how does the “click a link, get your wallet emptied” actually work? Like what’s happening there

ah ok so you’re still signing something, that makes sense. I thought there was this insane security hole where just opening a link was game over 😰

You click a link, they ask you to sign a transaction to mint something, the signature is actually for transferring your assets out of the wallet. 

Lesson: never authorize to sign transaction unless you trust the requester.

Farcaster OG | FID: 10174 | @fireflyapp Ambassador | /bnfarcaster 🎙 in Spanish  | https://web3.bio/cryptowenmoon.eth

I think you would need to sign something at least

Sign prompts you to sign a tx

Site pops up a fake MetaMask and asks for your seed words / private key

Less likely, site contains malware that looks for private keys stored locally

Signing a transaction.

Don't believe clicking a link will do it, but one's pc or browser can also become compromised.

you can see the phishing address activity here

https://etherscan.io/address/0x7f9241ac942ba97085ef1a1542d270bfd6a987fd

looks like they got ~$3k in crypto and NFTs so far. If you got scammed, sorry for your loss. Also, you are not alone