# Socket · Drain Watch

2 incidents, 2 live. JSON: https://drains.watch/t/socket.json · RSS: https://drains.watch/t/socket/feed.xml

- [16 fake Rabby and OKX Wallet add-ons on Firefox stole recovery phrases and private keys](https://drains.watch/i/firefox-fake-rabby-okx-wallet-extensions-oct-2026) (live, Medium, Partly contained, since Oct 5, 2026)
- [19 Chrome and Edge extensions hid a wallet drainer that hijacked Connect Wallet and Swap buttons](https://drains.watch/i/chrome-edge-19-extensions-wallet-drainer-aug-2026) (live, High, Partly contained, since Aug 30, 2026)