Glossary
Solana NFT drain
Unauthorized outbound movement of Metaplex, compressed (cNFT), or marketplace-listed NFTs from a Solana wallet — often bulk transfers in minutes after a malicious sign.
Common patterns
- Bulk pNFT or cNFT transfers to one fresh wallet or labeled CEX deposit
- Malicious delegate or authority change, then automated sweeps
- Fake mint or listing sites that trick you into signing transfer instructions
- Marketplace listing txs that look like sales but were signed under duress
Not every NFT tx is a drain
Magic Eden and Tensor listings, Jupiter swaps with NFT legs, and rent reclamation can look alarming in Solscan. A single-signature decode ($5) or incident report ($20) separates marketplace activity from unauthorized outflows.
What to document
- Wallet address (base58) and each outbound NFT transfer signature
- Collection mint or cNFT asset id where visible on Solscan
- UTC time of the first suspicious transfer
Related terms