A wallet drainer is malicious code on a website that empties a wallet the moment you approve its transaction. It’s sold as a kit, so the same drainer appears behind many fake mints, airdrops, and support pages. The signature is a transaction that requests far more permissions than the action usually needs. Learn about crypto phishing and Solflare’s security model.