Wallet drainer
A malicious script, sold as a kit, that induces victims to sign approvals or messages that let the attacker empty their wallets.
Drainers run behind fake airdrops, mints and cloned DEX sites. The victim connects a wallet, confirms an approval styled as "Claim" or "Verify", and the drainer transfers the approved tokens later. Hardware wallets do not prevent it; reading the prompt and using a separate burner wallet for unfamiliar sites do.