Sisi

Web3 Security Researcher| |Blockchain| Built @me0wverse | check the highlights

[Sisi @sisihacks]

SECURITY WITH SISI
This week’s topic: Telegram wallet Drainers

If you keep up some of these habits, you'll be their next victim.

◈ Using your main wallet for every site and interaction
◈ Connect wallet” request from telegram bots
◈ Never revoking access

There's an influx in telegram based drainer scams lately. Not the old, boring kind. These ones are slick, interactive and feel legit.

One major method i noticed is

Fake telegram bots or account pretending to buy OG usernames.

Let’s say you’re offered the chance to sell your OG username.
You click the bot, connect your wallet, approve a “message signature”... and boom
Your wallet’s empty.

The bot sends a malicious signature request disguised as a verification or payment step.

You think it's harmless. “Just signing a message"

Some signatures give access to session keys used in wallet drainers like Angel Drainer.
These keys stay active and can drain assets over time even days later.

Recently a user signed into a “username marketplace bot” on Telegram. They just clicked through. Didn’t notice the bot used a fake domain and asked for a signature.
20 minutes later, all their ETH and USDC gone.

The bot? Still running. New victims daily.

I have personally encounter a few scammers and entertain chats with them cause i like learning their tactic that way.

Here is the plot twist?

These drainers are sold as kits: Plug and play tools scammers rent for 30% of the stolen funds.

They even offer customer support
Welcome to Drainer-as-a-Service.
Popular ones are :
▪ Angel Drainer
▪ Inferno Drainer (now shut down but clones exist)
▪ VenomKit and many more

Here’s how to stay safe:

◈ Never connect your wallet to random telegram bots or websites, especially those offering usernames, NFT or token claims.

◈ Use burner wallets

◈ Stay updated, wallet drainers evolve monthly.
Tools like Revoke cash
Blowfish
Pocket Universe can alert you to shady approvals/signatures.

◈ Don’t trust, verify.
Always check the URL, the project and the community before you click.

Telegram, discord, fake Twitter job offers… drainers are where you are.

Keep your wallet cold and your security habits clean

Thank you for reading, stay safu and don’t get rekt

[Sisi @sisihacks]

@thatwagmigirl Crazy times

[Sisi @sisihacks]

@ayotheregal Sage plant are native to the Mediterranean, too much rain here lately

[Sisi @sisihacks]

I know my sage plant is straight up cursing me out rn cause it's about to rain again. Sorry sweedy, this ain't Italy.... it's Ibadan 🤧

[Essential @only01Essential]

Meanwhile i saved ecosystem from a massive $800m hack and the team is offering me $4k.

Whitehats lose everytime.

[Sisi @sisihacks]

@TheHermians Let's get it

[Hermians @TheHermians]

Transmission Found

https://t.co/iHjdclANVm

[Sisi @sisihacks]

@frans6cur Hi bestie 🤣🤣

[Sisi @sisihacks]

@myacxt I wish

[Sisi @sisihacks]

https://t.co/niUZvPm8At

[Sisi @sisihacks]

@thatwagmigirl Thank you barb

[Sisi @sisihacks]

@_Essssie Thank youuu

[Sisi @sisihacks]

https://t.co/niUZvPm8At

[Yahoo!ニュース @YahooNewsTopics]

【長友佑都 僕らには大きな夢がある】
https://t.co/LLN1aTD6d3

[Sisi @sisihacks]

@0xGeeky Thank you frosty

[Sisi @sisihacks]

@Mide_ox Thank you mide

[Sisi @sisihacks]

@ZssVAl Thank you

[Sisi @sisihacks]

@TinukeETH @frans6cur I know write, it took alot for me to post it. I thought it was too raw and vulnerable 😅

[Sisi @sisihacks]

@xeverade Thank you chief

[Sisi @sisihacks]

@frans6cur Thank you 6

[Yahoo!ニュース @YahooNewsTopics]

【神奈川県教委 教諭5人を懲戒免職】
https://t.co/yTRdLpko8S