# Phishing · Drain Watch

5 incidents, 2 live. JSON: https://drains.watch/t/phishing.json · RSS: https://drains.watch/t/phishing/feed.xml

- [COLDCARD's X account posts fake 'security migration' phishing link](https://drains.watch/i/coldcard-x-account-phishing-post-oct-2026) (live, Medium, Contained, since Oct 11, 2026)
- [Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023](https://drains.watch/i/whale-wallet-25m-drain-aug-2026) (live, Critical, Still active, since Aug 12, 2026)
- [Wallet holder loses $1.65M after signing an unlimited token approval on a fake exchange](https://drains.watch/i/fake-exchange-unlimited-approval-1-65m-jul-2026) (closed, Critical, Still active, since Jul 3, 2026)
- [Hijacked Arbitrum DAO X account posts fake 'snapshot confirmed' airdrop linking to phishing site](https://drains.watch/i/arbitrum-dao-x-account-hijack-feb-2026) (closed, Medium, Partly contained, since Feb 3, 2026)
- [North Korea-linked KONNI targets blockchain developers with an AI-generated PowerShell backdoor](https://drains.watch/i/konni-ai-generated-backdoor-blockchain-developers-jan-2026) (closed, Medium, Still active, since Jan 22, 2026)