Fake PYRA airdrop page event-pyra.fun promotes counterfeit token claim leading to wallet-draining activity
MalwareTips reports a PYRA airdrop scam that promotes event-pyra.fun as a place for early community members to claim free tokens, borrowing the PYRA/PyraChain project name. MalwareTips describes the campaign as a coun…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reports a PYRA airdrop scam that promotes event-pyra.fun as a place for early community members to claim free tokens, borrowing the PYRA/PyraChain project name. MalwareTips describes the campaign as a counterfeit distribution leading to wallet-draining activity and advises not to pursue the claim through event-pyra.fun. The underlying project is not accused of operating the page. MalwareTips notes the historical page could not be reproduced and no signing payload, receiving address or transfer was independently tested.
How the scam works
Wallet-drainer lures copy a familiar crypto brand and offer something free: a vote reward, an airdrop, an early-supporter allocation or a trading bonus. The visitor is directed to a 'Connect Wallet' button. Connecting alone usually only shares a public address, but the next prompts can ask for a signature, a token approval or a transfer, and these may be labelled as a claim or vote. An approval or signed permission can let the operator move tokens later without asking again, and blockchain transfers are rarely reversible.
MalwareTips says the right response depends on what was actually approved. Someone who only viewed the page has less to do than someone who signed a transaction or typed a recovery phrase. Check your wallet history or a blockchain explorer, revoke any token permissions you don't recognise, and if a recovery phrase was entered, move the remaining funds to a new wallet. Find claims and events only through a project's official website and verified accounts.
Early-supporter allocations are attractive because they suggest a reward for loyalty before a token launches. The PYRA/PyraChain project is impersonated and is not involved.
Source
MalwareTips, "PYRA Airdrop Scam" (published 25 October 2026).
Red flags
- A reward, airdrop or event page on event-pyra.fun rather than PYRA's official site.
- A 'Connect Wallet' button as the first step to claim.
- Signature or approval requests that don't clearly match a simple claim.
- Requests for a recovery phrase or private key.
- Urgency, countdowns or limited allocations.
If you were targeted
- 1Don't connect a wallet to event-pyra.fun or sign anything there.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.