Quark Drainer
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·3R5aCt…T89JSummary
Quark Drainer is a commercially distributed Drainer-as-a-Service (DaaS) toolkit operated under the brand Quark Lab. First advertised on cybercrime forums in late 2023, it supports wallet draining across more than 70 blockchains and 480 wallets — including EVM chains, Solana, TON, TRON, and XRP — and is sold for a flat fee of $5,000 with no ongoing revenue-share commission to operators. Security researchers at Blockaid identified Quark Lab as the most prolific drainer operation observed in their 2025–2026 tracking dataset. No law enforcement action or OFAC designation against the operators has been publicly confirmed as of August 2026.
Connected Entities
14 entities · 60 linked investigations- Quark Drainer→mentioned with→Phantom Wallet(75%)
- Quark Drainer→mentioned with→Solana(70%)
- Quark Drainer→mentioned with→Coinbase(70%)
- Quark Drainer→mentioned with→Polygon(70%)
- Quark Drainer→mentioned with→Binance(70%)
- Quark Drainer→mentioned with→Arbitrum(60%)
- Quark Drainer→mentioned with→Ethereum(60%)
- Quark Drainer→mentioned with→Optimism(60%)
- Quark Drainer→mentioned with→Uniswap(60%)
- Ethereum→mentioned with→Coinbase(60%)
- + 40 more
Timeline(6 events)
2 November 2023
Earliest confirmed forum advertisement for Quark Drainer appears on ewebdiscussion.com, listing $5,000 pricing, EVM chain support, and Seaport/Permit2 capabilities. A $4,000 holiday discount was promoted for November 15, 2023.
ewebdiscussion.com forum postApril 2024
Intel 471 documents Quark Lab actor offering a combined Malware-as-a-Service package including the drainer and a cross-platform infostealer (Quark Stealer) targeting macOS, priced at $3,000/month for the infostealer component.
Intel 471 blog — macOS Is Increasingly Targeted by Threat Actors2025
KELA Cyber reports underground market chatter for macOS infostealers, including Quark Stealer, peaked in 2025. The broader wallet drainer market recorded $84 million in losses for the full year — an 83% decline from 2024 — while Quark Lab continued active operations.
KELA Cyber — The Rise of macOS Infostealers: 2025 in Review; CryptoNewsOctober 2025
Security Alliance publishes State of Drainers Vol. 1, documenting the broader drainer ecosystem including operators such as Inferno, Rublevka, Eleven, and Vanilla. Quark Lab is tracked as active during this period by Blockaid.
Security Alliance — State of Drainers Vol. 12026
Blockaid publishes findings identifying Quark Lab as the most prolific drainer operation in its tracking dataset, noting support for 70+ blockchains and 480 wallets. Airdrop phishing templates targeting new chain launches are specifically called out.
Blockaid Blog — How Wallet Drainers Exploit New Blockchain Launches9 July 2026
Updated Quark Drainer advertisement posted on crdweb.cc advertising support for 440+ wallets, 90+ networks, EVM, Solana, TON, TRON, XRP; 400+ landing pages; and a private community of 200+ users. Price remains $5,000.
crdweb.cc carding forum advertisementDecision Log
- slot 464778252 · hash 2iSAz5yUfac59ndCV57PrDUsLPLn8bPgimtjJgyvNrsp
- slot 451571536 · hash 8Bi4jVwVRBgdQPow5QUW51YccFiRxD9KkMMB49c2qRjT
- slot 443520049 · hash 475JAsLM2tjFU9e64Yw9bahfLrtf5huUHYqgfijM1fY3
- slot 443520036 · hash ChRfAgYr3c5q1RcLD6ZPLSwjB1FPnrNwGXVHPHfxFg7V
- slot 443504195 · hash GxZcrLcZ8eArNRdRiCRd7ch3VHFhrLmZNmUgoCQEptMG
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 15 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/4/2026, 12:35:39 PM
last updated: 8/26/2026, 10:07:33 AM
12 viewsavoid.net — verified advice for a post-truth world