Wallet drained from a signature,
recovery depends on where the funds went next.

An attack in which an operator gains the right to move tokens out of a victim's wallet — usually via a malicious token approval or stolen private key — and transfers the wallet's balance to an address they control.

A wallet attack where the victim signs a `setApprovalForAll` or unlimited `approve` transaction on a spoofed dApp, granting the attacker contract permission to move specific tokens out of the wallet at any later time.

A subscription model in which a development team builds and maintains a wallet-drain smart contract and admin panel, then leases it to affiliates who run the front-end phishing sites and split the proceeds with the developers.

A phishing variant exploiting Uniswap's `Permit2` signature standard, in which a victim signs an off-chain message that the attacker then submits on-chain to drain approved tokens — with no gas or on-chain trail until the actual drain happens.

An automated program that monitors a compromised wallet (one whose private key the operator now knows) and instantly sends any incoming funds to an attacker-controlled address — making the wallet permanently unusable for the victim.

A wallet-targeting scam that seeds the victim's transaction history with a fake address that mimics the first and last characters of an address they recently used, hoping they will copy-paste the wrong one for a future send.

A cold wallet stores the private key offline (hardware device or paper); a hot wallet stores it in software connected to the internet — cold is materially safer against most wallet-drain and phishing attacks.

A wallet that requires signatures from multiple private keys (e.g. 2-of-3 or 3-of-5) to authorise any outgoing transaction — meaning a single compromised key cannot drain the wallet.

A service or smart contract that pools cryptocurrency from many depositors and pays out equivalent amounts to fresh addresses, breaking the on-chain link between source and destination wallets.