WLT-DRAINERImpact

Wallet Drainer dApp

Crafted dApp tricks the victim into signing eth_signTypedData / setApprovalForAll / permit — instant drain of NFTs and tokens.

§ Where this technique fits

WLT-DRAINER is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 4 on average.

§ Dossiers chaining this technique

Wallet drainer dApp → setApprovalForAll → instant theft
Victim connects their wallet to a phishing dApp (fake mint / fake airdrop). One click on 'Confirm' calls setApprovalForAll on every valuable NFT collection — drained moments later.
step 4 / 6

§ What commonly comes next

01
Exfiltration Over C2 Channel
T1041 · Exfiltration
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Wallet drainer dApp → setApprovalForAll → instant theft

§ What commonly comes next