The MLX Trading “Auto-Arbitrage” Drain — An Honest 23%
MLX Trading marketed a “1.8% a day” auto-arbitrage account and asked for a single wallet connection. That one approval let it drain a Toronto developer’s wallet on repeat — and shows why acting early is everything.
Operator on file: MLX Trading — read the full scam-broker dossier in our directory.
How the trail began
He was onboarded into an MLX Trading community where members posted daily profit screenshots. Activation was a single step: connect your wallet and approve the platform’s “trading router” so the bot could “work the spreads”.
As a developer he believed he understood the risk. What he missed was the scope of the approval he signed.
Where the trail broke
The approval was an unlimited token allowance. Instead of one obvious transfer, the contract swept tokens in tranches over several days — each time new funds arrived, a little more left.
By the time he spotted the pattern, six days of “arbitrage” had quietly emptied most of the wallet.
“I thought I was funding a trading bot. I had actually handed it permission to take everything, whenever it wanted.”Claimant statement — file DAD-2026-0421
The recovery trail
We killed the bleed
The first move was revoking the malicious token approvals so no further sweeps could occur.
We mapped the drainer
We traced outflows from the approval contract to a single consolidation address.
We followed to the off-ramp
Most funds entered a mixer, but one tranche routed cleanly to a centralized-exchange deposit.
We filed on the survivable hop
We submitted a trace and freeze request on the exchange-bound tranche before it moved on.
We documented the loss
A full on-chain report was prepared for his insurer and tax position on the unrecoverable balance.
Verified Outcome
CA$16,500 recovered from the one off-ramped tranche
Warning signs
- Any platform that asks you to approve unlimited token spending to “activate” trading.
- Daily returns quoted as a flat percentage — real trading is never a fixed daily yield.
- Pressure to connect your main wallet instead of a fresh, empty one.
- A “bot” or “router” that lives only in a chat group with no audited, verifiable contract.
Approved a contract you now regret?
Revoking access fast and tracing the drain early is what makes partial recovery possible. The sooner we look, the more survives.
Request a free case review