MetaMask, Phantom, SEAL Launch Global Anti-Phishing Defense Network

The project is amongst the most ambitious efforts to build a cooperative, verifiable, and user-driven system of protection for digital asset holders worldwide.

SEAL explains how "drainers" have evolved into extremely advanced, professionalized operations from their initial rough copycat roots. These are Inferno Drainer, Angel Drainer, Ace Drainer, and Riddance Drainer, all combined having stolen millions of dollars' worth of cryptocurrencies and continually updating their infrastructure to bypass security filters. SEAL's open-source anti-phishing project, eth-phishing-detect, has recorded thousands of bad domains and knocked out numerous drainer networks over the past two years.

But every disruption gave rise to an escalation: once noticed, the attackers began to cycle domains at an increased rate, shifting hosting offshore servers and adding anti-scanning technology. SEAL's analysts explained how even as blocklists grew, the underlying criminal tactics evolved similarly, precipitating a need for an in-real-time and decentralized form of defense.

To meet that challenge, SEAL built what it calls a "decentralised immune system" for the web3 ecosystem. At its center is the Verifiable Phishing Reporter, a light client software program that allows anyone on the planet to report verifiable phishing evidence directly into the network. All reports are attested cryptographically, meaning screenshots, domain captures, and metadata are signed to prove they came from a genuine user experience and not pre-generated content.

This verification process facilitates real-time automation, removing the delay of human approval and making the data trustworthy for wallet providers in real time. The involved wallets can immediately warn users when they attempt to interact with known phishing websites, smart contracts, or spoofed pop-ups. In effect, this means if one user encounters a malicious link, that information is shared almost instantly across all connected wallet platforms.

In announcing the partnership, SEAL quoted support from a range of well-known industry brands. Ohm Shah, Security Researcher at MetaMask, explained that the collaboration is designed to improve the speed and agility of wallet security teams. “Drainers are a constant cat and mouse game like most of security, working alongside SEAL and their independent researchers it allows wallet teams like MetaMask to be more agile and apply SEAL's research to practice effectively throwing a wrench at the drainer's infra.”

Derek Rein, CTO of WalletConnect, highlighted how the partnership builds on existing security layers across certified wallets. “With WalletConnect Certified, every Certified wallet warns users when they encounter known scam sites. By partnering with SEAL, we’re expanding our protections even further as they begin providing us with their scam domain database. We’re encouraged to see these security standards being adopted more broadly across the industry. Security best practices must remain at the forefront of wallet development.”

Armani Ferrante, CEO of Backpack, noted that the collaboration supports the company’s focus on safe and accessible user experiences. “SEAL’s approach to verifiable, real-time phishing protection empowers Backpack users to interact with the crypto ecosystem safely and freely through our ‘explore’ experience. Partnering with SEAL is part of our ongoing mission to make digital asset ownership more secure," said Ferrante.

Kim Persson, Senior Engineer at Phantom, added that the partnership will enhance the wallet’s existing safeguards. “Security and user safety are core tenets at Phantom. Partnering with SEAL will strengthen our domain security and better protect our users,” said Persson.

The network is well-timed. In 2025, phishing attacks surged across the digital-asset ecosystem as criminals exploited a greater number of users and increased liquidity across decentralized markets. With billions of dollars being traded daily in self-custody wallets, the scope of the threat is now equivalent to traditional financial cybercrime. Until now, wallets have used standalone threat-lists, yielding patchy coverage and sluggish response times. By unifying on a shared and verifiable network, SEAL and its partners can reduce detection latency from hours to seconds, halting attacks before they propagate across various platforms.

SEAL engages wallet users to directly contribute to the network. All participants can submit phishing reports via the Verifiable Phishing Reporter, which allows the system to learn faster and expand coverage. The company promises that no one's private keys, personal identifiers, or sensitive data are collected, only contextual evidence needed to identify and verify threats. MetaMask, Phantom, Backpack, and WalletConnect-certified wallet users will begin receiving live security notices within their apps once integration is rolled out globally. For developers, SEAL provides open-source materials and tutorials to add more wallets, exchanges, or DeFi protocols to the same security feed.

The launch could be a turning point in the way the industry addresses phishing defense. In the past, most have relied on centralized reporting databases or browser extensions that react to threats but are not proactive. SEAL's mechanism introduces an auditable feedback loop of real-time feedback where community reportage directly enables automated, auditable detection. This community-based method reflects open-source software practices, transparency, decentralization and verifiability, but used to apply to threat intelligence instead of code. If taken to scale, it could lead to a deepening of crypto's self-regulatory strengths and far lower financial and reputational harm from phishing drainers.

Even with the hope, SEAL admitted that no solution can be fully foolproof. Attackers will attempt to impersonate legitimate sites or use cloaking in the hopes of evading detection, and low participation from the community may reduce data intake. Governance must constantly ensure privacy, maintain the accuracy of reports, and find balance between transparency and user protection. But SEAL's release underscored that the project is "a global collective effort to make crypto safer for everyone," presenting the coalition as an ongoing process and not a finished product but one of an iteratively evolving networks of trust.

The Security Alliance live phishing defence network is one of the largest anti-phishing collaborations throughout the crypto sector to be created. Through the marriage of open reporting, cryptographic verification, and multi-wallet support, it offers an example of how decentralised communities can unite to defend themselves against newer, more complex online threats.

With more integrations coming in 2025, SEAL's partnership may redefine the way web3 security infrastructure is built, breaking away from a series of isolated responses towards a true shared, provable defense layer for all crypto users worldwide.