Arkham Intelligence tracking shows that wallets linked to Pink Drainer recently moved about $117,000 in SDAI and ETH. The funds were sent to a newly created address, a transfer that has drawn renewed attention to one of crypto’s best-known phishing operations. The move does not confirm what comes next, but it puts these wallets back under close watch.
Pink Drainer is widely known as a phishing toolkit used to steal digital assets. According to the source material, the tool has already been used in thefts totaling more than $85 million from retail users. Against that history, the latest $117,000 transfer is relatively small. Even so, it matters because it shows fresh activity from addresses tied to the scam infrastructure.
Linked addresses still control a large treasury
The wallets connected to the operation remain heavily funded after the latest transfer. The tracked addresses still hold about $12 million in various tokens, with total holdings of more than 10.6 million tokens. The source says most of that treasury came from “service fees,” meaning payments made by other scam groups that used the Pink Drainer tool in their own phishing campaigns.
The remaining funds are spread across different assets and wallets. Small balances are kept in separate addresses for transaction fees, while holdings such as AARBUSDCN and ABUSD appear intended to preserve value during market swings. That kind of distribution can make tracking and consolidation harder on-chain.
New address transfer raises laundering concerns
The $117,000 transfer went to a brand-new address. In the source material, this type of wallet movement is described as a common step used to clean stolen funds before sending them to an exchange for cash-out. Theft activity tied to Pink Drainer has slowed recently, but the underlying systems are still described as ready for use.
The report also notes that even if the original operator were to stop, the roughly $12 million still on-chain could support additional scams. For users, the practical takeaway in the source is straightforward: use hardware wallets, avoid unknown links, and check every transaction carefully before signing.

