logo

Exposing Wallet Drainer Scammers: Zentoh & Co.

ID: 38920c6b-053e-5bb2-aa4a-6a3b2da143f5

STIX ID: report--38920c6b-053e-5bb2-aa4a-6a3b2da143f5

Feed Name: CertiK Blog

Threat Score
75/100

Date Published: 2023-01-27

Date Updated: 2026-06-11

...
...

This report documents a Monkey Drainer ice-phishing campaign that used a fake Porsche NFT site to trick users into approving token spend permissions, resulting in at least one $4.3M theft; it attributes operations to actors "Zentoh" and "Kai", links them to Telegram groups and GitHub repositories selling drainer kits, enumerates related ENS names and wallet addresses, and highlights laundering activity and ongoing distribution of the phishing tooling.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.