Security
How to make a wallet recovery plan
Losing a device should be a bad afternoon, not a catastrophe: offline backups in two media and two locations, a restore you have actually tested, and a path for…
Home / Security
Security
Security records how digital assets are lost: contract vulnerabilities, bridge failures, key compromise, malicious approvals, and social engineering that bypasses code entirely. Incident post-mortems sit alongside preventive practice. Intended for holders, protocol teams and compliance staff who want attacks described in enough detail to defend against them.
Documented attack surfaces across contracts, bridges and users, with post-mortems of major losses and the habits preventing the most common thefts.
Security
How to secure a crypto exchange account
Four settings do most of the work: app-based 2FA, an anti-phishing code, allowlisted withdrawal addresses, and an email address nobody else knows about.
Security
What is a rug pull, and how to spot one
The team takes the money and runs — through the liquidity pool, a hidden mint, or tokens you were never able to sell in the first place.
Security
How token approval scams work
The signature that lets a contract spend your tokens is convenient by design — and it is exactly what a fake 'claim your reward' page is built to collect.
Security
What is address poisoning?
Scammers seed your transaction history with look-alike addresses so that one careless copy-paste sends real money to them — and the usual check won't catch it.