Inferno Drainer
Qu'est-ce que Inferno Drainer ?
Inferno DrainerA 2022–2023 crypto-wallet-drainer-as-a-service that emptied tens of thousands of victims' wallets by phishing them into signing token-approval transactions on fake mint and airdrop sites, before shutting down in November 2023.
Inferno Drainer was a prolific 'wallet drainer' service operating from late 2022 through November 2023 — the canonical example of the 2023-era surge in Web3 phishing. Operators of the service paid Inferno's developers a percentage of stolen funds for access to a turnkey kit: a JavaScript-based drainer payload, a phishing-site template, integration with multiple wallet protocols, and laundering through mixers and cross-chain bridges. Victims arrived at lookalike NFT-mint or token-airdrop sites (often promoted via hijacked Twitter accounts, Discord scams, and Google Ads), connected their wallet, and were prompted to sign 'mint' or 'claim' transactions that were actually unlimited ERC-20 / ERC-721 `setApprovalForAll` or `Permit` calls. The drainer then drained the approved tokens to operator-controlled addresses. Chainalysis and ScamSniffer estimated Inferno stole at least $80 million from 100,000+ victims before its operators announced shutdown in November 2023. Successor and copycat drainers — Pink Drainer, Angel Drainer, MS Drainer, AngelX — picked up the same kit-and-affiliate model and remained active through 2024–2025.
● Exemples
- 01
A user clicks a Twitter ad for a 'free mint', signs what looks like a mint transaction, and an Inferno-powered drainer empties their ERC-20 holdings within seconds.
- 02
An NFT-focused security firm publishes the public addresses associated with the Inferno Drainer kit and integrates them into a wallet-warning extension.
● Questions fréquentes
Qu'est-ce que Inferno Drainer ?
A 2022–2023 crypto-wallet-drainer-as-a-service that emptied tens of thousands of victims' wallets by phishing them into signing token-approval transactions on fake mint and airdrop sites, before shutting down in November 2023. Cette notion relève de la catégorie Web3 et blockchain en cybersécurité.
Que signifie Inferno Drainer ?
A 2022–2023 crypto-wallet-drainer-as-a-service that emptied tens of thousands of victims' wallets by phishing them into signing token-approval transactions on fake mint and airdrop sites, before shutting down in November 2023.
Comment fonctionne Inferno Drainer ?
Inferno Drainer was a prolific 'wallet drainer' service operating from late 2022 through November 2023 — the canonical example of the 2023-era surge in Web3 phishing. Operators of the service paid Inferno's developers a percentage of stolen funds for access to a turnkey kit: a JavaScript-based drainer payload, a phishing-site template, integration with multiple wallet protocols, and laundering through mixers and cross-chain bridges. Victims arrived at lookalike NFT-mint or token-airdrop sites (often promoted via hijacked Twitter accounts, Discord scams, and Google Ads), connected their wallet, and were prompted to sign 'mint' or 'claim' transactions that were actually unlimited ERC-20 / ERC-721 `setApprovalForAll` or `Permit` calls. The drainer then drained the approved tokens to operator-controlled addresses. Chainalysis and ScamSniffer estimated Inferno stole at least $80 million from 100,000+ victims before its operators announced shutdown in November 2023. Successor and copycat drainers — Pink Drainer, Angel Drainer, MS Drainer, AngelX — picked up the same kit-and-affiliate model and remained active through 2024–2025.
Comment se défendre contre Inferno Drainer ?
Les défenses contre Inferno Drainer combinent habituellement des contrôles techniques et des pratiques opérationnelles, comme détaillé dans la définition ci-dessus.
Quels sont les autres noms de Inferno Drainer ?
Noms alternatifs courants : Inferno Drainer kit, Wallet drainer service.
● Termes liés
- web3№ 1348
Drainer de Wallet
Logiciel malveillant ou kit de phishing qui trompe les utilisateurs de portefeuilles crypto pour qu'ils signent des transactions ou approbations cedant tous leurs jetons et NFTs.
- web3№ 912
Phishing Permit2
Le phishing Permit2 amene un utilisateur Ethereum a signer un message off-chain Uniswap Permit2 qui accorde a l'attaquant le droit de transferer ses tokens ERC-20.
- web3№ 1155
Signature Phishing (Web3)
A Web3 phishing pattern that tricks a user into signing an EIP-712 or `personal_sign` message that authorizes the attacker to move tokens, transfer NFTs, or take wallet actions — without ever asking for a seed phrase.
- web3№ 017
Address Poisoning
L'address poisoning seme l'historique de la victime avec des adresses ressemblantes controlees par l'attaquant, qui sera ensuite copiee-collee par erreur.
- web3№ 1171
Securite des Contrats Intelligents
Pratique consistant a concevoir, auditer et exploiter des programmes on-chain pour qu'ils ne puissent pas etre detournes afin de voler des fonds ou de violer les regles metier.
- web3№ 1063
Rug Pull
Arnaque de sortie ou les developpeurs d'un token crypto, d'une collection NFT ou d'un protocole DeFi vident la liquidite ou la tresorerie et disparaissent, laissant des actifs sans valeur.
● Voir aussi
- № 413EIP-712 Signing