Pink Drainer
A wallet-drainer-as-a-service crew that, per ZachXBT and Scam Sniffer, stole more than $75–85M from roughly 20,000 victims, often via hijacked X/Discord accounts pushing phishing links, before announcing its 'retirement' in 2024.
Also known as: Pink Drainer
Overview
Pink Drainer was a prominent "drainer-as-a-service" operation that supplied wallet-draining phishing tools to affiliates. It became known for impersonation and account-takeover campaigns: compromising verified X (Twitter) and Discord accounts — including those of projects, journalists, and security firms — to post phishing links that tricked followers into signing malicious transactions or approvals. [1][2]
Notable activity
Pink Drainer was tied to high-profile social-account hijacks during 2023–2024. Security firm SlowMist tracked its fund flows, noting a portion of proceeds was parked in yield-bearing assets (e.g. MakerDAO's sDAI). As with other DaaS crews, the take was split automatically in code between the affiliate and the drainer's developers. [1][2]
Scale and exit
Investigator ZachXBT reported Pink Drainer announced a "retirement" in 2024; Scam Sniffer data indicated it had been used to steal more than $75 million — later estimates exceeded $85 million — from roughly 20,000 victims in about a year. Its exit, like Monkey Drainer's before it, simply shifted affiliates toward rival drainers. [1][2]
Bracketed numbers refer to the numbered sources listed below.
People & entities involved
Sources (2)
- Pink Drainer 'steps back from the grind' after stealing $75M from victims — Protos
- Pink, Pussy, Venom, Inferno — Drainers coming for a crypto wallet near you — Cointelegraph / Bitcoin Insider
See also
- Angel DrainerOrganizations & groupsA wallet-drainer-as-a-service operation (≈85/15 affiliate/developer split) specialized in EVM chains. Most notably, Angel Drainer malware was used in the December 2023 Ledger Connect Kit supply-chain attack, which drained roughly $500K–$600K from DeFi users in a few hours.
- Monkey DrainerOrganizations & groupsAn early, prolific wallet-drainer-as-a-service crew (active into early 2023) that focused on high-value NFTs and is estimated to have facilitated roughly $13–16.5M in theft before announcing it was 'shutting down' and pointing affiliates to rival drainers.
- Ledger Connect Kit hackProjects
This page was last updated on Jun 8, 2026. View revision history.