A recent incident involving Ethereum developer Zak Cole highlights the growing danger of malicious code assistants, known as wallet drainers, targeting even experienced crypto professionals. Cole’s wallet was compromised through a seemingly legitimate AI extension from Cursor AI, which he unknowingly downloaded and installed on his computer. The extension secretly stole his private key by reading his .env file and sent the information to an attacker’s server. This allowed the attacker to access Cole’s hot wallet for three days before draining funds worth several hundred dollars on August 10, 2025. Fortunately, Cole’s primary holdings were secured on hardware devices. 😥 💔 🤕