Policy6 min read
XRPL Wallets Move Inside Apps With Privy
Key Takeaways Privy lists XRP Ledger among the networks supported by its wallet infrastructure. Apps can connect XRPL wallet creation to their existing login and user-account flow. XRPL suppo
A fake Shiba Inu ($SHIB) airdrop is circulating on X, and long-time community member Mazrael is urging holders to stay away from it. Mazrael, who advises the Shiba Eternity game, said there i

A fake Shiba Inu ($SHIB) airdrop is circulating on X, and long-time community member Mazrael is urging holders to stay away from it.
Mazrael, who advises the Shiba Eternity game, said there is no legitimate giveaway behind the posts. TokenPost reported that he warned on Oct. 12 that the promotion could expose users to wallet-draining activity. His message was short: "no such airdrop. this is a drainer." He also said such posts were flooding timelines and recommended that users not click and instead report them.
According to Cryptonews, one X account claimed the "SHIB airdrop hype" was back and said it was eligible after checking its wallet, while sharing a link to a fraudulent website. The same report noted that shib(.)io remains the project's official website.
The danger starts when a user connects a wallet and signs what looks like a routine prompt. Cryptonews said the pop-up is in fact an approval request or malicious signature, and that signing it gives the drainer's smart contract permission to spend or transfer the user's tokens. A password does not need to be stolen for this to work.
Security firm Group-IB describes a crypto drainer as a Web3 phishing tool that tricks users into signing transactions that give an attacker control of their wallet. It adds that because the victim authorized the transaction, the transfer looks legitimate to the blockchain and cannot be reversed.
TokenPost noted that no confirmed victims, stolen assets or verified on-chain activity had been identified in connection with this campaign, and that no malicious domain or contract address had been named. The warning is therefore precautionary rather than a report of confirmed losses.
Mazrael urged community members to avoid suspicious links and report the accounts promoting them. TokenPost advised checking airdrop announcements through official project channels before connecting a wallet, approving token spending or signing a transaction. It also noted that shib(.)io includes a "Report a scam" function and that Shiba Inu's official account has previously said unsolicited SHIB airdrop offers are scams.
Group-IB also notes that a drainer typically relies on an approval the user has signed, and that this permission stays active until it is cancelled. It recommends using a token-approval checker, such as the one built into block explorers like Etherscan, to review what each address can spend and revoke any suspicious permissions.
Sources