría de Web3 y blockchain en ciberseguridad.
¿Qué significa Inferno Drainer?
A 2022–2023 crypto-wallet-drainer-as-a-service that emptied tens of thousands of victims' wallets by phishing them into signing token-approval transactions on fake mint and airdrop sites, before shutting down in November 2023.
¿Cómo funciona Inferno Drainer?
Inferno Drainer was a prolific 'wallet drainer' service operating from late 2022 through November 2023 — the canonical example of the 2023-era surge in Web3 phishing. Operators of the service paid Inferno's developers a percentage of stolen funds for access to a turnkey kit: a JavaScript-based drainer payload, a phishing-site template, integration with multiple wallet protocols, and laundering through mixers and cross-chain bridges. Victims arrived at lookalike NFT-mint or token-airdrop sites (often promoted via hijacked Twitter accounts, Discord scams, and Google Ads), connected their wallet, and were prompted to sign 'mint' or 'claim' transactions that were actually unlimited ERC-20 / ERC-721 `setApprovalForAll` or `Permit` calls. The drainer then drained the approved tokens to operator-controlled addresses. Chainalysis and ScamSniffer estimated Inferno stole at least $80 million from 100,000+ victims before its operators announced shutdown in November 2023. Successor and copycat drainers — Pink Drainer, Angel Drainer, MS Drainer, AngelX — picked up the same kit-and-affiliate model and remained active through 2024–2025.
¿Cómo defenderse de Inferno Drainer?
Las defensas contra Inferno Drainer combinan habitualmente controles técnicos y prácticas operativas, como se detalla en la definición.
¿Cuáles son otros nombres para Inferno Drainer?
Nombres alternativos comunes: Inferno Drainer kit, Wallet drainer service.
● Términos relacionados
- web3№ 1348
Drainer de Carteras
Software malicioso o kit de phishing que enganan a los usuarios de wallets cripto para que firmen transacciones o aprobaciones que entregan todos sus tokens y NFTs valiosos.
- web3№ 912
Phishing de Permit2
El phishing de Permit2 engaña a un usuario de Ethereum para que firme un mensaje off-chain de Uniswap Permit2 que otorga al atacante permiso para transferir sus tokens ERC-20.
- web3№ 1155
Signature Phishing (Web3)
A Web3 phishing pattern that tricks a user into signing an EIP-712 or `personal_sign` message that authorizes the attacker to move tokens, transfer NFTs, or take wallet actions — without ever asking for a seed phrase.
- web3№ 017
Envenenamiento de Direcciones
El envenenamiento de direcciones siembra el historial de transacciones de la victima con direcciones similares controladas por el atacante para que despues copie-pegue la equivocada y envie fondos al atacante.
- web3№ 1171
Seguridad de Contratos Inteligentes
Practica de disenar, revisar y operar programas en cadena de modo que no puedan ser explotados para robar fondos, congelar la logica o violar las reglas de negocio.
- web3№ 1063
Rug Pull
Estafa de salida en la que los desarrolladores de un token, coleccion NFT o protocolo DeFi vacian la liquidez o el tesoro y desaparecen, dejando a los inversores con activos sin valor.
● Véase también
- № 413EIP-712 Signing