盗取 - EVM 钱包资产提取工具（ TypeScript ）

项目说明

🫗 Drain

盗取 is an open-源码 E rescue and token migration 工具. Mo gas tokens and ERC-20s from one 钱包 to another quickly when you are migrating wallets, consolidating long-tail assets, or rescuing funds from a 钱包 you still control.

> Non-custodial. Open 源码. You connect your own 钱包 and appro transaction.

![GitHub stars]()
![GitHub forks]()

!Drain preview

---

Why Drain exists

Moving a crypto 钱包 is still too manual. If you have a 钱包 full of small ERC-20 balances across E, you usually have to:

1. Find every token.
2. Open each token contract or 钱包 asset page.
3. Copy the new destination address repeatedly.
4. Sign one transfer after another.
5. Hope you did not miss dust, long-tail tokens, or the native gas token.

盗取 turns that into a focused rescue/migration flow: connect the 源码 钱包, review discovered tokens, choose what to mo a destination, and sign the transfers.

When should I use Drain?

Drain is built for situations like:

Drain is not a seed phrase recovery service, pri recovery 工具, mixer, custody product, or way to mo you do not own or control.

What Drain does

What Drain does not do

Safety checklist

Before using 盗取, especially in a stressful compromised-钱包 situation:

For more detail, review the safety checklist above and inspect the 源码 before connecting wallets.

Run locally

Running locally is the best way to inspect exactly what the app does before connecting a 钱包.

Then open

Required en :

the project

The default test run skips li suites when MORALIS_API_KEY is not
configured. Add the key to the ignored .en file to run those live API
checks locally.

Tech stack

Architecture

Contributing

Contributions are welcome, especially around safety, chain support, simulation, and 钱包 UX.

Good areas to improve:

Local workflow:

Please keep security-sensitive UX conser: users should always know exactly what token, amount, destination, and 网络 they are signing for.

Responsible use

盗取 is intended for moving assets that you own or are authorized to control. Do not use this project for theft, phishing, unauthorized transfers, or deception. The maintainers do not endorse malicious use.

Roadmap ideas

History

盗取 began as an ETHGlobal project and has continued as an open-源码 钱包 migration and rescue 工具.

Read the original project page:

License

See repository license information before reuse.

技术栈

开发语言：未知

项目类型：EVM 钱包资产提取工具（TypeScript）

Star 数：0

功能特点

这是一套EVM 钱包资产提取工具（TypeScript），代码结构清晰，适合安全研究人员学习加密货币钱包安全、剪贴板劫持、私钥碰撞等攻击面的原理与实现。项目涵盖了地址生成、私钥管理、链上交互、剪贴板监控等核心模块，对理解区块链资产安全机制具有较高的研究价值。

从技术实现角度看，此类项目的技术点在于：私钥熵源与生成算法、链上余额查询接口、剪贴板监听与地址替换逻辑、以及多链钱包地址的编码差异。本项目在这些方面提供了可运行的实现，研究者可以在此基础上进行安全分析或防御研究。

使用说明

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境（Python / Node.js / Go / C# 等）。

3. 按照 README 中的步骤安装依赖、配置环境变量。

4. 运行脚本或编译程序，观察输出结果。

注意：本项目仅供安全研究与学习使用，请勿用于任何非法用途。

研究价值

对于从事区块链安全、渗透测试或恶意样本分析的研究者来说，这套源码是一个很好的研究对象。通过阅读代码，可以学习到加密货币钱包的攻击面、剪贴板劫持的检测方法、私钥碰撞的概率原理、以及链上资产的追踪技术等关键知识点。

同时，项目中的代码组织和模块划分，也展示了安全工具在工程化方面的实践经验。理解这些攻击工具的实现原理，对后续开发防御检测工具、建立资产风控模型也很有帮助。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。若涉及第三方权益，请联系删除。