We review vendors based on rigorous testing and research, and also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.

Learn more

Advertising Disclosure

Crypto Scam Exploits Discord Bots, Steals From 30,000 Wallets

Image by AppsHunter.io, from Unsplash

Crypto Scam Exploits Discord Bots, Steals From 30,000 Wallets

Reading time: 2 min

Last Updated: May 10, 2025

Written by Kiara Fabbri Multimedia Journalist
Fact-Checked by Sarah Frazier Content Manager

A Discord-based phishing operation called Inferno Drainer has stolen $9 million from over 30,000 crypto wallets using fake bots and smart contracts.

In a rush? Here are the quick facts:

Inferno Drainer stole $9M in six months via Discord phishing scams.
Over 30,000 crypto wallets have been compromised since late 2023.
Victims unknowingly sign malicious transactions draining their funds instantly.

A highly organized cybercrime group known as Inferno Drainer has stolen over $9 million from more than 30,000 crypto wallets in just six months, according to new findings from Check Point Research.

The group, which publicly claimed to shut down operations in late 2023, appears to remain active—employing advanced evasion techniques to continue draining digital assets undetected.

Inferno Drainer targets victims through Discord phishing campaigns, primarily by impersonating Collab.Land, a widely used verification bot in crypto communities.

Users are tricked into connecting their crypto wallets to fake websites that mimic legitimate platforms. Once connected, victims unknowingly authorize malicious transactions that instantly transfer their funds to attacker-controlled wallets.

The operation’s sophistication lies in its layered evasion strategy. Inferno Drainer deploys single-use smart contracts to bypass blacklist detection, encrypts command-and-control infrastructure within blockchain data to obscure server details, and rapidly cycles through new domains to avoid takedown efforts.

Among the most devastating breaches, some victims lost over $1 million in a single transaction. Despite announcing their closure months ago, the group’s infrastructure remains operational, raising concerns over continued or copycat attacks.

Cybersecurity experts urge crypto users to verify all URLs before connecting wallets, avoid interacting with unverified Discord bots, and consider using “burner” wallets with limited funds when engaging in airdrops or new DeFi projects.

Kiara Fabbri

Written by: Kiara Fabbri

Hi, I’m Kiara Fabbri a Tech News Writer at WizCase. I'm a multimedia journalist with a keen interest in innovative and immersive news storytelling. Fluent in three languages—Italian, English, and Spanish—I'm deeply engaged in all facets of news reporting. I am currently undertaking a Ph.D. exploring VR applications in journalism. Following my studies in psychology (BSc) and political psychology (MSc), I embarked on a three-year journey across South America. During this time, I undertook a 4000 km solo bicycle trip from Chile to Brazil. There, I camped, cooked on the road, and volunteered in various facilities. It was during these travels that I discovered my passion for journalism. Subsequently, I pursued a Master's program in journalism innovation and enterprise. My career in journalism has seen me produce VR immersive experiences covering a range of topics. These include documenting an Anti Militaristic raid of a NATO Base, life in the Brazilian Favelas, the recent violent protest clashes in Buenos Aires and finally social projects run by Skaters in the Argentinian ghettos. In addition to my journalistic endeavours, I also practice parkour, a discipline I have cultivated over several years now. I love to make the most of this skill in my journalistic style; for example, it has enabled me to capture dynamic footage from heights during the recent violent clashes in Buenos Aires. There, I scaled heights and employed a long stick on my camera to create aerial 360° views. Through my dedication to pushing the boundaries of journalism, I am committed to amplifying voices, sparking meaningful conversations, and driving positive change in the world.

Did you like this article? Rate it!

I hated it I don't really like it It was ok Pretty good! Loved it!

We're thrilled you enjoyed our work!

As a valued reader, would you mind giving us a shoutout on Trustpilot? It's quick and means the world to us. Thank you for being amazing!

Rate us on Trustpilot

0 Voted by 0 users

Title

Your email Please enter a valid email address.

Comment

Thanks for your feedback

Please wait 5 minutes before posting another comment.

Comment sent for approval.

Leave a Comment

Show more...

Share & Support

WizCase is reader-supported so we may receive a commission when you buy through links on our site. You do not pay extra for anything you buy on our site — our commission comes directly from the product owner. Some providers are owned by our parent company. Learn moreWizcase was established in 2018 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, Intego and Private Internet Access which may be ranked and reviewed on this website. The reviews published on Wizcase are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article..