Need help? Support
BITCOIN
Tether Dominance USDT.D

Which EVM chains were drained?

Published Updated 421 words 2 min read

TLDR

Ethereum (ETH), BNB Chain (BNB), and Base (BASE) saw the largest share of recent wallet drains across EVM networks, with additional reports on Arbitrum, Polygon, Optimism, Linea, Zora, and Avalanche per the coverage above. The biggest losses concentrated on Ethereum, BNB Chain, and Base, where Ethereum accounted for about 51%, BNB Chain 24%, and Base 8% of stolen funds in early tallies, as reported in a media summary linked above. Most victims lost under $2,000 per wallet, suggesting a wide?net, low?value attack pattern, with details in the articles linked above.

  1. Main impact: Ethereum, BNB Chain, Base saw most losses, with smaller reports on other EVM chains per the article above.
  2. Scale: about $107,000 across hundreds of wallets, typically under $2,000 per wallet, per the reports linked above.
  3. Cause: still under investigation; several researchers point to possible phishing emails spoofing MetaMask in the coverage above.

Deep Dive

1. Networks Affected

Initial tallies show drains across many EVM chains, with the largest shares on Ethereum, BNB Chain, and Base. One report cited Ethereum at about 51% of losses, BNB Chain at 24%, and Base at 8% (media summary). Another report listed additional networks where smaller drains were observed, including Arbitrum, Polygon, Optimism, Linea, Zora, and Avalanche (news coverage).

What this means

If you hold assets on these EVM chains, it is prudent to monitor wallet activity and approvals and be cautious about unsolicited upgrade prompts.

2. Attack Pattern

The campaign appears automated and cross?chain, taking modest amounts from many wallets rather than large sums from a few. Several summaries put total losses at roughly $107,000 so far, typically under $2,000 per wallet, consistent with a wide?net drainer strategy (report). Investigators noted the receiving address clustering and ongoing transfers, indicating an active, evolving incident (coverage).

What this means

Small, repeated drains can avoid early alarms, so reviewing approvals and recent transactions can help detect issues sooner.

3. Suspected Vector

The root cause is still being investigated. Several reports highlight a possible phishing vector via spoofed MetaMask emails that prompted users to sign malicious approvals (analysis). Security firms urged users to revoke suspicious approvals while monitoring wallets, emphasizing the campaigns automated nature (summary).

What this means

Be skeptical of email prompts and avoid signing approvals from unknown contracts; use trusted approval reviewers before interacting further.

Conclusion

The wallet?draining incident hit multiple EVM chains, with the largest impact on Ethereum, BNB Chain, and Base, and smaller reports across other networks. Losses per wallet were small but scaled across hundreds of addresses, consistent with an automated approval?based drainer. The suspected vector involves phishing emails spoofing wallet providers, and the investigation is ongoing.

Educational information only. Crypto markets are volatile and this is not financial advice.


Top