Malwarebytes has uncovered a fake Grand Theft Auto 6 leak site that exploits anticipation for Rockstar Games’ upcoming title to drain cryptocurrency wallets across multiple blockchains. The fraudulent page mimics a fan-made countdown, offering a supposed leaked game copy for $50 or 1 SOL (approximately $102 at the time of writing). Two malicious scripts target Solana wallets and disguise themselves as genuine wallet-connection tools to drain funds from Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, and Fantom. Once users authorize transactions, they stand to lose their entire wallet balance.
The website uses real GTA 6 promotional content and console details, but Malwarebytes experts noted inconsistencies including a footer claiming no purchases, contradictory PC download promises, and typos referencing GTA IV. The fraudsters warned visitors that other leak sites turned out to be scams, while hiding two malicious blocks within the payment section.
The first script specifically targets Solana wallets, siphoning funds while leaving just enough for transaction fees. The second script disguises itself as a genuine wallet-connection tool to drain multiple chains. This method is identical to previous fraudulent early-access and Extended-Look GTA 6 pages.
For investors, wallet providers, exchanges, and developers, the situation exemplifies the persistent danger of “drainer-as-a-service” services that keep appearing. According to the report, gaming lures continue to succeed because of the high demand. With no GTA 6 PC version release planned yet, the problem will likely persist. Prevention now depends on transaction simulations, blocklists, and a more understandable signing process in both EVM and Solana-based ecosystems.
