Key Takeaways
- Major crypto wallet providers including MetaMask, Phantom, WalletConnect, and Backpack have partnered with the Security Alliance (SEAL) to launch a global phishing defense network.
- The collaboration aims to create a “decentralized immune system” for crypto security, allowing for the real-time sharing of threat data to prevent widespread phishing attacks.
- The network is a direct response to the growing problem of “crypto drainers” which stole over $400 million in H1 2025 by using advanced tactics like fast landing page rotation and cloaking.
In a major move to combat escalating cyber threats, leading crypto wallet providers like MetaMask, Phantom, WalletConnect, and Backpack have formally partnered with the Security Alliance (SEAL) to establish a real-time global phishing defense network. This unified front comes in response to a surge in sophisticated “crypto drainers,” which have reportedly been responsible for stealing over $400 million in the first half of 2025 alone.
The goal of the coalition, as stated by the MetaMask team, is to “protect more users across the entire ecosystem” by creating a “decentralized immune system for crypto security.”
This system integrates with SEAL’s recently announced “verifiable phishing reports,” a tool that enables security researchers to officially prove a reported website contains malicious phishing content, thus creating an end-to-end pipeline for threat response.
The fight against crypto drainers
The core objective of this partnership is to counter the rapidly advancing methods of crypto drainers, whose tactics are now too elusive for standard defenses. SEAL reports that drainers employ three primary evasion strategies:
- Outpacing Blocklists: They update and deploy new phishing landing pages with greater speed than blocklists can refresh.
- Infrastructure Relocation: They move their hosting to offshore jurisdictions to bypass security crackdowns and legal action.
- Content Hiding: They use cloaking to conceal their malicious scripts, ensuring automated scanners view benign content while users see the draining prompt.
These combined techniques underscore the rising difficulty of defending against highly adaptive, organized malicious actors.
Ohm Shah, a security researcher at MetaMask, likened the battle to a “constant cat and mouse game,” emphasizing that the collaboration with SEAL allows the wallet teams to be more agile in applying research and “effectively throwing a wrench at the drainer’s infra.”
Deploying on as many wallets as possible
The core mechanism of the new partnership is an efficient data-sharing system. User-submitted reports of malicious sites are automatically validated and instantly broadcast across all participating wallets. This real-time sharing is a critical advancement, as it drastically reduces the window of opportunity for attackers.
SEAL explained that “Anyone with a valid report is able to trigger a phishing warning across network participants in real time and without any special permissions.” The biggest benefit here is simple: a faster response time means we can actually save user funds before they disappear.
Given that phishing was the top security problem in the first six months of the year, this kind of unified defense isn’t just nice to have, it’s absolutely necessary. Looking ahead, the plan is to get as many wallet providers as possible sharing this data, essentially building a massive, industry-wide security shield for everyone.
Final Thoughts
The collaborative defense network launched by major wallets and the Security Alliance is a necessary and crucial step in the fight against highly sophisticated crypto drainers. By building a “decentralized immune system” and sharing verified threat reports in real-time, the industry is moving from an isolated defense model to a unified, proactive front to protect users from the ongoing wave of multi-million dollar phishing losses.
Frequently Asked Questions
What is the main goal of the new defense network?
To create a global, real-time phishing defense network to quickly identify and block malicious websites across participating crypto wallets and protect users from fraud.
Which major wallets are involved in the partnership?
MetaMask, Phantom, WalletConnect, and Backpack have partnered with the Security Alliance (SEAL) to launch the defense system.
How will the network speed up threat detection?
It integrates SEAL’s ‘verifiable phishing reports’ system, allowing verified malicious site data to be instantly shared across all participating wallets, triggering real-time alerts.
