Skip to main content
AVOID.NET
Sign in

Quark Drainer

avoid.net/quark-drainer→0/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3R5aCt…T89J

Summary

Quark Drainer is a commercially distributed Drainer-as-a-Service (DaaS) toolkit operated under the brand Quark Lab. First advertised on cybercrime forums in late 2023, it supports wallet draining across more than 70 blockchains and 480 wallets — including EVM chains, Solana, TON, TRON, and XRP — and is sold for a flat fee of $5,000 with no ongoing revenue-share commission to operators. Security researchers at Blockaid identified Quark Lab as the most prolific drainer operation observed in their 2025–2026 tracking dataset. No law enforcement action or OFAC designation against the operators has been publicly confirmed as of August 2026.

Connected Entities

14 entities · 60 linked investigations
Organizations
□Polygon54□Quark Drainer□Ethereum□Fantom (Sonic Labs)□Inferno Drainer□Trust Wallet□Arbitrum□wallet drainers□Binance□Solana□Phantom Wallet□Optimism
Protocols
⌂Uniswap
Tokens
♦Coinbase
Relationships
  • Quark Drainer→mentioned with→Phantom Wallet(75%)
  • Quark Drainer→mentioned with→Solana(70%)
  • Quark Drainer→mentioned with→Coinbase(70%)
  • Quark Drainer→mentioned with→Polygon(70%)
  • Quark Drainer→mentioned with→Binance(70%)
  • Quark Drainer→mentioned with→Arbitrum(60%)
  • Quark Drainer→mentioned with→Ethereum(60%)
  • Quark Drainer→mentioned with→Optimism(60%)
  • Quark Drainer→mentioned with→Uniswap(60%)
  • Ethereum→mentioned with→Coinbase(60%)
  • + 40 more
Also appears in
Polygon·54StableMagnet·2Shibarium·28JUDAO·18Shibarium Bridge·32Andean Medjedovic·2Ionic Money·14Allo Protocol·57AnubisDAO·2SushiSwap RouteProcessor Exploit·54+ 50 more

Connected Through

13 shared actors · 507 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Quark Drainer?

Timeline(6 events)

2 November 2023

Earliest confirmed forum advertisement for Quark Drainer appears on ewebdiscussion.com, listing $5,000 pricing, EVM chain support, and Seaport/Permit2 capabilities. A $4,000 holiday discount was promoted for November 15, 2023.

ewebdiscussion.com forum post

April 2024

Intel 471 documents Quark Lab actor offering a combined Malware-as-a-Service package including the drainer and a cross-platform infostealer (Quark Stealer) targeting macOS, priced at $3,000/month for the infostealer component.

Intel 471 blog — macOS Is Increasingly Targeted by Threat Actors

2025

KELA Cyber reports underground market chatter for macOS infostealers, including Quark Stealer, peaked in 2025. The broader wallet drainer market recorded $84 million in losses for the full year — an 83% decline from 2024 — while Quark Lab continued active operations.

KELA Cyber — The Rise of macOS Infostealers: 2025 in Review; CryptoNews

October 2025

Security Alliance publishes State of Drainers Vol. 1, documenting the broader drainer ecosystem including operators such as Inferno, Rublevka, Eleven, and Vanilla. Quark Lab is tracked as active during this period by Blockaid.

Security Alliance — State of Drainers Vol. 1

2026

Blockaid publishes findings identifying Quark Lab as the most prolific drainer operation in its tracking dataset, noting support for 70+ blockchains and 480 wallets. Airdrop phishing templates targeting new chain launches are specifically called out.

Blockaid Blog — How Wallet Drainers Exploit New Blockchain Launches

9 July 2026

Updated Quark Drainer advertisement posted on crdweb.cc advertising support for 440+ wallets, 90+ networks, EVM, Solana, TON, TRON, XRP; 400+ landing pages; and a private community of 200+ users. Price remains $5,000.

crdweb.cc carding forum advertisement
Provenance & Audit Trail
Anchored on SolanaVerify on-chain15 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (3 events). 15 of 19 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 8/4/2026, 12:35:39 PM

last updated: 8/26/2026, 10:07:33 AM

9 views

avoid.net — verified advice for a post-truth world