# Slowmist · Drain Watch

4 incidents, 2 live. JSON: https://drains.watch/t/slowmist.json · RSS: https://drains.watch/t/slowmist/feed.xml

- [Fake 'human verification' bookmarklet hijacks Fomo account, drains about $48K from embedded wallet](https://drains.watch/i/fomo-bookmarklet-fake-verification-oct-2026) (live, Medium, Still active, since Oct 8, 2026)
- [Hijacked Snap Store publisher accounts push fake Exodus, Ledger Live and Trust Wallet apps](https://drains.watch/i/snap-store-fake-wallet-updates-expired-domains-jan-2026) (closed, High, Still active, since Jan 21, 2026)
- [User loses $1.08M in Aave LBTC (aEthLBTC) to a malicious permit signature](https://drains.watch/i/permit-phishing-1-08m-aethlbtc-jan-2026) (closed, Critical, Contained, since Jan 3, 2026)
- [Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss](https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025) (live, Critical, Partly contained, since Dec 5, 2025)