Wallet drained? What to do in the first 10 minutes

Your crypto wallet was drained or a token disappeared. Act fast: find out if it was an approval or a leaked seed phrase, revoke what is left and move funds safely.

Speed matters: drainer bots keep sweeping a compromised wallet for hours. Here is the order of actions.

1. Find out how it happened

• Only some tokens gone, native coin (ETH/BNB) still there? Most likely an approval or a signed permit was abused. Revoking stops further theft.
• Everything gone, including gas coin, or new transactions you didn't sign? Your seed phrase or private key is compromised. Revoking will not help — the attacker controls the wallet.

2. If it was an approval

1. Open Revokly, scan the wallet on all 6 chains.
2. Revoke every approval to unknown contracts and every unlimited approval first.
3. Check the transaction history for the spender that took your tokens and make sure it's revoked on every chain.

3. If the key or seed leaked

1. Create a new wallet with a new seed phrase on a clean device.
2. Move what's left immediately. If the wallet has no gas, a sweeper bot probably steals any gas you send — consider a bundled rescue (e.g. Flashbots-based tools).
3. Never import the old seed anywhere again.

4. Report and document

Save transaction hashes and the scam site URL. Report to the exchange where funds went (they can sometimes freeze), and to the phishing lists of your wallet provider.

Prevent the next one

Use a separate "hot" wallet for new dApps and airdrops, keep savings in a hardware wallet, and scan approvals regularly.