A Merkle tree is a hash tree. Each leaf holds the hash of one data block. Each branch above holds the hash of its children. The process climbs until one value is left: the root hash. Per Wikipedia's hash tree overview, this design allows efficient and secure verification of the contents of a large data structure.

How a block builds its tree

Transactions are hashed one by one, and those hashes become the leaves. Pairs of leaves are hashed together, then pairs of those results, and so on. The final value is the Merkle root, and it goes into the block header. Wikipedia's blockchain overview notes that each block stores the hash of the previous block, a timestamp, and transaction data that is generally represented as a Merkle tree.

Change one transaction and its leaf hash changes. Every hash above it changes too. The root changes with them, so the block header no longer matches. Tampering becomes easy to spot. This connects to our earlier piece, Blockchain Association changes CEOs after the Clarity Act loss: what it means and what to watch.

Proofs that stay small

The clever part is the size of a proof. To show that one transaction sits inside a block, you need only the branch of hashes beside its path up the tree. Per the same overview, this takes a number of hashes proportional to the logarithm of the number of leaves. A block with a million transactions needs a proof only about twenty hashes deep. Checking is quick, even on a phone. For related coverage, see What goes inside a blockchain block?.

A root you can treat as a seal

The root acts like a seal on the block. Per the Wikipedia source, a Merkle tree is an efficient example of a cryptographic commitment scheme: the root is the commitment, and leaves can be revealed and proven to be part of it. In a peer-to-peer network, a node gets the root from a trusted source first. After that, it can take the tree itself from anyone. If the data is damaged or fake, the hashes will not match the trusted root.

This also helps honest peers catch dishonest ones. Hash trees can check that data blocks received from other peers arrive undamaged and unaltered. They can even check that the other peers do not lie and send fake blocks.

Where Merkle trees show up

Ralph Merkle patented the idea in 1979, and it now reaches far past crypto. Per the Wikipedia overview, users include the Bitcoin and Ethereum networks, the Git and Mercurial version control tools, the ZFS file system, and NoSQL databases such as Apache Cassandra. Most implementations are binary, with two children under each node, and per the same source they usually rely on a standard hash function such as SHA-2.

Weak spots and the known fix

The design has one famous quirk. The root does not reveal how deep the tree is, so an attacker can craft a different document with the same root, which Wikipedia describes as a second-preimage attack. The fix is simple, and Certificate Transparency uses it: a zero byte goes in front of leaf hashes, and a one byte goes in front of inner hashes. With that divider, the two kinds of hashes can never be confused.

Conclusion: one hash holds it all together

Merkle trees turn a huge pile of transactions into one short value. That value seals the block, powers quick proofs, and lets light clients trust data they have not fully downloaded. When a block explorer shows a merkle root, you now know what it means: it is the anchor that binds every transaction in the block into a single, checkable number.

This article is general information, not investment or security advice. Crypto assets are volatile and may lose all value.

A blockchain oracle is the bridge across that gap. Per Wikipedia's oracle overview, an oracle is a third-party service that provides trusted information from outside-world sources to smart contracts on the chain. The oracle wraps up the messy real-world detail and hands the contract a clean answer. That also keeps errors and points of failure easier to fix off the chain than on it. In short, the chain handles the rules, and the oracle handles the world.

A price trigger, step by step

Take a contract meant to buy bitcoins at a set price. The contract cannot watch exchanges by itself. Per the Wikipedia example, its trigger depends on the current exchange rate for bitcoin, so an off-chain oracle watches the price and feeds the condition to the contract. When the rate crosses the line, the contract acts on its own. Readers following this should also see What is a smart contract?.

The main kinds of oracles

Wikipedia, citing a list from Kustov and Selanteva, names several types. A program oracle runs outside the chain and passes in data such as sports results for betting or traffic camera information for ticketing offenders. A unit oracle is built into a physical sensor, like that same camera. An entry oracle runs code stored on the chain and hands the result back as an input, such as a bitcoin price that matches a condition.

Exit oracles work the other way. They carry the result of the contract out into the world by working a real device, for example paying a fee or opening a door. Last comes the oracle agreement. It gathers answers from many oracles and settles the condition when they disagree. That last type exists because real sources often conflict. We covered a connected angle in How do Ethereum rollups work, and why do they make transactions cheaper?.

The centralization problem

If an oracle leans on one source of truth, that source becomes a weak point. Per the Wikipedia overview, a single feed can be hacked in a man-in-the-middle attack, or changed by its own owner, to sway the contracts that follow it. One bad feed can steer real money, and the contract would never know.

How decentralized oracles help, and where they stop

Decentralized oracles, also called consensus oracles, spread the trust around. They query many data sources, so no single feed decides the answer. That raises the reliability of what contracts receive. But it does not reach trustlessness. Wikipedia is direct about the limit: oracles are not part of the main chain consensus, so they sit outside the security mechanisms of public blockchains.

Why users should care

When you use a lending app, a betting market, or any contract that reacts to prices, an oracle sits in the loop. Its quality becomes part of your risk, whether or not you ever see it. If the feed is wrong, the contract is still wrong with it. Before you trust a protocol, check where its data comes from. Count how many sources stand behind each answer. Ask what happens when those sources disagree.

Conclusion: trusted data, not trustless data

Oracles give smart contracts eyes and hands. They pull prices in, and they push results out, from paying a fee to opening a door. But they add a layer of trust that the chain itself cannot check. The strongest setups query many sources, weigh the answers, and treat the oracle as a core part of the security review, not an afterthought.

This article is general information, not investment or security advice. Crypto assets are volatile and may lose all value.

For a newcomer, the honest read is this: a new blockchain launching alongside a token sale is the exact setup where the most common losses in crypto happen. The claims may well be true, but none of them have been checked by anyone outside the project yet. Treat this as an unverified launch, not an established network.

According to Markets Insider, the announcement went out on Oct. 2, 2026, via GlobeNewswire, with an explicit note that the Markets Insider and Business Insider editorial teams were not involved in creating it. That matters: press-release distribution is a paid channel, not reporting, and republication of a press release is not corroboration.

What the project says it has built

The announcement describes a layer-1 blockchain — a network with its own base chain, like Ethereum — that is EVM-compatible, meaning developers can move or deploy Ethereum-based smart contracts with little friction. The project claims sub-second finality, cross-chain bridging, institutional settlement tools, and a mobile wallet called WPLUS Wallet that supports QR-code retail payments.

It also lists a native token, WPLUS, used for governance, consensus security, and gas fees. An ICO — an initial coin offering, where the public can buy the token early — is part of the plan, with presale and bridge portals listed in the release.

Why the treasury claim deserves caution

A $945 million reserve claim deserves caution because it is sourced solely to the project's own press release, with no independent corroboration in the available evidence. The release itself describes the figure as "reported," and no independent audit of the treasury exists yet. The project does link to a CertiK security page, which is a real security firm, but a project page on a security platform is not the same as a completed audit of treasury holdings. If the reserves are central to the pitch, the burden of proof sits with the project — and it has not yet been met publicly.

The gambling dApps are a red flag, not a footnote

Buried late in the announcement is a roadmap of integrated gaming dApps with names like Crash, Dice, Plinko, and Mines — casino-style games — alongside sports-oriented Web3 features. The release itself notes some components are still under active development or awaiting API integration.

New layer-1 chains paired with token sales and gambling dApps are a combination security researchers watch closely, because it concentrates speculative money, fast transactions, and lightly reviewed code in one place. That is not an accusation about this project; it is a description of where losses have historically clustered. Our guide to what a rug pull is and how to spot one covers the warning signs that matter most in launches like this.

What a newcomer should actually check

Before interacting with any newly launched chain or buying its token in a presale, a few checks cost nothing and catch most problems:

• Verify the websites. According to the release, the project's official resources include the domains plusmain.net, wpluswallet.com, and a CoinCodex ICO listing. New launches attract copycat sites within hours. Our walkthrough of how to verify a crypto website is real shows what to compare before you connect a wallet.
• Watch for airdrop bait. New chains often seed wallets with unsolicited tokens. Those tokens are frequently hooks for approval scams — see how airdrop scams work before interacting with anything that appears in your wallet unasked.
• Treat self-reported numbers as marketing. Settlement volume, reserve totals, and performance metrics in a press release are claims, not findings. Wait for independent confirmation or do not rely on them at all.
• Never send funds to a presale address from social media. Only addresses published on the domains the project itself controls, and even then, only money you can afford to lose entirely.

The broader picture

New layer-1 launches are ordinary events in this industry; dozens ship every year, most of which never gain real usage. What separates a durable network from a short-lived one is usually outside developers building on it, independent audits, and verified usage — none of which can be established on launch day, and none of which this announcement can supply on its own.

The evidence here establishes only that PLUS Mainnet has announced a launch, listed its claimed features and treasury figure, and is running a token sale. What remains unknown is whether the reserves exist as described, whether the performance claims hold under independent testing, and who is behind the project — the release names no executives or backers beyond the project itself. Until those gaps close, the sensible stance for a newcomer is observation, not participation. Crypto assets can lose most or all of their value quickly, and nothing here is a reason to buy any of them.

This article is general information, not financial advice. Consider your own circumstances or consult a licensed financial professional.

This article takes a typical credential-harvest attempt apart line by line. Each part of the email — the sender address, the greeting, the urgency, the link, the sign-off — carries a tell. Learn the tells once and they repeat across nearly every phishing email you will ever receive.

What is phishing, in plain terms?

Phishing is a scam in which an attacker pretends to be someone you trust — a bank, an exchange, a colleague — and tricks you into revealing sensitive information or installing malware. Wikipedia describes it as a form of social engineering: the attack targets human judgement rather than software weaknesses. The word plays on fishing, because the fraudulent message is the bait.

The scale matters for context. IBM reports that phishing is the most common data breach vector, accounting for 15% of all breaches, with breaches caused by phishing costing organizations an average of USD 4.88 million. Crypto holders are one target among many, but a stolen exchange login can mean money gone for good, because transfers on a blockchain are not reversible.

Line 1: the sender address

Open the email and read the actual sender address, not the display name. The display name can say anything — 'Exchange Support' — because it is just text the sender typed. The real tell is the domain after the @ sign.

A fake typically uses a lookalike domain: extra letters, swapped characters, or a real brand name bolted onto an unrelated ending. Wikipedia's annotated example of a phishing email lists a fraudulent but similar domain name for the sender as the first feature to check, alongside incorrect branding and spelling errors. Read the domain letter by letter. Slow down — Microsoft Security advises exactly that: examine hyperlinks and senders' email addresses before clicking anything.

One caveat: a correct-looking sender address is not proof of legitimacy. Sender addresses can be spoofed. A clean address lowers suspicion; it should never remove it.

Line 2: the greeting and the story

Next comes the greeting. 'Dear Customer' or 'Dear User' is a red flag. A service that actually holds your account knows your name. Generic greetings appear because the same email is being sent to thousands of people at once.

Then the story. According to the US Federal Trade Commission, phishing messages commonly claim suspicious activity or log-in attempts that did not happen, a problem with your account or payment information that does not exist, or a need to confirm personal or financial information that you do not actually need to confirm. Other common stories include an invoice you do not recognise, a coupon, or a government refund you are supposedly eligible for.

The story is the payload. Everything before it is set dressing; everything after it is the mechanism for harvesting your credentials.

Line 3: the urgency

'Your account will be permanently deleted in 24 hours.' 'Unauthorised access detected — act now.' Urgency is not a service style; it is a technique. Microsoft Security describes the pattern plainly: attackers build trust by impersonating a familiar source, then create a false sense of urgency and exploit fear and anxiety so you act before you think. The FTC's advice is to be cautious of any message that requires you to 'act now', because it may be fraudulent.

Think of it like a checkout queue with a countdown clock — the analogy breaks down here: a real countdown would come from a system you can verify, not from a message demanding you click first and think later.

Line 4: the link, and where it really goes

The link is the trapdoor. On a computer, hover over it without clicking and read the destination URL in the corner of your browser window. On a phone, press and hold the link to preview the address. If the visible text says 'exchange.com' but the destination reads something else entirely, you have your answer.

Wikipedia's annotated example lists the fake link as a core feature of a phishing email. The destination is usually a counterfeit login page that collects what you type. Some attacks go further: Wikipedia describes adversary-in-the-middle phishing, where an impostor site relays your login — including a one-time two-factor code — to the real service in real time. That is why a code from an authenticator app or text message is not, by itself, proof a page is genuine.

If you want a second opinion on a site before you trust it, our guide on how to verify a crypto website is real walks through the checks.

Line 5: the sign-off and the attachments

A vague sign-off ('Security Team'), a missing company address, or an unexpected attachment all belong on the same list. Microsoft Security notes that malware is often disguised as a trustworthy attachment such as a resume or a bank statement. An attachment you did not ask for is not a document; it is a delivery mechanism. Do not open it.

Real exchanges also have habits phishers cannot copy. They do not ask for your password or seed phrase by email. They do not need you to 'confirm' your wallet. If a message asks for either, it is a scam, full stop.

What this means: a checklist you can run in 30 seconds

Our analysis of the source material is that nearly every phishing email fails at least two of these checks. Run them in order:

• Sender domain: read it letter by letter, not the display name.
• Greeting: generic 'Dear User' means bulk send.
• Story: suspicious activity, account problems, or verification requests you did not trigger.
• Urgency: deadlines and 'act now' pressure.
• Link: hover or long-press and compare the real destination.
• Ask: does any real exchange ever request a password, seed phrase, or payment 'confirmation' by email? No.

If any check fails, do not click. Contact the company using a phone number or website you already know is real — the FTC is explicit that you should never use the contact details inside the suspicious message itself.

If you already clicked

Move fast, and in this order. Change the password on the affected account from a device you trust, and change it anywhere you reused that password. Revoke anything the attacker could reach: for exchange accounts, that means sessions and API keys. The FTC advises running a security scan if you clicked a link or opened an attachment that may have installed software.

If the compromised account touched a self-custody wallet, the situation is different and worse: a seed phrase typed into a fake site is compromised permanently. Our guide on what to do if your wallet is compromised covers the recovery sequence. And if the attempt came by text or call instead of email, the same anatomy applies — Wikipedia documents these variants as smishing and vishing, and our piece on SIM swap attacks explains the phone-based version.

You can also report what you received. The FTC recommends forwarding phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org, forwarding scam texts to SPAM (7726), and reporting at ReportFraud.ftc.gov. Reporting does not recover losses, but it helps filters and investigators catch the next batch.

The takeaway

A fake exchange email is not clever; it is formulaic. Similar domain, generic greeting, invented problem, false deadline, poisoned link. The FTC notes scammers keep updating their stories to follow the news, but the underlying structure stays the same. Learn the structure once, and the next email — whatever brand it wears — reads as exactly what it is.

One honest caveat to close on: phishing works on careful people too. In a field experiment Wikipedia cites, 43% of participants clicked at least one simulated phishing link over 21 days. Falling for one is not a character flaw; it is the expected outcome of a well-made lure. The defence is the habit, not the IQ.

The public image of this work is dramatic. It is mostly not. As a summary of the 2023 thriller Inside on Wikipedia describes it, fiction gives us a thief sealed inside a penthouse by automated security, racing a failing building. The real version is an analyst with a second monitor, a block explorer, and a spreadsheet that grows for weeks.

This piece walks through what that work looks like: how funds are traced, where tracing breaks down, and what it means for you if your assets are ever taken. The short version — the blockchain records every hop forever, which is good for investigators and no comfort at all for the victim. Crypto assets can lose most or all of their value quickly, and no tracing effort changes that after the fact.

What does a crypto security analyst actually do all day?

The core of the job is attribution. Every transaction on a public blockchain is visible: which address sent funds, which address received them, how much, and when. What the ledger does not show is who controls an address. So the analyst's day is spent closing that gap.

They cluster addresses that appear to belong to one actor. They watch for patterns — funds consolidated after a theft, moved in unusual amounts, or routed through services designed to obscure origins. They compare timing against known events. When an exchange or a service is involved, they prepare the documentation that lets a compliance team freeze or review the funds.

Think of it like following a car by its license plate rather than its driver — the analogy breaks down here: a plate is issued by one authority, while a blockchain address is created by anyone, anonymously, in seconds. That is why the work is inference, not proof. A good analyst says plainly how confident a conclusion is. An overconfident one can ruin an innocent person's week, or worse.

How does tracing stolen funds actually work?

Tracing starts at the point of loss. The victim, or the platform involved, provides the address and transaction that took the funds. From there, the analyst walks forward along the chain of transfers.

• Hop by hop. Each transaction is a link. The analyst records where funds went next, and next again, building a graph.
• Clustering. Addresses that behave as if one person controls them — funded from the same source, spent together — get grouped.
• Off-ramps. The trail usually ends where crypto meets the regulated world: an exchange, a payment processor, or a service with identity checks. That is where a freeze becomes possible.
• Obfuscation. Mixers, peel chains, and cross-chain swaps exist to break the graph. Some are legal privacy tools; some are used almost exclusively to launder theft. The analyst's job is to tell the difference, honestly.

None of this is automatic. Tools exist that automate parts of the graph-building. But the judgement calls — is this cluster the thief, or an exchange hot wallet that touched the funds innocently? — are human ones, and they carry consequences.

Where does the trail break down?

Three places, mostly. First, mixing services deliberately tangle inputs and outputs so the link between them is probabilistic rather than certain. Second, cross-chain bridges move value onto a different ledger, where the original chain's history no longer helps. Third, and most commonly, funds simply sit still. A thief who waits is harder to catch than one who spends.

There is a fourth, quieter failure: the trail ends at a service in a jurisdiction where no one will cooperate. Tracing can be perfect and still lead nowhere the victim can reach. Analysts who do this work honestly will tell you that a traced trail and a recovered asset are two different outcomes, and the second is much rarer.

What this means for you as a holder

Our analysis of how this work operates points to one practical conclusion: prevention does the heavy lifting. Once funds leave your wallet, your leverage drops sharply. The mechanisms analysts chase after a theft are the same mechanisms that make certain scams work — the pig butchering scam, explained for crypto newcomers, is a good example of a scheme that ends with funds dispersed across many addresses before the victim even realizes what happened. Readers following this should also see What is a pig butchering scam, and how does it target crypto newcomers?.

The practical steps are the unglamorous ones. Keep the bulk of your holdings in self-custody, and understand the trade-off: self-custody removes counterparty risk and replaces it with the risk of losing your own keys. If you use a seed phrase, treat it as the single point of failure it is — our guide to what a seed phrase is and why it matters covers the basics. Never share it, never type it into a website, and be suspicious of anyone who asks. This connects to our earlier piece, What is a seed phrase, and how does it actually protect your wallet?.

If you do lose funds, report it early and document everything: addresses, transaction hashes, timestamps, and any messages with the counterpart. Investigators can only work with what they are given, and the earliest hops in a trail are the cleanest.

Who bears the risk when tracing fails?

Almost always the user. Exchanges carry insurance and legal teams. Thieves, by definition, accept the risk. The person who clicked a malicious link or trusted a fake support agent has none of those buffers. That asymmetry is worth naming, because most security writing — including ours — spends more time on protocols and platforms than on the person at the end of the trail.

It is also worth noting what this work is not. It is not law enforcement, though its output often supports investigations. It is not a recovery service, and anyone who promises to recover your stolen crypto for an upfront fee is running a second scam on top of the first — a pattern covered in our security coverage. And it is not a guarantee. The blockchain's transparency helps investigators; it does not conjure funds back.

What the evidence supports, and what remains open

What is established: public blockchains make fund movements traceable in principle, clustering and off-ramp analysis are the standard methods, and the trail frequently fails at mixers, bridges, or uncooperative jurisdictions. What remains uncertain, and honest analysts say so: how often tracing leads to actual recovery, and how the balance shifts as privacy tooling improves. Anyone promising certainty on either question is selling something.

For broader context on how regulators and platforms are reacting to these risks, our crypto news section tracks enforcement actions and rule changes as they land. The one-line takeaway: the ledger remembers everything, but remembering is not recovering — and the best position is the one that never needs an analyst.

According to Wikipedia, a blockchain is a distributed ledger whose blocks each contain a hash of the previous block, a timestamp, and transaction data, so changing an old record means changing every block after it and getting the network to accept the change. That is the whole trick. Everything else — coins, tokens, smart contracts — sits on top of it.

This piece walks through the three moving parts: what a block actually holds, what the computers running the network do, and how they agree. If you want the plainest possible starting point first, our What is blockchain, really? A plain-English explainer covers the ground in fewer words.

What is a block, and what goes inside one?

A block is a batch of confirmed records. Per Wikipedia, each block carries three things: a cryptographic hash of the previous block, a timestamp, and the transaction data itself, which is usually organised as a Merkle tree — a structure that lets anyone verify a single transaction is in the block without downloading all of it.

The hash is the part that makes the chain a chain. A hash is a fixed-length fingerprint of data; change one character in the input and the fingerprint changes completely. Because each block stores the previous block's fingerprint, rewriting an old block breaks every fingerprint downstream. The network would reject the tampered version unless it accepted the whole rewritten history, which brings us to consensus.

One caution on the word you will see everywhere: "immutable". The IBM explainer describes records as immutable, but also notes the honest caveat — if an error is recorded, it is not deleted. A new transaction is added to reverse it, and both stay visible. Blocks are extremely hard to change retroactively, not literally impossible. Forks happen, and our hard forks vs soft forks, explained piece covers what happens when the chain splits.

What do nodes actually do?

A node is a computer running the network's software and holding its own copy of the ledger. Nodes pass transactions to each other, check that new transactions follow the rules, and relay valid ones onward. Run enough of them across enough jurisdictions and no single operator can quietly rewrite the shared record.

Two kinds of node matter for a beginner. Full nodes verify everything themselves, from the first block to the latest. Lighter nodes rely on full nodes for some checks and trade trust for convenience. Our What is a blockchain node? explainer goes deeper on the distinction.

Here is what this means in practice: when you send a transaction, you are not asking a company to process it. You are announcing it to a peer-to-peer network, and the nodes decide whether it is valid. Wikipedia traces this design to Satoshi Nakamoto's 2008 bitcoin paper, which solved the double-spending problem — the risk that digital money gets spent twice — without a trusted central server. IBM's overview notes the same lineage and adds that platforms like Ethereum, launched in 2015, extended the ledger to run smart contracts, which are agreements written in code that execute automatically.

What is consensus, and why does it matter?

Consensus is the rule the network uses to agree on the next block. Without a boss, the computers need a procedure for deciding whose version of history counts. Different chains use different procedures — proof of work makes participants spend computing effort to propose blocks; proof of stake makes them post value they lose if they cheat. Our What is a consensus mechanism? piece compares them in detail.

Consensus is also where the guarantees get thinner than marketing suggests. Wikipedia notes that blockchain records are not unalterable — forks are possible — and that a majority of the network's power colluding can rewrite recent history, the scenario behind our What is a 51% attack? explainer. The security comes from making that collusion expensive and visible, not from making it impossible.

Timing matters too. A transaction in the latest block is not instantly irreversible; different chains give different finality guarantees. Our What does block finality mean? explainer covers when a transaction is truly settled.

Public, private, and everything in between

Not every blockchain is open to everyone. The sources describe a spectrum. Public blockchains let anyone read, write, and verify. Private ones restrict access to authorised participants, typically inside companies. Consortium chains are run by a fixed group of organisations, and hybrid designs mix elements of each. Our Public vs private blockchains, explained piece lays out the trade-offs side by side.

The private variants carry a real criticism. Wikipedia records that Computerworld called the marketing of such privatised blockchains, without a proper security model, "snake oil" — a database with extra steps and none of the decentralised guarantees. Others counter that a carefully designed permissioned chain can be more secure in practice. Both positions are worth holding in mind when a company announces a "blockchain solution": the word alone tells you very little about what is actually being guaranteed.

Our analysis: what the machinery does and does not give you

Strip away the vocabulary and blockchain technology does one specific job. It lets a group of mutually distrusting computers maintain one shared record, using hashes to make tampering evident and consensus to make tampering expensive. IBM's overview frames the benefit the same way: security, transparency and a single source of truth without relying on intermediaries such as banks.

What it does not give you is a free lunch on trust. You still trust something — the consensus rules, the code, the economic incentives, and the majority of the network. The ledger removes the administrator who could quietly edit a database. It replaces that administrator with a rule, and rules can have bugs, forks, and majorities that misbehave. That is the honest frame for everything built on top, from coins to contracts.

If you want to see the machinery directly, our How to read a block explorer, step by step guide shows you real blocks, hashes and timestamps in a browser — no wallet needed. And for how the ledger's contents are structured, see What goes inside a blockchain block?

The bottom line for newcomers

The evidence here supports a narrow, useful conclusion. A blockchain is a hash-linked chain of blocks, maintained by peer-to-peer nodes, extended only by consensus. It solves double-spending without a central operator, which is a genuine engineering achievement. It does not make records physically unchangeable, it does not remove all trust, and private versions may not deliver decentralisation at all.

One last caution, since this site covers assets built on this machinery: crypto assets can lose most or all of their value quickly, and nothing here is a reason to buy any of them. Understanding how the ledger works is worth doing for its own sake. It will not tell you what a token is worth — only who bears the risk when the machinery is stressed.

The timing is the part worth your attention. The announcement came a week after the U.S. Senate failed to advance the Digital Asset Market Clarity Act — a wide loss in which all Senate Democrats and some Republicans declined to support it. When a lobby group swaps leadership right after a legislative defeat, the practical question is simple: does the strategy change, or just the person delivering it?

Here is how to follow the story without getting lost in press-release language.

What exactly happened?

Mersinger is leaving the helm of the Blockchain Association. According to CoinDesk, she will be replaced on an interim basis by Kristin Smith, who ran the association from its launch in 2018 until 15 months ago. The transition was announced in a Friday statement.

Smith had left the Blockchain Association last year to become president of the Solana Policy Institute, a new group. She kept the BA board presidency while she was away. A BA spokesman said she will keep her SPI job while serving as interim CEO.

Why does the Clarity Act loss matter here?

The Senate rejected the Digital Asset Market Clarity Act days before the leadership announcement. That bill was the industry's attempt to settle, in law, which regulator oversees which digital assets. Its failure means that question stays open. For related coverage, see What T+0 settlement means, and why Hana Bank's digital bond matters.

Mersinger had taken the job after leaving her post as a commissioner at the Commodity Futures Trading Commission. In her exit statement, she pointed to what she called the move "from the GENIUS Act to real regulatory clarity at the SEC and CFTC." The GENIUS Act — the Guiding and Establishing National Innovation for U.S. Stablecoins Act — became the first major U.S. crypto law during her tenure.

So the record she leaves behind cuts both ways: a stablecoin law passed, and the broader market-structure bill did not. Smith described Mersinger's period as the "most consequential moment in the history of crypto policy," citing the GENIUS Act and heavy activity at the Securities and Exchange Commission and the CFTC.

How should you read a leadership change like this?

Think of it like a company replacing a coach after a lost season — the analogy breaks down here, because a trade association answers to its member companies, not to fans or owners in the usual sense. The members fund it, and they decide what counts as a win.

A few practical checks you can run on any similar announcement:

• Interim or permanent? Smith's title is interim CEO. That word signals the board has not settled on a long-term direction. The permanent hire will tell you more than the interim one does.
• Timing relative to a setback. This change came one week after the Clarity Act failed in the Senate. CoinDesk's reporting frames the loss as closing "a tumultuous era." Correlation is not causation, but the sequencing is a fact worth holding onto.
• What the outgoing leader claims. Mersinger's statement lists wins. Statements are the organization talking about itself, so weigh them as advocacy, not as neutral assessment.
• Who actually takes over day to day. Smith keeps her Solana Policy Institute role. Split leadership across two organizations is unusual, and it raises fair questions about focus — questions the reporting does not answer.

What does this mean for you as a reader or holder?

Honestly, less than the headlines suggest. A trade-association CEO change does not change how any blockchain works, what any wallet holds, or how any exchange settles a trade. Protocol rules and platform behavior are separate things from lobbying outcomes, and neither moved here.

What it does change is the odds on future rules. The Clarity Act's failure means the regulatory question — which agency oversees which digital asset — remains unsettled. If you hold crypto assets, that uncertainty is a real risk factor: rules can change how and where you can trade, and crypto assets can lose most or all of their value quickly regardless. Nothing here is a reason to buy anything.

If you want the underlying mechanics rather than the politics, our What is blockchain, really? A plain-English explainer covers what these networks actually do, and our blockchain hub keeps the fundamentals in one place.

What should you watch next?

Three things, all grounded in what the reporting establishes:

1. The October 16 handover. That is the confirmed date. Watch whether Smith's interim role becomes permanent or a search begins.
2. The Clarity Act's afterlife. The Senate failed to advance it, but the reporting does not say the legislative effort is dead. Any reintroduction would be the next data point.
3. Whether the association's priorities shift. Smith built the group from 2018 and now leads it while running the Solana Policy Institute. Watch which issues she emphasizes first — that is the nearest thing to a strategy statement the transition gives you.

One caveat to keep in view: everything above rests on a single day's reporting and the association's own statements. The reasons behind Mersinger's exit are not explained in the available material, and neither side has said what the long-term plan is. Treat the open questions as open.

The important qualification: "hard to change" is not the same as "impossible." Chains can be rewritten if enough of the network agrees, and forks — competing versions of the ledger — are a real, documented possibility. What a blockchain actually gives you is a record where any change has to be visible to, and accepted by, most of the network. That is the whole trick, and everything else follows from it.

Think of it like a shared notebook that a thousand people photocopy after every page is added. If someone alters one copy, it no longer matches the other 999. The analogy breaks down here: a real blockchain also uses cryptography to bind each page to the previous one, so tampering with an old page would break the fingerprints of every page after it — and the network would reject your copy as the fake one.

What does a block actually contain?

Each block carries three things, as Wikipedia's overview of blockchain describes it: a cryptographic hash of the previous block, a timestamp, and the transaction data itself, usually organised in a structure called a Merkle tree. The hash is the key part. A hash is a fixed-length fingerprint produced from a block's contents — change one character in the data and the fingerprint changes completely.

So block 500 contains the fingerprint of block 499, which contains the fingerprint of block 498, and so on back to the first block. That is the chain in blockchain. To quietly alter an old transaction, you would have to redo that block and every block after it, then convince the rest of the network to accept your version. On a large public network, that is effectively out of reach — not by magic, but by arithmetic and economics.

For a closer look at the contents, see our guide to what goes inside a blockchain block.

Who keeps the ledger honest?

No company owns a public blockchain's ledger. It is maintained by a peer-to-peer network of computers called nodes, each holding its own copy and following the same rulebook. As IBM explains in its blockchain primer, transactions are validated through a consensus mechanism — a process the network uses to agree on which new block is legitimate — so the participants reach agreement without a central referee.

That rulebook is the consensus mechanism, and it matters more than the marketing. Different chains use different methods to decide who may add the next block and how disagreements are settled. If you want the mechanics, our explainer on what a consensus mechanism is covers the main designs. The honest caveat: consensus rules can fail or be attacked. A party controlling most of the network's processing power could in principle rewrite recent history, which is the threat behind a 51% attack.

Why did someone build this in the first place?

The trigger was a problem that had blocked digital cash for decades: double-spending. A digital file copies perfectly, so what stops someone spending the same coin twice? Traditional systems solve it with a bank keeping the master ledger. Blockchain solves it differently — the shared ledger confirms that each unit of value was transferred only once, without needing a trusted authority or central server. For related coverage, see What T+0 settlement means, and why Hana Bank's digital bond matters.

The design arrived in 2008, published under the pseudonym Satoshi Nakamoto, and was implemented in 2009 as the ledger behind bitcoin. It built on earlier work — cryptographer David Chaum proposed a blockchain-like protocol in 1982, and Stuart Haber and W. Scott Stornetta described a cryptographically secured chain of blocks in 1991, aiming to make document timestamps tamper-proof. Nakamoto's contribution was a way to timestamp blocks without any trusted party signing them.

What a blockchain does well — and what it doesn't

Our analysis: the genuine strengths are narrow and worth stating precisely. Records on a shared ledger are visible to participants, hard for any single party to quietly revise, and carry their own audit trail. IBM lists traceability, tamper-evident records and reduced reconciliation work as the main business benefits. If a transaction contains an error, it is not deleted — a correcting transaction is added, and both stay visible.

The limits are just as real. A blockchain is a slow, expensive kind of database compared with a normal one, because every participant does the work of checking and storing everything. "Immutable" records are only as permanent as the network's consensus — a contested fork can split history. And a ledger is only as trustworthy as what gets written into it: a blockchain faithfully records false data just as permanently as true data. Anyone selling a private, permissioned version of the technology should be asked what security model actually protects it; Wikipedia notes that Computerworld once called the marketing of such systems without one "snake oil," though others argue carefully designed permissioned chains can work in practice.

For the trade-offs between open and closed designs, see public vs private blockchains, explained.

How does this connect to crypto and Web3?

Cryptocurrencies were the first mass use: the blockchain is the ledger that records who owns what, so balances can be checked by anyone running a blockchain node. Later, platforms such as Ethereum extended the idea from recording transactions to running programs on the chain — smart contracts, which execute automatically when their written conditions are met. Our guide to how smart contracts actually work walks through that.

From there the field widened into what people now call Web3 — decentralised finance, tokens, and applications that lean on these shared ledgers instead of company databases. The scale has grown with it: Wikipedia records that the bitcoin blockchain's data file passed 600 GB by 2024, up from about 20 GB in 2014. That growth is the ordinary cost of a ledger everyone copies in full.

What this means: the one-minute version

If a friend asks, here is the honest one-minute answer. A blockchain is a record book copied across thousands of computers. New entries are grouped into blocks, and each block carries a fingerprint of the previous one, so the whole history locks together. No single company controls it; the network follows shared rules to agree on each new block. Changing an old entry would mean redoing the chain and winning the network's agreement — practically impossible on a big public chain. It solves one specific problem, keeping a shared record without a referee, and it does so at real cost in speed and storage. It is not a guarantee of truth, not a risk-free technology, and not — on its own — a reason to buy anything.

For more on how distributed ledgers reach agreement and what guarantees they do not provide, browse our blockchain section.

The important qualification: the rate you see is rarely the rate you get. Banks and currency providers add a margin on top of the reference rate, and that margin, not the market, is often the biggest cost of converting money.

This guide explains where the number comes from, why it moves, and why your bank's quote differs from the one on a converter site. The mechanics matter whether you are planning a trip, sending money abroad, or trying to understand headlines about the dollar, the euro or the yen. Readers following this should also see What Basel bank rules mean for crypto.

Who actually sets exchange rates?

For major currencies, the answer is: the market. Currencies trade continuously in the foreign exchange markets, and it is that trading that determines the relative values of different currencies, as the Wikipedia entry on currency describes. There is no official price list. A rate is simply the last price at which buyers and sellers agreed.

That said, governments are not powerless. Most countries issue their own currency, and some manage its value actively. A government can decree which money must be accepted for payments within its borders — legal tender laws can require a particular unit of account for payments to government agencies. A few countries peg their currency to another, holding it near a chosen level by buying and selling reserves. Others let the market set the rate and intervene only in emergencies.

So the honest answer has two layers. The day-to-day number is set by trading. The rules of the game — which currency exists, whether it floats or is pegged, and how freely it can be exchanged — are set by governments and central banks.

What is the mid-market rate, and why don't you get it?

The mid-market rate is the midpoint between what buyers will pay and what sellers will ask for a currency pair. It is the rate you see quoted on converter tools. Xe's currency converter states plainly that it uses the mid-market rate for informational purposes, and that you will not receive that rate when you actually send money.

Why not? Because every provider in the chain takes a slice. The gap between the reference rate and the rate you are offered is the margin, and it varies enormously by channel. Oanda's converter includes a comparison table of typical retail margins, showing the same dollar-to-euro conversion at everything from the interbank rate with no margin to a kiosk rate carrying roughly a 5% margin. A bank transfer, an ATM withdrawal and an airport kiosk can sit at very different points on that scale.

Think of it like a ticket reseller — the analogy breaks down in one way: there is no face value printed on a currency. The mid-market rate is the closest thing to a fair price, and everything above it is somebody's fee, whether it is labelled as one or buried in the exchange rate itself.

Why do exchange rates move?

Currency prices move for the same reason any price moves: supply and demand. When more people and institutions want to hold dollars, the dollar rises against other currencies. When they want out, it falls. The forces behind that demand are broad:

• Interest rates. When a central bank raises rates, holding that currency earns more. That tends to attract money and support the currency's value.
• Inflation. A currency that loses purchasing power quickly tends to weaken against currencies that hold theirs. Inflation readings move currency markets for this reason.
• Economic expectations. Traders price in what they expect, not just what is. A weak growth forecast can push a currency down before anything actually happens.
• Trade and capital flows. A country that exports a lot sees steady demand for its currency from foreign buyers paying for goods.
• Risk sentiment. In stressed markets, money often flows toward a small number of currencies seen as safe harbours, which can move rates sharply.

The same logic applies to assets that trade against currencies. Crypto prices respond to comparable forces — flows, expectations and sentiment — which we cover separately in Why crypto prices move the way they do. The difference is that major fiat currency markets are far deeper, so their prices usually move in smaller increments.

How often do rates change?

Continuously during trading hours. Reference rates update in near real time as trades happen. Oanda's converter notes that its rates update every hour to reflect the latest market data, while other services refresh more frequently. The mid-market rate at 3 p.m. may not be the mid-market rate at 3:05 p.m.

For a traveller this matters less than it sounds. Short-term wiggles are usually small compared with the retail margin — Oanda's comparison table shows kiosk margins of around 5%, a scale that dwarfs typical short-term rate moves. Over months, though, the moves compound, which is why savers holding money in a foreign currency watch the trend, not the hour.

What this means for your money

Our analysis, based on how the market is structured: the rate itself is not where most people lose money. The margin is. Three practical steps follow directly from the mechanism.

• Find the reference rate first. Check the mid-market rate on a converter before any conversion, so you know the fair price. Xe and Oanda both publish it, and both flag that it is informational only.
• Ask what rate you will actually receive. The difference between the reference rate and your quoted rate is your real cost. If a provider will not tell you, that is the answer.
• Compare channels, not just providers. Bank transfer, card, ATM and kiosk margins differ, as Oanda's comparison table illustrates. The cheapest channel for one corridor is not always cheapest for another.

One caution in the spirit of this site: currency conversion is a cost question, not an investment opportunity. Nobody can reliably predict next month's rate, and products promising to beat the market on currency moves carry the same risk as any speculation. If your interest in exchange rates extends to digital assets, note that a stablecoin is designed to track a single currency's value, which we explain in What is a stablecoin and how does it work? — including the ways that design can fail.

The takeaway

Exchange rates are market prices set by continuous global trading, bounded by rules that governments and central banks choose. The number on a converter is the mid-market reference rate; the number on your receipt is that rate plus a margin that varies widely by provider and channel. Check the reference rate, ask for the real one, and treat anyone offering certainty about where rates go next the way you would treat anyone selling a forecast: with a highlighter and a raised eyebrow.

It was the first time a Korean financial institution directly used the international depository's distributed-ledger infrastructure. That detail matters less as a headline than as a mechanism demonstration: an established market institution ran a live bond on ledger rails, and the multi-day settlement cycle disappeared. This guide explains what T+0 means, how a platform like Euroclear's D-FMI works, and what the trade-offs are.

For readers new to the underlying technology, our blockchain section covers the fundamentals, including public vs private blockchains, explained — the distinction matters here, because Euroclear's platform is a permissioned system run by a single institution, not an open network like Bitcoin.

What does T+0 settlement actually mean?

When a bond trades, the buyer pays and the seller delivers. The gap between the trade and that exchange is the settlement cycle. Under conventional systems, this typically runs three to five business days, per the CoinDesk report. That gap is a risk window: prices can move, a counterparty can fail, and money or securities sit in limbo.

T+0 means the exchange happens on the day of the trade itself. In Hana's case, bond allocations and payments were completed on the issuance date. The shorter the cycle, the smaller the window in which something can go wrong between agreement and delivery.

What is Euroclear's D-FMI?

Euroclear is a Brussels-based financial services company and one of the world's largest central securities depositories — institutions that hold securities and record who owns them. Its Digital Financial Market Infrastructure, or D-FMI, handles issuance, registration and settlement of securities on a distributed ledger rather than through conventional systems, according to CoinDesk.

Two design details stand out. First, D-FMI connects to Euroclear's existing settlement network, so institutional investors could buy and trade the bond through their current Euroclear accounts without installing separate systems. Second, Hana used documentation from its existing global medium-term note program, meaning the legal paperwork was not new — only the settlement layer was. For related coverage, see Layer 1 vs Layer 2, explained.

This is the pattern to watch: the ledger replaces the plumbing, not the legal structure. A distributed ledger is a shared record of ownership that participants write to and verify, rather than a single database one party controls. Our explainer on what is a consensus mechanism? covers how such ledgers agree on what the record says.

Why did a Korean bank use foreign infrastructure?

South Korea is preparing its own tokenized-securities framework. The country's Financial Services Commission has set a February 2027 launch date for a full tokenized framework, according to CoinDesk. Hana's bond is described as the first live proof that Korean banks can plug directly into established global blockchain settlement infrastructure without waiting for domestic rules to catch up.

Hana Bank is ranked second in South Korea, with nearly $500 billion in client assets under management, per the same report. A bank official said, according to the Korea Herald as quoted by CoinDesk: "The $100 million digital bond issuance and implementation of T+0 settlement represent a significant step beyond simply diversifying our funding channels, as they bring blockchain technology into the capital market." The official added that the bank would "continue to adopt advanced infrastructure and explore innovative funding solutions that meet the needs of global investors."

CoinDesk reported that Hana Bank and Euroclear did not immediately respond to a request for information. Standard Chartered was the sole lead manager on the issuance.

Does same-day settlement remove risk?

No. It removes one specific kind of risk — the multi-day gap between trade and delivery — and replaces it with dependence on the platform running the ledger. If the D-FMI has an outage or a defect, settlement on that platform stops or errs with it. That is the trade-off any permissioned infrastructure carries: efficiency concentrated in one operator's system.

There is also a scope limit. This was an issuance on one platform, using existing legal documentation, through one lead manager. It demonstrates that the mechanism works. It does not yet demonstrate that the broader market has moved, and the evidence available covers a single transaction.

What should a newcomer take from this?

Three points, all traceable to the reporting:

• Tokenization here means recording securities on a distributed ledger — the bond itself is not a speculative token, and nothing in the reporting suggests a retail investment product.
• The gain was operational: a three-to-five-day cycle replaced with same-day settlement.
• Regulatory timelines still shape adoption; Korea's framework arrives in February 2027, and issuers are using foreign infrastructure in the meantime.

None of this is a reason to buy anything. Crypto assets can lose most or all of their value quickly, and this issuance is infrastructure news, not an investment signal.

What happens next

The durable question is whether same-day settlement on ledger rails becomes routine for cross-border bond issuance or stays a one-off demonstration. The February 2027 Korean framework will show whether domestic rules can support what Hana did through Euroclear. Until more issuances are reported, the evidence base is one transaction — a real one, but only one.

A blockchain is a shared digital record, kept across many computers, where entries are hard to change once made. That design genuinely solves a few problems. It also brings trade-offs: slower systems, higher costs, and new security burdens that fall on you rather than a company.

This article walks through what the term means, which web3 ideas have held up, which have not, and what that means for a newcomer deciding what — if anything — to do about it.

What does web3 actually mean?

The term is hazy even by its supporters' standards. According to Wikipedia, web3 is an idea for a new iteration of the web incorporating decentralization, blockchain technologies, tokenomics, and privacy-enhancing technologies. Ethereum co-founder Gavin Wood coined it in 2014, describing a decentralized online ecosystem built on blockchain.

The shorthand most people use comes from the web's history. Web 1.0, roughly the 1990s to 2004, was read-only: static pages you consumed. Web 2.0, from around 2004 to now, is read-write: social media, blogs, and platforms where users create content — but companies own the platforms and monetize the data. Ethereum's own educational site describes web3 as "read-write-own," a web where users hold their own assets and data instead of renting access from a platform.

That ownership promise is the core of the pitch. Whether it holds is a separate question.

Which web3 ideas actually work today?

Strip away the buzzwords and a few mechanisms have proven durable:

• Programmable money and settlement. Sending value directly between two parties without a bank intermediary works, and it works around the clock. The trade-off is that you are your own customer service department.
• Smart contracts. A smart contract is a program stored on a blockchain that runs automatically when its conditions are met. If you want the mechanics, our guide to what a smart contract is covers it in plain English. They work — but only as well as the code behind them, and buggy code has cost users real money.
• Token standards. Shared formats like ERC-20 make assets interoperable across applications. Our explainer on token standards ERC-20 and ERC-721 explains why that plumbing matters more than most marketing admits.
• Human-readable names. Services like ENS map long wallet addresses to simple names. Our piece on what an ENS domain name is covers a small, genuinely useful piece of the stack.

Notice what these have in common: each one does a specific job. None of them needed the word "web3" to function.

Where the hype outruns reality

The gap between the vision and the product shows up in three places.

Decentralization is often thinner than advertised. Critics have pointed out that many web3 services rely on a small number of infrastructure providers, exchanges, and interfaces — meaning the new web can resemble the old one. Kevin Werbach, an ethics professor quoted in the Wikipedia article, said in 2021 that many so-called web3 solutions are not as decentralized as they seem, and have yet to prove they are scalable, secure, and accessible enough for the mass market. That is a fair summary of where things still stand.

Ownership claims need reading carefully. The pitch says you own your digital assets. What you actually own depends entirely on how the token is written. Our article on what you actually own when you buy an NFT is worth reading before believing any ownership claim.

"Decentralized" does not mean "safe." DeFi — decentralized finance, meaning lending and trading through smart contracts instead of banks — is real technology and real risk. Our DeFi basics guide covers how it works, including the ways it can go wrong. There is no deposit insurance, no reversal button, and no one to call. We covered a connected angle in DeFi basics: lending and trading without banks.

What the critics get right — and what they miss

Skeptics have their own list. Wikipedia notes that commentators including Elon Musk and Jack Dorsey have dismissed web3 as a buzzword, and that critics have raised concerns about wealth concentrating with a small group of early investors — an irony for a movement built on decentralization. Others have described it as an extension of short-lived trends like NFT speculation.

Our analysis: both sides are partly right, and the useful frame is not "web3 good or bad" but "which specific mechanism solves a specific problem." A peer-to-peer payment that settles in minutes is a real capability. A token bolted onto an ordinary app to justify a valuation is not. The technology is interesting and the risks are real, and it is fine to say both.

Practical steps before you touch any of this

If you decide to explore web3 at all, the preparation matters more than the project:

1. Understand custody first. Read our comparison of custodial vs. self-custody wallets. Self-custody gives you control and makes you responsible for every mistake. Neither option is risk-free.
2. Budget for costs. Transactions carry fees that change with network demand — our guide to why gas fees change explains the mechanics. Trading also has hidden costs; see our piece on what slippage costs you.
3. Assume volatility. According to Wikipedia, the concept of web3 has been described as part of a cryptocurrency bubble. Nothing here is a reason to buy any of them, and no web3 token is a savings account.
4. Check the security surface. Every connection between your wallet and an application is a place where things go wrong. Our security section covers the common attack patterns.

Where this leaves a newcomer

The evidence points to a split verdict. The durable parts of web3 — programmable settlement, open token standards, self-custody — are narrow tools that do real jobs. The fog around them, from ownership promises to decentralization claims, deserves the skepticism its critics apply. What remains unknown is whether the mass-market problems of scale and usability get solved; as Werbach noted, that may change, but it is not given.

The honest position for a newcomer is curiosity with a locked wallet door. Learn how the pieces work, treat every ownership and decentralization claim as a claim to verify, and never commit money you cannot afford to lose entirely.

A liquidity is how easily an asset can be bought or sold without moving its price. Thin markets slip. According to SoFi's explainer on crypto slippage, slippage is the difference between the expected price and the executed price, driven by volatility and low liquidity, and it happens in stock, bond and foreign-exchange markets too — crypto is just more prone to it because trading never stops and liquidity is spread thin across thousands of pairs.

This piece explains where slippage comes from, why it varies by market and by venue design, and what you can realistically do about it. None of this is a reason to trade or to buy anything. Crypto assets can lose most or all of their value quickly, and slippage is only one of several costs stacked against you.

What exactly is slippage in crypto?

Slippage is the gap between your expected price and your executed price. Say you place a market order — an instruction to trade right now at whatever the current price is. Between the moment you click and the moment the trade settles, the price can move. If you meant to buy at one number and filled at a slightly worse one, that gap is negative slippage. If the price moved in your favour, that is positive slippage.

As Coinbase's glossary entry puts it, slippage can be positive or negative, and it is primarily caused by market volatility and low liquidity. The key point: it is a market outcome, not a charge. Nobody bills you for it, which is exactly why it is easy to overlook.

One related idea deserves its own definition: price impact. A very large order consumes the best available offers first, then the next best, and so on, walking the price against itself. Price impact is the part of slippage caused by your own order size rather than by the market moving while you waited.

Why does slippage happen? Four causes

Four factors drive most slippage, and they compound:

• Low liquidity. In a thin market there may not be enough orders at your price to fill you. The order fills at progressively worse prices. Small tokens are the usual victims.
• Volatility. Crypto prices can move sharply within seconds. The faster the market moves, the more the price can slip between placing and filling an order.
• Large order size. Even a liquid market will move if your order is big relative to what is sitting at the current price.
• Network delays. On decentralised exchanges, a swap is a blockchain transaction. If the network is congested, your transaction can wait before it is confirmed — and the price can move while it waits.

That last cause is unique to decentralised trading. On a dApp, your swap runs through a smart contract on-chain, so execution speed depends partly on network conditions rather than on an exchange's matching engine. Congestion and waiting time add a layer of slippage risk that centralised venues largely avoid.

Why slippage varies by venue: order books vs. pools

Where you trade changes how slippage behaves. Centralised exchanges match buyers and sellers in an order book. Slippage there depends on how deep that book is at the moment your order arrives. Deep books in major pairs mean small gaps; thin books in obscure tokens can mean large ones.

Decentralised exchanges work differently. Many use liquidity pools rather than order books: traders swap against a pool of tokens supplied by other users, and the pool's formula sets the price based on the ratio of tokens in it. A big swap shifts that ratio sharply, so price impact is baked into the design. Pools for popular pairs can be deep; pools for small tokens often are not. As Altrady's guide notes, smaller altcoins with thin order books can see slippage of several percent on a single trade, and decentralised venues often carry lower liquidity than centralised ones, which can push slippage higher.

Network fees are a separate cost, but they interact with slippage. High gas fees and congestion tend to arrive together, and congestion is one of the four slippage drivers. Cheaper execution layers, such as the rollups covered in our explainer on how Ethereum rollups make transactions cheaper, can shorten the waiting window in which prices slip — though they do not remove the risk. For related coverage, see How do Ethereum rollups work, and why do they make transactions cheaper?.

What this means: practical ways to limit slippage

You cannot eliminate slippage. You can make it smaller and more predictable. The levers below are general considerations drawn from the sources cited here, not instructions tailored to your situation:

• Use limit orders where possible. A limit order names the worst price you will accept. If the market slips past it, the order simply does not fill. That converts unbounded slippage into a hard ceiling, at the cost of possibly missing the trade.
• Set a slippage tolerance on swaps. Most platforms let you cap the slippage you will accept; if the fill would exceed it, the trade fails. SoFi's guide describes a typical range of roughly 0.25% to 1% for this setting. Set it too wide and you accept bad fills; too tight and trades fail constantly in volatile conditions.
• Trade deeper markets. Major pairs on high-volume venues generally slip less than small tokens on quiet ones.
• Avoid chaotic moments. Sharp news-driven moves and network congestion are when slippage is worst. Patience is a cost-control tool.
• Size orders sensibly. Very large orders relative to available liquidity move the price against you. Splitting a large trade is a common consideration, though each split may carry its own fees.

Our analysis: the most underrated habit is simply looking at the quoted minimum received before confirming a swap. Most decentralised interfaces show it. If that number is far below what the spot price implies, the market is telling you the fill will be poor.

The limits: what slippage controls cannot fix

Every control above has a cost. Limit orders may never fill, so you trade certainty of execution for certainty of price. Tight slippage tolerances cause failed transactions, which on some networks still cost fees. Waiting for calm markets means accepting whatever price exists when calm returns. And positive slippage is not something to rely on — over many trades, unfavourable fills tend to dominate, because faster and better-resourced traders capture the good prices first.

Slippage also sits alongside other costs: trading fees, network fees, and the spread between buy and sell prices. Controlling one while ignoring the others improves little. For a wider view of how decentralised trading fits together, see our guide to DeFi basics: lending and trading without banks.

What the evidence establishes is modest and worth stating plainly: slippage is a structural cost of trading, largest in thin and fast markets, partly manageable with order types and tolerance settings, and never fully avoidable. What remains unknown for any specific trade is the size of the gap — which is why checking the quoted minimum received, every time, is the one step worth making automatic.

L4 News publishes information, not financial or security advice, and nothing here is a reason to buy any crypto asset. Crypto assets can lose most or all of their value quickly.

What exactly does a seed phrase do?

When you create a new wallet, the wallet software generates the seed phrase and then derives your private keys and account addresses from it mathematically. The words are not a password you invent — they come from a fixed list of 2,048 words defined in the BIP-39 standard, and the wallet picks them using randomness.

Think of it like a master key that a locksmith could copy any door key from. The analogy breaks down here: a locksmith needs equipment and access, while anyone with your 12 words needs nothing but an internet connection. That asymmetry is the whole reason seed-phrase handling matters so much.

Can I recover a wallet without the seed phrase?

Usually no. If you lose both the device and the seed phrase, the funds are in practice unrecoverable, because there is no customer-support desk that can reset a self-custody wallet. If you still have the phrase, recovery is simple: any compatible wallet app can rebuild all your accounts from it on a new device. Chainalysis estimated in 2024 that large amounts of bitcoin sit in wallets whose keys are presumed lost, though no figure is exact by definition.

Why 12 words and not a password?

Twelve words from the BIP-39 list carry 128 bits of entropy — enough that guessing them at random is beyond any realistic attacker, per the standard's own design. Human passwords fail because people reuse and shorten them. A fixed word list also avoids typos: the wallet can tell a valid phrase from an invalid one because the last word includes a checksum.

Where should I keep mine?

Offline, in more than one place, and never in a photo, email, or cloud note. Common approaches:

• Paper copies stored in two separate secure locations
• Metal backup plates that survive fire and water
• For larger amounts, a hardware wallet, where the phrase never touches an internet-connected computer

Hardware wallet makers Ledger and Trezor both document recovery-phrase handling in their 2024 support guides, and both warn against digital storage explicitly.

How do scammers target seed phrases?

The mechanism is almost always impersonation: a fake support agent, a phishing page that looks like a wallet login, or a "validation" request that asks you to type your phrase into a website. No legitimate service will ever ask for your seed phrase — not the wallet maker, not an exchange, not support. The U.S. Federal Trade Commission's 2024 consumer alerts name this exact pattern as the top crypto scam reported by victims.

What if I think my phrase is exposed?

Move the funds first, ask questions second. Create a fresh wallet with a new seed phrase on a clean device and transfer the assets over, because a copied phrase cannot be un-copied. Then treat the old wallet as burned. This works for assets on chains you can move yourself; for staked or locked assets, the exposure window lasts until you can unlock them, which is a reason to be careful about long lockups in the first place.

What the evidence establishes is simple: the seed phrase is the wallet, in every way that matters. What remains uneven is how well newcomers understand that before their first transfer, which is why regulators keep returning to plain-language warnings.

L4 News publishes information, not financial or legal advice, and none of this is a reason to buy any crypto asset, which can lose most or all of their value quickly.

What actually happened?

Between February and late 2025, the SEC moved to dismiss or settle cases it had brought against major exchanges including Coinbase, Kraken, and Binance, citing in staff statements a return to case-by-case analysis rather than regulation by enforcement. The dismissals are procedural outcomes, not rulings that the listed tokens are not securities; courts decided none of the central questions. Reuters covered each dismissal as it was filed.

Does this make exchanges safer?

Not by itself. The cases concerned how tokens were listed and whether registration rules applied — questions of securities law. Custody risk, fee structures, and withdrawal limits are separate matters governed by exchange policy and, in the U.S., a patchwork of state money-transmission rules. When an exchange failed in the past, as FTX did in 2022, customers learned the custody distinction the hard way: assets held by the exchange were tied up in bankruptcy, per the bankruptcy proceedings' 2023-2024 disclosures.

Should a newcomer do anything differently?

The basics are unchanged. Keep on an exchange only what you are actively trading; understand that assets on an exchange are legally the exchange's liability, not property in your name; and remember that self-custody carries its own burden — lose the seed phrase and no support desk can restore the wallet. Neither option is risk-free, and the trade-offs look the same as they did before the dismissals.

What the evidence establishes is a change in enforcement posture, documented in court filings. What remains unknown is what rules, if any, Congress or the agencies will put in the place of the dropped cases.

L4 News publishes information, not financial or security advice, and covering a scam mechanism is never a suggestion that any asset is worth holding.

How does a drainer actually steal funds?

The mechanism is an approval, not a password theft. Ethereum-style wallets let one address spend tokens held by another once the owner signs an approval, and drainers abuse that feature: the fake site shows a mint or claim button, the button triggers a transaction that grants the drainer unlimited spending rights, and the theft follows in a separate transaction the scammer controls.

Think of it like handing a parking valet your entire keyring instead of the car key. The analogy breaks down here: an approval can be granted for an unlimited amount and stays valid until you revoke it, sometimes for months.

What are the warning signs on the page?

Drainer pages follow a small set of patterns, and every one is visible before you connect a wallet:

• A free token, NFT, or airdrop that only requires "claiming" with a wallet connection
• A domain that imitates a known project with one character changed or a wrong ending
• Urgency: a countdown timer or "last chance" claim for something you never signed up for
• A signature request that appears the moment you connect, before you do anything else

The U.S. Federal Trade Commission's 2024 alerts describe the same pattern under broader crypto impersonation scams.

What does the wallet actually show me?

Modern wallet apps display what a transaction does before you sign, but the quality varies. A transfer shows the amount and destination. An approval shows the spender and an allowance, and the allowance is the field to read: "unlimited" means exactly that. MetaMask's 2024 security documentation advises users to treat unexpected approval requests as hostile and to verify the destination address independently.

Which habits actually prevent this?

Four habits cover nearly every documented drainer case:

1. Never connect a wallet to a site you reached from a link in a post, DM, or email — navigate to known projects by typing the domain.
2. Use a separate "burner" wallet for minting and claiming, holding only what that task needs.
3. Read allowance fields before approving; reject anything requesting unlimited spend.
4. Revoke old approvals periodically with a revocation tool, on a day when nothing else is happening.

What if I already signed something suspicious?

Act in this order: revoke the approval with a revocation tool if the theft has not happened yet, move remaining assets to a fresh wallet if it has, and then report the address. Reporting rarely recovers funds on public chains, but platform takedowns of the scam pages do follow reports. Loss stories are not minimized here: on public blockchains, a confirmed transfer is usually final.

Custodial versus self-custody: which is safer against drainers?

Neither is simply safer; they fail differently.

Self-custody is not risk-free, and the table is the honest reason why: it trades one set of risks for another.

What the evidence shows is that drainers exploit a specific mechanism — blind approval signing — and that the defense is behavioral, not a product you can buy. What remains unknown is how quickly wallet interfaces will make allowances impossible to overlook by default.

Rollups exist because Ethereum's base layer, often called Mainnet or layer 1, can only process a limited number of transactions before fees rise. According to Ethereum.org's documentation on layer 2 rollups, rollups "perform transaction execution outside layer 1 and then the data is posted to layer 1 where consensus is reached," which lets the network inherit Mainnet's security guarantees without every transaction competing for Mainnet's limited block space.

What does a rollup actually do with a transaction?

A rollup operator collects many users' transactions, executes them off-chain, and bundles the results into a single batch. That batch, not each individual transaction, is what gets posted to Ethereum. Ethereum.org's documentation describes the effect directly: "transactions are rolled up into a single transaction to Mainnet Ethereum, reducing gas fees for users." Because hundreds of transactions can share the cost of one Ethereum-layer submission, the price each user pays drops sharply compared with transacting on Mainnet directly.

Think of it like a delivery van that waits to fill up with packages before making one trip across town instead of driving each package separately — the analogy breaks down because the "van," in a rollup, still has to prove to Ethereum that every package inside actually belongs there and wasn't tampered with. That proof step is where optimistic and zero-knowledge rollups diverge.

How do optimistic rollups prove their batches are honest?

An optimistic rollup assumes a batch of transactions is valid the moment it's posted, then gives anyone a window of time to challenge it if they think it's wrong. Per Ethereum.org's optimistic rollups documentation, "optimistic rollups execute transactions outside of Ethereum, but post transaction data to Mainnet as calldata or in blobs," and the system relies on fraud proofs rather than upfront cryptographic verification. If a challenger disputes a batch, the network runs an interactive "bisection protocol" that narrows the dispute down until "both parties are disputing an assertion about a single step of execution" that Ethereum itself can check and settle.

This design is lean by construction: Ethereum.org states that "the validity of the chain relies on the existence of one honest node" willing to catch and challenge fraud. The trade-off is time. Users who want to withdraw funds from an optimistic rollup back to Ethereum "must wait for the one-week challenge period to expire," according to the documentation, because the network needs to leave room for a challenge to surface. Some services front users the money and collect a fee to skip that wait, but the underlying protocol delay is real and it's the main practical downside of this design.

How do zero-knowledge rollups prove their batches are honest?

A zero-knowledge, or "zk," rollup takes a different approach: instead of assuming a batch is correct and waiting to see if anyone objects, the operator generates a cryptographic validity proof showing the batch is correct before it's ever posted to Ethereum. Ethereum.org's zero-knowledge rollups documentation explains that these proofs let "parties to prove the correctness of a statement without revealing the statement itself," using one of two proof systems: ZK-SNARKs, which are smaller and faster to verify but require a trusted setup process, or ZK-STARKs, which don't need that trusted setup and are considered more resistant to future quantum computers, but produce larger proofs.

Because the proof itself is the evidence of correctness, there's no need for a challenge window. "There are no delays when moving funds from a ZK-rollup to Ethereum because exit transactions are executed once the ZK-rollup contract verifies the validity proof," the documentation states. That's the headline advantage over optimistic rollups. The trade-off shows up elsewhere: computing those proofs is computationally expensive, which "can increase fees for rollup users," and the specialized hardware some operators use to generate proofs faster raises questions about how many entities can realistically run that infrastructure.

Optimistic vs. zero-knowledge rollups: what's the real difference?

Why does batching transactions actually lower fees?

Ethereum charges gas fees based partly on how much data a transaction adds to the chain and how much competition there is for block space. A rollup's entire value proposition rests on spreading that cost across many users at once rather than each person paying for their own slot. Ethereum.org's documentation points to "Danksharding" as the mechanism that made this cheaper still, describing it as a system that adds "blobs of rollup data to Ethereum blocks that can be very efficiently verified by validators" — a dedicated, lower-cost lane for the compressed data rollups need to post, separate from the space regular Mainnet transactions compete for.

This is a protocol-level mechanism, not a promise from any single rollup network, and it's worth remembering that fees on any given rollup can still move with Ethereum's own gas prices, since rollups still have to pay to post data to Mainnet. A rollup that's cheap today isn't guaranteed to stay that way if Ethereum's base fees rise.

Is using a rollup as safe as using Ethereum directly?

Not automatically, and self-custody principles still apply in full. A rollup's security ultimately depends on Ethereum settling disputes correctly, but it also depends on the specific rollup's own design choices: how centralized its operator (often called a "sequencer") is, whether its bridge contracts have been audited, and whether users understand the withdrawal delay or proof-verification process before they need to use it. None of this is investment advice, and using a rollup is not risk-free simply because it settles to Ethereum — bridge contracts, sequencers, and smart contracts on any given rollup can still fail or be exploited independently of Ethereum's own security.

What is layer 2, and how does it relate to rollups?

"Layer 2" is the umbrella term for networks like rollups that build on top of Ethereum, or "layer 1," to add capacity without changing Ethereum's own base rules. Rollups are the dominant layer 2 design in use today because they post their data to Ethereum and inherit its security, rather than relying on a separate, independent security model.

Frequently asked questions

Do I need a different wallet to use a rollup?

Usually not. Most rollups are compatible with the same wallet software used on Ethereum Mainnet, but you do need to manually add or switch to the rollup's network inside your wallet, and double-check you're sending funds to the correct network before transacting.

Can a rollup transaction be reversed once it's posted to Ethereum?

Once a batch is finalized on Ethereum, it's as difficult to reverse as any other Ethereum transaction. On an optimistic rollup, a fraudulent transaction can still be challenged and reversed during the one-week challenge window, per Ethereum.org's documentation, but not after that window closes.

Why do some rollups still charge noticeable fees?

Even after batching, a rollup still pays Ethereum to post its data, and, for zero-knowledge rollups, still pays the computational cost of generating validity proofs. Both costs get passed to users, so fees can rise when Ethereum's own gas prices rise or when proof generation is expensive.

That single fact drives almost everything else about how wallets are built and how they fail. A seed phrase is not decoration on top of a wallet; it is the wallet, expressed in a form a human can copy by hand. Understanding what it actually generates makes it clearer why the standard advice — write it down, keep it offline, never photograph it, never enter it anywhere — is not caution for its own sake.

What does a seed phrase actually generate?

A seed phrase is defined by a technical standard called BIP-39, Bitcoin Improvement Proposals repository, maintained by Bitcoin contributors including engineers from the hardware-wallet maker SatoshiLabs, and used far beyond Bitcoin itself. According to the specification, the process starts with a random number — 128 to 256 bits of entropy — plus a checksum derived from that number's hash. The combined bits are split into 11-bit chunks, and each chunk maps to one word from a fixed list of 2,048 words, producing the 12-to-24-word phrase a wallet shows on setup (BIP-39, assigned September 10, 2013, status: deployed).

The words themselves are not the key. According to the same specification, the wallet software runs the phrase through a function called PBKDF2 — 2,048 rounds of a hashing algorithm called HMAC-SHA512 — to produce a 512-bit binary seed. That seed is the actual input used to derive every private key, and in turn every address, the wallet will ever generate (BIP-39). This is why two wallets started from the identical phrase, on two different devices, produce the exact same addresses and balances: the words are a human-readable encoding of one fixed starting point, not a label pointing at a wallet stored somewhere else.

Think of the phrase like the master combination to a safe that also has an infinite number of internal compartments — the analogy breaks down here: unlike a safe combination, the phrase does not just open the wallet, it mathematically is the source every compartment and its contents are generated from. There is no separate lock to reset.

How does a private key turn into a wallet address?

A private key is the secret number a wallet uses to sign transactions and prove ownership. On Ethereum, documentation from the ethereum.org Accounts documentation describes a private key as a 64-character hexadecimal value from which a public key is mathematically derived using the Elliptic Curve Digital Signature Algorithm; the wallet address is then generated by hashing that public key and taking the last 20 bytes, prefixed with "0x" (ethereum.org, page last updated August 6, 2026). Bitcoin wallets follow the same one-directional logic with different math: private key derives public key, public key derives address, and the process cannot run backward.

That one-way relationship is the entire basis of self-custody. Ethereum's own documentation puts it plainly: "you never really hold cryptocurrency, you hold private keys — the funds are always on Ethereum's ledger" (ethereum.org). A wallet app is really a key manager and a signing tool; the balance a person sees on screen is the network's ledger reflecting what that key controls, not a file sitting on the device.

Custodial versus self-custody: what actually changes?

Whether a private key sits in a user's own wallet or on an exchange's servers changes who can move the funds — and who is responsible if something goes wrong. Neither option is risk-free, and self-custody in particular removes any backstop if the phrase is lost.

Self-custody removes reliance on a company's solvency and security, but it replaces that risk with total personal responsibility for one string of words. bitcoin.org's Secure Your Wallet guidance frames this directly: securing funds "is your responsibility," and unlike a bank, Bitcoin offers "very limited password recovery options" — its documentation recommends backing up the full wallet, encrypting any backup that touches a network, storing copies in more than one physical location, and favoring hardware wallets for what it calls "the best balance between very high security and ease of use."

What happens if a seed phrase is lost or stolen?

If a seed phrase is lost with no other backup, the funds it controlled are generally gone for good — there is no company or customer-support line that can regenerate someone else's private key. If a seed phrase is stolen or exposed, whoever has it can move the funds immediately, and there is no way to reverse that transaction once it is confirmed on the network. The FTC guide on cryptocurrency scams underscores this asymmetry for consumers: "if something happens to your wallet or your cryptocurrency funds... you're likely to find that no one can step in to help you recover your funds," and crypto payments generally cannot be reversed once sent (updated February 10, 2025). That irreversibility is also why "seed phrase" scams — messages, pop-ups, or fake support agents asking someone to type their phrase into a form to "verify" or "restore" a wallet — are effective: entering the phrase anywhere hands over the wallet outright, with no fraud dispute process to undo it afterward.

Can a wallet be recovered without the seed phrase?

Generally, no. Because the seed phrase is the human-readable encoding of the master key that BIP-39 derives every address from, a wallet built on that standard has no separate password-reset path — the phrase, or a full backup of the underlying keys, is the only way back in. Some wallet providers offer optional cloud-backup or social-recovery features, but those are separate services layered on top of the standard, not a way around it, and they shift some of the responsibility (and risk) back onto whichever company runs the backup.

Frequently asked questions

• Is a seed phrase the same as a password? No. A password is checked against a stored copy and can usually be reset. A seed phrase is not checked against anything — it is processed mathematically into the actual keys, so there is nothing to "reset" if it is lost.
• Can a seed phrase be reused across different wallets? Restoring the same phrase in two compatible wallet apps produces the same keys and addresses, per BIP-39's deterministic design — but doing so means both apps, and anyone with access to either, effectively control the same funds.
• Does writing a seed phrase in a password manager or cloud note count as safe storage? Bitcoin.org's guidance treats any network-exposed copy as "highly vulnerable to theft" and recommends encrypting anything that touches a network — a cloud note or synced password manager is a network-exposed copy.
• Why do some wallets use 12 words and others 24? BIP-39 ties word count to the amount of entropy used to generate the phrase — 128 bits of entropy produces 12 words, 256 bits produces 24 words, with more entropy giving a mathematically larger key space.

How does a SIM swap attack actually work?

A SIM swap doesn't touch your phone directly. An attacker contacts your mobile carrier posing as you, asking for your number to be moved to a new SIM card, or bribes an employee to move it for them. The moment the transfer goes through, your phone loses signal, and every call or text meant for your number now reaches the attacker's device instead.

According to the FBI's Internet Crime Complaint Center (IC3), attackers pull this off three main ways. The first is social engineering: calling carrier support and impersonating the victim using personal details gathered from data breaches or social media. The second is an insider threat — paying a carrier employee to make the swap directly, no impersonation needed. The third is phishing: tricking the victim into installing malware or handing over account credentials that make the switch easier to push through.

Why does a stolen phone number put a crypto wallet at risk?

Because so many accounts still treat "whoever controls this phone number" as proof of identity. A crypto exchange login, a linked email account, or a "forgot password" flow that texts a one-time code all assume the code reaching that number is reaching you. A SIM swap breaks that assumption completely, and the attacker never needs your password to start — they can often generate a new one themselves.

From there, the path to an exchange account is direct: reset the account password using the hijacked phone number or a linked email that uses the same number for its own recovery, approve the SMS-based login code, and withdraw. A wallet held on an exchange, secured only by a password and a text message, is exposed the moment the number moves. A wallet where the private keys live offline, on hardware the attacker never touches, is not.

How much has SIM swapping actually cost people?

IC3 data shows the losses climbing fast. Between 2018 and 2020, the bureau logged 320 SIM-swapping complaints totaling about $12 million in losses. In 2021 alone, that jumped to 1,611 complaints and more than $68 million lost — a roughly fivefold increase in a single year, based on reports from victims in the United States. Those figures cover reported cases only; the bureau has said actual losses are likely higher, since not every victim files a complaint.

Is SMS-based two-factor authentication safe to use?

It's better than no second factor at all, but it's the weakest common option because it depends on something — your phone number — that can be moved without your consent. The National Institute of Standards and Technology (NIST) defines multi-factor authentication as combining at least two of three kinds of evidence: something you know, like a password; something you have, like a physical device; and something you are, like a fingerprint. NIST recommends using MFA "whenever possible, especially when it comes to your most sensitive data — like your primary email, your financial accounts, and your health records."

A text message sits in an awkward spot: it counts as "something you have," but only for as long as the number stays yours. The FBI's own recommendation points away from it directly, urging people toward multi-factor authentication that relies on biometrics or a physical security key instead of a code sent by text — precisely because a phone number can be reassigned by someone else's phone call to a carrier, not just yours.

What actually protects a crypto wallet from a SIM swap?

No single step makes an account swap-proof, but a few choices remove the phone number from the equation entirely.

For exchange accounts, that means switching from SMS codes to an authenticator app or a physical security key wherever the exchange allows it, and asking the mobile carrier to add a port-out PIN or account lock that a phone call alone can't bypass. IC3 also recommends limiting how much financial information gets shared on social media, since attackers use those details to sound convincing to carrier support, and using unique, complex passwords so one leaked password can't be reused against an email or exchange login.

Self-custody isn't a shortcut around all risk, either. Moving funds off an exchange into a wallet you control removes the SIM-swap path, but it shifts responsibility onto keeping the seed phrase and hardware device safe — lose both of those, and the funds are just as unreachable.

What should you do if you think you've been SIM swapped?

Act on the phone losing service, not just on a suspicious message. If your phone suddenly shows no signal or "SOS only" and you didn't change carriers or devices, call your carrier from another line immediately to ask whether a SIM swap was requested, and have them lock the account. Then log into any exchange, email, or financial account tied to that number from a trusted device, change the passwords, and switch on non-SMS multi-factor authentication.

The Federal Trade Commission's identity-theft resources point victims toward filing a report through the agency's official complaint system, which can support a police report and any bank or exchange fraud claim. IC3 collects reports the same way, through ic3.gov, and both agencies use aggregated reports like these to track how the scam is evolving.

Unlike a rushed phishing text asking you to click a link right now, this scam is patient. That patience is the point: the longer the con runs, the more trust it builds, and the more money the victim is eventually willing to send. That patience also makes the scam hard to recognize from the inside; it rarely feels like fraud until the final, irreversible step.

Where does the name come from?

The name describes the shape of the scam, not a real farm: a victim's trust and account balance are built up, or "fattened," over time before being taken in one final move. FinCEN used the term in the title of a September 2023 alert to banks and crypto firms, warning that the scheme was driving a sharp rise in reported losses.

How does the scam actually unfold?

According to FinCEN's alert, the scheme generally moves through four stages. First, the scammer makes contact — often through a text message that looks like it was sent to the wrong number, a dating app match, or a social media message — and spends time building rapport before money ever comes up. NPR's Planet Money podcast, reporting in May 2025, described one real example of that opening move: journalist Zeke Faux received a text reading "Hi David, I'm Vicky Ho. Don't you remember me?" from a number he'd never had contact with.

Second, once trust is established, the scammer introduces the idea of a lucrative cryptocurrency investment and directs the victim to a platform that looks like a legitimate trading app or exchange. Third, the account shows fabricated gains — sometimes the scammer even allows a small, real withdrawal, specifically to build confidence before asking for larger deposits. Fourth, when the victim tries to cash out for good, the platform demands additional payments, often described as taxes or fees. Refuse to pay and the operators disappear, taking the deposited funds with them. Investigators note that the fake trading interface itself is often the most convincing part of the con: it can display live-looking price charts, deposit confirmations, and a rising balance, none of which reflects money actually invested anywhere.

Why can't the money just be sent back?

The fraudulent platforms are built to move money out of reach quickly. In a case detailed in a U.S. Justice Department press release, a scheme running from August 2022 to July 2023 used a domain designed to look like a real exchange; funds a Warren County, New York victim deposited were transferred through multiple bank accounts to obscure the trail before the U.S. Secret Service seized the domain in May 2024. Court records in that case put the victim's loss at $341,000. FinCEN's alert cites a separate case in which more than $10 million was taken from five victims through similarly spoofed websites — a reminder that recovery, once funds move, is difficult and far from guaranteed.

What are the warning signs?

FinCEN's alert groups red flags into three categories that banks and crypto platforms are trained to watch for, and that are just as useful for spotting the scam yourself.

• Behavioral: an unsolicited investment tip from someone you only know online, sudden new interest in crypto investing from someone who has never mentioned it before, or visible anxiety about being able to access supposed investment funds.
• Financial: liquidating savings or retirement accounts early, taking out a home equity loan specifically to buy crypto, or a long-dormant account suddenly showing large, frequent transfers.
• Technical: logins from unfamiliar devices or locations, a clunky or recently registered website, and apps downloaded from outside official app stores.

A platform that shows steadily rising paper profits but resists real withdrawals, or asks for an extra payment before you can cash out, is not showing you a fee — it's showing you the scam's final stage. Family members and friends sometimes notice the change in behavior before the victim does, which is one reason financial institutions are trained to ask questions when a customer suddenly moves large sums into crypto. Recognizing the pattern early — rather than waiting for a specific red flag to appear — is the most reliable protection, since by the time a single warning sign is obvious, meaningful money may already be at risk.

What should you do if you're targeted, or already sent money?

Stop sending money the moment a platform asks for extra fees or taxes to release your own funds; that request is the clearest sign the scheme is in its final stage. Do not respond further to the contact, and do not follow their instructions to "verify" or "unlock" an account. If you've already sent funds, FinCEN and the Justice Department direct victims to report the loss to the FBI's Internet Crime Complaint Center at IC3.gov, and to the U.S. Secret Service, which has a dedicated cryptocurrency fraud reporting address for these cases. Reporting quickly matters: recovery, when it happens at all, generally depends on investigators tracing funds before they're moved through additional accounts.

None of this means crypto investing itself is a scam — but any offer that arrives through an unsolicited message from someone you've never met in person, promising steady or guaranteed returns, is worth treating as a warning sign rather than an opportunity.

What makes an ETF a "spot" bitcoin ETF?

A spot bitcoin ETF is a fund that owns bitcoin directly, so its share price is meant to track bitcoin's real-time market price. That is different from an older generation of bitcoin ETFs that hold futures contracts — agreements to buy or sell bitcoin at a set price on a future date — instead of the coin itself. The Motley Fool's investor education desk describes spot funds as giving investors bitcoin exposure "via trusted asset managers" through normal brokerage or retirement accounts, without the investor ever touching a private key or a crypto exchange.

Futures-based funds can drift from bitcoin's actual price over time because of costs built into rolling contracts forward each month. A spot fund does not carry that drag, since the fund's holdings are the asset itself, not a bet on its future price.

How did the SEC's approval actually work?

SEC Chair Gary Gensler's statement on the January 10, 2024 approval explained that the Commission approved listing and trading of spot bitcoin exchange-traded products after reviewing ten registration statements together, which he said helped "create a level playing field" among competing issuers. Sponsors are required to give "full, fair, and truthful disclosure" through their registration statements and ongoing filings, and the products must trade on registered national exchanges with the Commission's standard fraud-prevention rules and oversight.

Gensler was explicit that the decision was narrow. He said the approval "should in no way signal the Commission's willingness to approve listing standards for crypto asset securities," and separately cautioned that bitcoin is "primarily a speculative, volatile asset" that is also used for illicit purposes such as ransomware, money laundering, and terrorist financing. That warning still stands: approving a fund's structure is not the same as the SEC vouching for bitcoin as an investment, and the underlying asset can lose most or all of its value quickly.

How are ETF shares created and redeemed, and what changed in 2025?

Every ETF, including a spot bitcoin fund, relies on large financial firms called authorized participants to create new shares (when demand rises) or redeem shares (when investors want out), keeping the fund's share price in line with the value of what it holds. When spot bitcoin ETFs first launched in January 2024, U.S. regulators required this process to run entirely in cash: authorized participants delivered dollars to the fund, and the fund's manager bought or sold the actual bitcoin on the other end.

That changed on July 29, 2025, when the SEC approved orders permitting "in-kind" creation and redemption for spot bitcoin and ether ETPs, meaning authorized participants can now exchange bitcoin or ether directly for ETF shares instead of routing every transaction through cash. SEC Chairman Paul Atkins said in the Commission's release that "investors will benefit from these approvals, as they will make these products less costly and more efficient," and Trading and Markets Director Jamie Selway said the in-kind mechanism "provide[s] flexibility and cost savings to ETP issuers, authorized participants, and investors." The order also extended to mixed bitcoin-and-ether ETPs, options on certain spot bitcoin ETPs, and FLEX options on bitcoin ETP shares.

In practice, the switch reduces the trading and tax friction of the cash-only method, because the fund no longer has to convert every inflow or outflow through the open bitcoin market. It brings crypto ETPs closer to how most commodity ETFs, such as gold funds, have long operated.

Who actually holds the bitcoin, and does the investor own it?

An investor in a spot bitcoin ETF owns shares of the fund, not bitcoin itself. The fund's manager arranges custody of the underlying coins through a third-party custodian, and the investor's relationship is with the fund and its shares, held the same way as any other brokerage security — not with a crypto wallet or exchange account. That means an ETF investor never handles a seed phrase or a private key, but it also means they are trusting the fund's custody and operational safeguards rather than controlling the asset themselves. Self-custody of bitcoin removes that reliance on a third party, but it comes with its own risks, since a lost private key or seed phrase cannot be recovered by any company.

What does a spot bitcoin ETF cost?

Fees vary by issuer and are charged as an annual expense ratio, deducted from the fund's assets rather than billed separately. According to fee data published by The Motley Fool as of August 17, 2026, expense ratios and assets under management for several major U.S. spot bitcoin ETFs were:

These figures move as issuers compete and as bitcoin's price changes the size of each fund's holdings, so treat any single snapshot as dated the moment it's published, and check a fund's own prospectus before relying on a number.

Is a spot bitcoin ETF a safe way to get bitcoin exposure?

"Safe" is the wrong frame for any bitcoin-linked product. A spot ETF removes the technical burden of self-custody and trades inside familiar, regulated market infrastructure, but it does not remove bitcoin's price volatility, and regulators have repeatedly said as much. Gensler's 2024 statement urged investors to "remain cautious about the myriad risks associated with bitcoin and products whose value is tied to crypto." Nothing about a fund wrapper changes the fact that bitcoin can lose most or all of its value quickly, that price moves are not predictable, and that owning ETF shares is not a reason by itself to buy in. An ETF also layers on its own costs and risks — the expense ratio, potential tracking differences, and reliance on the fund's chosen custodian — on top of bitcoin's underlying volatility.

For newcomers weighing self-custody against a fund, the trade-off is direct control and technical responsibility on one side, and regulated fund infrastructure with an ongoing fee and custodial reliance on the other. Neither option changes the volatility of the asset underneath.