Scam Sniffer flags claim-rewards-eigen.xyz as wallet drainer
Crypto security service Scam Sniffer added claim-rewards-eigen.xyz to its blocklist on October 13, 2026 and classified it as a wallet drainer that uses Eigen-style reward branding.
- First reported
- Reports
- 1
Source: davefinances.com · published
What happened
Dave Finances reported that crypto security service Scam Sniffer added claim-rewards-eigen.xyz to its real-time blocklist shortly after October 13, 2026 began (Cairo time) and classified it as a wallet drainer. It was one of five new indicators added within about an hour.
The domain combines "claim" and "rewards" with "Eigen", language associated with token incentives and staking. The Eigen Foundation has separately warned about fraudulent sites impersonating its services and tells users to verify claim pages through its official channels.
How the scam works
A wallet drainer tries to get you to approve a malicious transaction, token approval, permit or other wallet action. Once approved, the attacker can move your tokens.
Reward and claim pages work well for attackers because users expect to connect a wallet and sign something. Dave Finances stresses that a button labelled "claim rewards" says nothing about the authority the wallet prompt actually requests.
Scam Sniffer says it verifies candidates, with automated checks first and human review when needed, before adding them. A listing shows malicious infrastructure; it does not prove anyone lost money.
Source
Dave Finances, "Scam Sniffer adds 5 fresh crypto drainer and seed-phishing indicators after midnight" (October 13, 2026). The article notes there is no public evidence the five indicators belong to the same operator, and no verified losses have yet been tied to them.
Red flags
- Reward or claim pages on domains that are not the project's official site.
- A brand name (here, Eigen) mixed with generic words like claim and rewards on an unfamiliar TLD.
- A wallet prompt asking for token approvals or permits just to "check" or "claim" rewards.
If you were targeted
- 1Do not connect a wallet to, or sign anything on, the listed site.
- 2If you already approved a transaction there, revoke token approvals using a reputable approval-checker for your wallet's network, and move remaining funds to a new wallet if you are unsure what you signed.
- 3If you entered a recovery phrase anywhere, treat that wallet as compromised: create a new wallet with a new phrase and move any remaining assets.
- 4Report the site to your wallet provider and to the FBI at ic3.gov (or your national cybercrime agency).