PastHigh✕Still active
Ethereum user loses 999,999 USDT after signing a phishing token approval
Ethereum USDT holder
On 8 July 2026 an Ethereum user signed a phishing token approval and lost 999,999 USDT, nearly $1M, according to Scam Sniffer. The attacker used multicalls and pulled the funds out in three transactions. One signature on a fake site was enough to empty the stablecoin balance.
Why this severity: $1000K reported stolen, 1 victims, still active.
- Started
- Jul 8, 2026
- Closed
- Jul 9, 2026
- Chains
- Ethereum
- Reported stolen
- $1000K
- Victims
- 1
At risk
- Ethereum USDT holder
- Ethereum wallets
What to do now
- Review and revoke approvals on revoke.cash, starting with unlimited stablecoin approvals to contracts you don't recognise.
- If a drain is under way, move remaining assets to a fresh wallet immediately.
Stay safe
Am I affected?
Any approval you gave to a site you no longer use may still be live. Check your approvals now, especially for USDT and USDC.
What to do now
- Review and revoke approvals on revoke.cash, starting with unlimited stablecoin approvals to contracts you don't recognise.
- If a drain is under way, move remaining assets to a fresh wallet immediately.
How to avoid this
- A request to approve or permit a stablecoin on a claim, airdrop or 'verify wallet' page is almost always a drainer.
- Use a separate hot wallet for new sites and keep savings in a wallet that never connects to dapps.
- Keep transaction simulation and drainer warnings on in your wallet.
Timeline 2
News & write-ups ›1
How this method works
A transaction that looks like a mint, claim or swap actually gives the attacker unlimited permission to spend your tokens or move all your NFTs. Read about malicious token and nft approvals →
Follow new drains and updates in your feed reader or Telegram RSS bot.