26+
EVM networks, and more as chains ship EIP-7702
The compromised key signs one EIP-7702 authorization. Claims and transfers land in that same transaction. The sponsor pays native gas, the compromised wallet only signs.
Tokens, NFTs, and unclaimed airdrops sit on the address, but there is no native balance to move them.
The drainer watches the address. Any native sent to the compromised wallet is taken, so the wallet can never be refueled safely.
Compromised does not mean powerless. The private key can still sign, and one signature is all EIP-7702 needs.
Set the Safe Recipient, then pick a rescue type. Everything executes inside the same sponsored transaction, so the assets never sit exposed in the compromised wallet.
Claim pending tokens and send them to the Safe Recipient.
Sweep token balances off the compromised wallet in one batch.
Execute arbitrary calldata through the compromised wallet.
Mint an NFT and send it to the Safe Recipient in the same transaction.
Move NFTs off the compromised wallet in one batch.
Mint an NFT from the compromised wallet, with no transfer attached.
If a chain supports EIP-7702, the rescue works on it. These networks are live today. The rest are already wired.
Solana does not use EIP-7702. It runs on the same sponsor model with its own sweep system, covered in the docs.
Generate the sponsor in the dashboard and fund it with native gas. Do not send native to the compromised wallet.
Set the Safe Recipient, then pick token sweep, airdrop claim, NFT transfer, or custom calldata.
The sponsor broadcasts the EIP-7702 transaction. The 20% fee is taken only if it succeeds.
Send leftover native off the sponsor from the Withdraw tab.
No. Fund the sponsor, not that address. The sponsor pays native gas; the compromised wallet only signs.
Anything still on the address: tokens, NFTs, and unclaimed airdrops or rewards. Staked or locked positions can be handled with custom calldata, as long as the position can be closed in one transaction.
Only if the rescue succeeds. The sponsor broadcasts the EIP-7702 transaction and the fee is taken on success.
No. MOBIUS69 runs entirely in your browser. Your keys sign locally on your device and are never sent to a server. The interface code is public on GitHub.
Enough to cover gas for one transaction on that chain. The exact cost depends on the network and current gas prices. Whatever is left stays in the sponsor and can be withdrawn after the rescue.
No. Treat it as burned. The drainer has the key, and anything that arrives there later can be taken. Never use the compromised wallet again.
If tokens, NFTs, or an airdrop are still on the compromised wallet, fund the sponsor, not that address, then execute and withdraw.