Security guides
A Web3 security checklist to run before every signature
One short mental checklist, used every time, prevents the majority of avoidable losses.
Read guide → GuideUnderstanding gas so scams cannot exploit your confusion
Scams often hide behind fee confusion. Basic gas literacy removes that leverage.
Read guide → AwarenessRecovery scams: the second wave after a loss
After a theft, scammers target victims again with fake "fund recovery" services.
Read guide → GuideGetting the most safety out of a hot wallet
Hot wallets are necessary for daily use. These habits keep them from becoming a liability.
Read guide → SecurityThe four signatures behind most wallet drains
A handful of signature types cause most losses. Memorize them and you can stop the worst.
Read guide → GuideHardening your browser for Web3
Your browser is where most wallet interactions happen. A few settings reduce your attack surface.
Read guide → GuideDeFi risk beyond phishing: smart contract and protocol risk
Even safe behavior cannot remove protocol risk. Understanding it helps you size positions.
Read guide → AwarenessWhy scam tokens show up in your wallet history
Unsolicited tokens in your history are usually bait. Here is what to do with them.
Read guide → GuidePrivate key storage: what to do and what to never do
Your private key and seed phrase demand offline, redundant, private storage. Here is the standard.
Read guide → SecurityFake liquidity pools and honeypot tokens
Some tokens let you buy but never sell. Here is how honeypots trap buyers.
Read guide → GuideTestnets and airdrops: staying safe while farming
Airdrop farming pushes users to many new dapps fast — exactly where drainers wait.
Read guide → GuideSetting approval limits instead of unlimited access
When an app lets you cap an approval, take it. It is a simple, powerful safety habit.
Read guide → AwarenessRomance scams that end in crypto losses
Emotional manipulation is the vehicle; crypto is just the payout. Know the pattern.
Read guide → GuideUsing a block explorer to double-check anything on-chain
A block explorer is a free tool that turns confusion into facts. Learn the basics.
Read guide → GuideWallet connection hygiene: connect less, stay safer
Every site you connect to is a little more exposure. Minimizing connections reduces risk.
Read guide → AwarenessHow to spot a crypto phishing email
Fake exchange and wallet emails are a top entry point. A few checks expose them.
Read guide → GuideWithdrawing from an exchange safely: avoiding costly mistakes
A wrong address or network on withdrawal can lose funds permanently. Check twice.
Read guide → SecurityFake NFT mint sites and how drainers exploit hype
During a hot mint, fake sites appear within minutes. Speed is the attacker ally.
Read guide → SecurityDusting attacks: tiny transfers that track and target you
A dust of tokens can be a tracking tag or the first step of a scam. Here is what it means.
Read guide → AwarenessPig butchering scams: long cons that target crypto holders
These scams build trust over weeks before the ask. Recognizing the arc protects you.
Read guide → Awareness"Send 1, get 2 back": why crypto giveaway scams never pay
The oldest trick in crypto still works because it looks official. Here is the anatomy.
Read guide → GuideReading wallet signature requests without getting lost
The wallet pop-up tells you what you are about to authorize — if you know how to read it.
Read guide → GuideWhat to do immediately after a wallet is compromised
Fast, correct action after a drain can save whatever remains. Here is the order of operations.
Read guide → SecurityFake browser and wallet update prompts that install malware
A pop-up urging you to update can be the malware itself. Here is how to tell.
Read guide → GuideA safe first week in DeFi: a beginner checklist
New users are targeted hardest. A few habits from day one prevent most disasters.
Read guide → AwarenessSocial engineering: the human side of crypto theft
Most successful attacks exploit trust and urgency, not code. Recognizing the tactics is your defense.
Read guide → GuideUsing an approval checker: a monthly habit worth keeping
A quick monthly review of your approvals closes risks before they are exploited.
Read guide → SecurityCross-chain bridges: convenience with concentrated risk
Bridges move assets between chains but have been among the biggest hack targets. Use them carefully.
Read guide → AwarenessNFT scams beyond theft: wash trading and fake floors
Not every NFT risk is a drainer. Manipulated prices can cost you just as much.
Read guide → GuideCold vs hot wallets: how to split your crypto for safety
Keeping everything in one hot wallet is a single point of failure. A simple split reduces risk a lot.
Read guide → AwarenessGas fee and "wallet validation" scams explained
Some scams ask for a small fee or "validation" to unlock funds. The fee is the theft.
Read guide → AwarenessFake support: why real help never slides into your DMs
Impersonators posing as support are behind countless drains. The rule is simple once you know it.
Read guide → GuideMultisig wallets: stronger protection for serious holdings
Requiring multiple approvals for a transaction removes the single point of failure. Here is the idea.
Read guide → AwarenessLook-alike domains: the one-character trick behind most phishing
Swapped letters and extra words turn a trusted name into a trap. Train your eye to catch them.
Read guide → GuideHow to check a smart contract before you interact with it
A few quick checks on a block explorer can reveal whether a contract is safe to touch.
Read guide → SecurityMalicious contracts disguised as routine DeFi actions
A "swap" or "stake" button can hide a drainer. Understanding the signature protects you.
Read guide → SecuritySIM swapping: why SMS 2FA can lose you your crypto
Attackers hijack your phone number to defeat SMS codes and reset accounts. Here is how to harden up.
Read guide → AwarenessRug pulls: warning signs before a project disappears with your money
A rug pull looks like a promising project until the team drains liquidity and vanishes. Spot it early.
Read guide → SecurityFake wallet extensions in browser stores: how to avoid them
Malicious copies of popular wallets slip into extension stores. Installing one hands over everything.
Read guide → AwarenessWhy most wallet drains start in Discord and Telegram
The link that empties a wallet usually arrives in a chat, not a search. Here is the pattern.
Read guide → SecurityPermit and Permit2: the gasless signatures attackers love
These off-chain signatures do not show up in your transaction history — which is exactly why they are abused.
Read guide → SecurityDrainer-as-a-service: how modern wallet theft is industrialized
Wallet drainers are now sold as ready-made kits. Understanding the model helps you defend against it.
Read guide → GuideSeed phrase safety: rules that actually keep you safe
Your seed phrase is the master key to everything. One leak and it is over. Here is how to guard it.
Read guide → SecurityClipboard hijacking: malware that swaps the address you paste
Some malware silently replaces a copied crypto address with the attacker one. Here is how to catch it.
Read guide → AwarenessHow fake airdrop scams drain wallets
Unexpected tokens appear in your wallet. Claiming them is the trap. Here is what really happens.
Read guide → GuideHardware wallets: what they protect against and what they do not
A hardware wallet is powerful but not magic. Knowing its limits keeps you from a false sense of safety.
Read guide → SecurityIce phishing: the approval scam that empties wallets quietly
Ice phishing does not steal your keys. It tricks you into approving a malicious contract. Learn to spot it.
Read guide → GuideHow to revoke token approvals and clean up your wallet
Old approvals pile up silently and stay exploitable. Here is how to find and remove them.
Read guide → SecurityWhat is address poisoning and how to avoid it
Attackers seed your transaction history with look-alike addresses hoping you copy the wrong one. Here is how it works.
Read guide → SecurityWhy setApprovalForAll can cost you your entire NFT collection
One signature can hand over every NFT in a collection. Here is when it is normal and when it is a trap.
Read guide → SecurityHow token approvals drain wallets — and how to revoke them
Most wallet drains do not steal your keys. They abuse an approval you signed. Here is how approvals work and how to take them back.
Read guide → WalletConnectWhat is WalletConnect and how to use it safely
WalletConnect links your wallet to dapps. Used carelessly it can also link you to a drainer. Here is how to stay safe.
Read guide → AwarenessSeven phishing red flags every Web3 user should know
Learn the warning signs that a site or message is trying to drain your wallet.
Read guide → GuideHow to verify a crypto website before connecting your wallet
A quick checklist to tell a real crypto site from a phishing clone.
Read guide → SecurityWhat is a wallet drainer and how to protect yourself
Wallet drainers trick you into signing away your assets. Here is how they work and how to stay safe.
Read guide → PerpsHyperliquid phishing explained
How Hyperliquid phishing scams work and how to stay safe.
Read guide → PerpsdYdX phishing explained
How dYdX phishing scams work and how to stay safe.
Read guide → PerpsGMX phishing explained
How GMX phishing scams work and how to stay safe.
Read guide → PerpsJupiter phishing explained
How Jupiter phishing scams work and how to stay safe.
Read guide → PerpsDrift Protocol phishing explained
How Drift Protocol phishing scams work and how to stay safe.
Read guide → PerpsVertex Protocol phishing explained
How Vertex Protocol phishing scams work and how to stay safe.
Read guide → PerpsAevo phishing explained
How Aevo phishing scams work and how to stay safe.
Read guide → PerpsAster phishing explained
How Aster phishing scams work and how to stay safe.
Read guide → PerpsPerpetual Protocol phishing explained
How Perpetual Protocol phishing scams work and how to stay safe.
Read guide → PerpsKwenta phishing explained
How Kwenta phishing scams work and how to stay safe.
Read guide → PerpsSynthetix phishing explained
How Synthetix phishing scams work and how to stay safe.
Read guide → PerpsLevel Finance phishing explained
How Level Finance phishing scams work and how to stay safe.
Read guide → DEXUniswap phishing explained
How Uniswap phishing scams work and how to stay safe.
Read guide → DEXPancakeSwap phishing explained
How PancakeSwap phishing scams work and how to stay safe.
Read guide → DEXSushiSwap phishing explained
How SushiSwap phishing scams work and how to stay safe.
Read guide → DEXCurve Finance phishing explained
How Curve Finance phishing scams work and how to stay safe.
Read guide → DEXBalancer phishing explained
How Balancer phishing scams work and how to stay safe.
Read guide → DEX1inch phishing explained
How 1inch phishing scams work and how to stay safe.
Read guide → DEXMatcha phishing explained
How Matcha phishing scams work and how to stay safe.
Read guide → DEXParaSwap phishing explained
How ParaSwap phishing scams work and how to stay safe.
Read guide → DEXOpenOcean phishing explained
How OpenOcean phishing scams work and how to stay safe.
Read guide → DEXKyberSwap phishing explained
How KyberSwap phishing scams work and how to stay safe.
Read guide → DEXOdos phishing explained
How Odos phishing scams work and how to stay safe.
Read guide → DEXRango Exchange phishing explained
How Rango Exchange phishing scams work and how to stay safe.
Read guide → DEXLiFi phishing explained
How LiFi phishing scams work and how to stay safe.
Read guide → DEXSymbiosis phishing explained
How Symbiosis phishing scams work and how to stay safe.
Read guide → BridgeAcross Protocol phishing explained
How Across Protocol phishing scams work and how to stay safe.
Read guide → BridgeStargate Finance phishing explained
How Stargate Finance phishing scams work and how to stay safe.
Read guide → BridgeLayerZero phishing explained
How LayerZero phishing scams work and how to stay safe.
Read guide → BridgeWormhole phishing explained
How Wormhole phishing scams work and how to stay safe.
Read guide → BridgeOrbiter Finance phishing explained
How Orbiter Finance phishing scams work and how to stay safe.
Read guide → BridgeSynapse phishing explained
How Synapse phishing scams work and how to stay safe.
Read guide → BridgeHop Protocol phishing explained
How Hop Protocol phishing scams work and how to stay safe.
Read guide → BridgeCeler cBridge phishing explained
How Celer cBridge phishing scams work and how to stay safe.
Read guide → WalletConnectWalletConnect phishing explained
How WalletConnect phishing scams work and how to stay safe.
Read guide → WalletMetaMask Portfolio phishing explained
How MetaMask Portfolio phishing scams work and how to stay safe.
Read guide → WalletRabby Wallet phishing explained
How Rabby Wallet phishing scams work and how to stay safe.
Read guide → WalletZerion phishing explained
How Zerion phishing scams work and how to stay safe.
Read guide → WalletZapper phishing explained
How Zapper phishing scams work and how to stay safe.
Read guide → WalletDeBank phishing explained
How DeBank phishing scams work and how to stay safe.
Read guide → WalletRainbow Wallet phishing explained
How Rainbow Wallet phishing scams work and how to stay safe.
Read guide → ScannerDexScreener phishing explained
How DexScreener phishing scams work and how to stay safe.
Read guide → ScannerDexTools phishing explained
How DexTools phishing scams work and how to stay safe.
Read guide → ScannerDefined phishing explained
How Defined phishing scams work and how to stay safe.
Read guide → ScannerGeckoTerminal phishing explained
How GeckoTerminal phishing scams work and how to stay safe.
Read guide → ScannerBirdeye phishing explained
How Birdeye phishing scams work and how to stay safe.
Read guide → ScannerDexGuru phishing explained
How DexGuru phishing scams work and how to stay safe.
Read guide → NFTOpenSea phishing explained
How OpenSea phishing scams work and how to stay safe.
Read guide → NFTBlur phishing explained
How Blur phishing scams work and how to stay safe.
Read guide → NFTMagic Eden phishing explained
How Magic Eden phishing scams work and how to stay safe.
Read guide → NFTTensor phishing explained
How Tensor phishing scams work and how to stay safe.
Read guide → NFTLooksRare phishing explained
How LooksRare phishing scams work and how to stay safe.
Read guide → NFTX2Y2 phishing explained
How X2Y2 phishing scams work and how to stay safe.
Read guide → LendingAave phishing explained
How Aave phishing scams work and how to stay safe.
Read guide → LendingCompound phishing explained
How Compound phishing scams work and how to stay safe.
Read guide → LendingMaker phishing explained
How Maker phishing scams work and how to stay safe.
Read guide → LendingMorpho phishing explained
How Morpho phishing scams work and how to stay safe.
Read guide → LendingVenus phishing explained
How Venus phishing scams work and how to stay safe.
Read guide → LendingRadiant phishing explained
How Radiant phishing scams work and how to stay safe.
Read guide → LendingSpark Protocol phishing explained
How Spark Protocol phishing scams work and how to stay safe.
Read guide → StakingLido phishing explained
How Lido phishing scams work and how to stay safe.
Read guide → StakingRocket Pool phishing explained
How Rocket Pool phishing scams work and how to stay safe.
Read guide → StakingJito phishing explained
How Jito phishing scams work and how to stay safe.
Read guide → StakingMarinade phishing explained
How Marinade phishing scams work and how to stay safe.
Read guide → StakingEigenLayer phishing explained
How EigenLayer phishing scams work and how to stay safe.
Read guide → YieldPendle phishing explained
How Pendle phishing scams work and how to stay safe.
Read guide → YieldCamelot phishing explained
How Camelot phishing scams work and how to stay safe.
Read guide → YieldRaydium phishing explained
How Raydium phishing scams work and how to stay safe.
Read guide → YieldOrca phishing explained
How Orca phishing scams work and how to stay safe.
Read guide → YieldMeteora phishing explained
How Meteora phishing scams work and how to stay safe.
Read guide → YieldPolkastarter phishing explained
How Polkastarter phishing scams work and how to stay safe.
Read guide → YieldDAO Maker phishing explained
How DAO Maker phishing scams work and how to stay safe.
Read guide → ExplorerEtherscan phishing explained
How Etherscan phishing scams work and how to stay safe.
Read guide → ExplorerBasescan phishing explained
How Basescan phishing scams work and how to stay safe.
Read guide → ExplorerArbiscan phishing explained
How Arbiscan phishing scams work and how to stay safe.
Read guide → ExplorerBscScan phishing explained
How BscScan phishing scams work and how to stay safe.
Read guide → ExplorerSolscan phishing explained
How Solscan phishing scams work and how to stay safe.
Read guide → ExplorerTronscan phishing explained
How Tronscan phishing scams work and how to stay safe.
Read guide → AirdropGalxe phishing explained
How Galxe phishing scams work and how to stay safe.
Read guide → AirdropLayer3 phishing explained
How Layer3 phishing scams work and how to stay safe.
Read guide → AirdropZealy phishing explained
How Zealy phishing scams work and how to stay safe.
Read guide → AirdropQuestN phishing explained
How QuestN phishing scams work and how to stay safe.
Read guide → AirdropIntract phishing explained
How Intract phishing scams work and how to stay safe.
Read guide → ResearchCoinMarketCap phishing explained
How CoinMarketCap phishing scams work and how to stay safe.
Read guide → ResearchCoinGecko phishing explained
How CoinGecko phishing scams work and how to stay safe.
Read guide → ResearchMessari phishing explained
How Messari phishing scams work and how to stay safe.
Read guide → ResearchNansen phishing explained
How Nansen phishing scams work and how to stay safe.
Read guide → ResearchArkham phishing explained
How Arkham phishing scams work and how to stay safe.
Read guide → ResearchToken Terminal phishing explained
How Token Terminal phishing scams work and how to stay safe.
Read guide → GuideHow to spot fake MetaMask sites
Identify phishing clones of MetaMask and protect your wallet.
Read guide → GuideHow to spot fake Uniswap sites
Identify phishing clones of Uniswap and protect your wallet.
Read guide → GuideHow to spot fake OpenSea sites
Identify phishing clones of OpenSea and protect your wallet.
Read guide → GuideHow to spot fake Phantom sites
Identify phishing clones of Phantom and protect your wallet.
Read guide → GuideHow to spot fake Lido sites
Identify phishing clones of Lido and protect your wallet.
Read guide → GuideHow to spot fake Blur sites
Identify phishing clones of Blur and protect your wallet.
Read guide → GuideHow to spot fake Aave sites
Identify phishing clones of Aave and protect your wallet.
Read guide → GuideHow to spot fake Arbitrum sites
Identify phishing clones of Arbitrum and protect your wallet.
Read guide →