Pink Drainer
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·27aS7s…k5MWSummary
Pink Drainer was a pseudonymous wallet-drainer-as-a-service operation that supplied phishing kits and malicious smart-contract infrastructure to affiliate scammers between roughly April 2023 and May 2024. Security researchers, principally Scam Sniffer and blockchain investigator ZachXBT, attribute upward of $75-85 million in stolen crypto assets across an estimated 20,000-21,000+ victims to wallets and infrastructure linked to the group before it announced its retirement in May 2024. No law enforcement agency has publicly identified or charged the individuals behind the operation, so all attributions of activity and identity in this report come from private security researchers rather than courts or regulators.
Connected Entities
1 entities- + 13 more
Timeline(10 events)
April 2023
Security researchers first observe activity later attributed to the wallet-drainer operation that became known as Pink Drainer.
The RegisterJune 2023
The Register reports that Pink Drainer stole approximately $3.3 million from about 2,300 victims via Discord-based journalist-impersonation phishing since April 2023, and explains that the group's name derives from a stolen-funds address resolving to the ENS domain pink-drainer.eth.
The RegisterJune 2023
BleepingComputer and Business Standard report that Pink Drainer-linked phishing compromised 1,932 victims' Discord/Twitter accounts, stealing roughly $3 million, with targets reportedly including accounts connected to OpenAI CTO Mira Murati, Steve Aoki, Orbiter Finance, and Starknet.
BleepingComputer / Business Standard9 September 2023
Vitalik Buterin's X account is compromised via a SIM-swap attack on his phone carrier and used to post a fake commemorative NFT link; on-chain analysis links the roughly $691,000-$700,000 in resulting thefts to Pink Drainer software.
DecryptDecember 2023
A single victim reportedly loses about $4.3-4.4 million in Chainlink (LINK) tokens to a Pink Drainer-linked phishing contract; a Dune Analytics dashboard cited in coverage puts cumulative losses at roughly $18.7 million across about 9,068 victims as of December 19, 2023.
CryptoPotato / CointelegraphMarch 2024
An email phishing campaign linked by a security researcher to the Pink Drainer kit targets creditors of bankrupt firms FTX and BlockFi, reportedly using a leaked MailerLite email list, resulting in at least $5 million in reported thefts.
The Block17 May 2024
ZachXBT reports that Pink Drainer announced its retirement in a private Telegram channel, stating it had reached its goal, would wipe stored data, and would not return; press coverage cites cumulative theft figures ranging from about $75 million to $85 million across roughly 20,000-21,000+ victims.
The BlockJune 2024
A wallet linked to Pink Drainer reportedly loses 10 ETH (about $30,000) to an address-poisoning scam after being tricked into sending funds to a look-alike wallet address, according to blockchain compliance platform MistTrack.
CryptoTimesJuly 2024
CryptoTimes and other outlets report on the address-poisoning loss and reiterate that Pink Drainer's lifetime theft total is estimated at $85.3 million since it began operating in July 2023 per the researchers' dashboard, alongside its May 17 retirement announcement.
CryptoTimes2024
Wallet-drainer services as a category, including Inferno Drainer, continue and scale up operations after Pink Drainer's exit; a Scam Sniffer report finds drainers stole about $494 million industry-wide in 2024, a 67% increase over 2023.
Scam Sniffer / BleepingComputerDecision Log
- hash: AvEbBfcTnA518QsVPwoA8yFA3FyGtmHWxEqrgR1vGiQd
This investigation is cryptographically anchored to the Solana blockchain (1 event). 19 of 22 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 5/4/2026, 4:05:04 PM
last updated: 9/1/2026, 4:16:58 AM
5 viewsavoid.net — verified advice for a post-truth world