Skip to content
Home » Insights » A DeFi swap that drained a wallet — and what we got back

A DeFi swap that drained a wallet — and what we got back

CASE FILE · CFH-CS-04
Vector: token-approval drainerInstrument: ETH, USDCLoss: CAD 52,400Location: Toronto, CanadaTimeline: minutesRecovered: 19%

Reported operator: GSwap ↗

How it began

I connected my wallet to what looked like a new swap platform and approved a transaction to “enable trading.”

The trap

That approval gave the contract permission to move my tokens. Within minutes the wallet was emptied to addresses I did not control.

One signature, and it was gone before I could close the tab.

What we did

  1. We identified the malicious approval and helped you revoke all open permissions immediately.
  2. We traced the drained tokens to a consolidation wallet and then to an exchange.
  3. We filed a freeze request for the small portion that reached a compliant exchange.
  4. We set wallet-monitoring alerts in case the rest moved again.
19%

recovered. We are honest: drainer cases are among the hardest.

Red flags we saw

  • A swap site asking for unlimited token approval
  • No audit, no team, no history
  • Pressure to act fast on a “new launch”

Think your case looks like this one? Request a free, confidential review →