Security
What to do if your wallet is compromised
Move first, revoke second, report third — and walk past anyone who promises to recover it all for a fee paid upfront.
Security: Threats and Protection
Security records how digital assets are lost: contract vulnerabilities, bridge failures, key compromise, malicious approvals, and social engineering that bypasses code entirely. Incident post-mortems sit alongside preventive practice. Intended for holders, protocol teams and compliance staff who want attacks described in enough detail to defend against them.
Documented attack surfaces across contracts, bridges and users, with post-mortems of major losses and the habits preventing the most common thefts.
Security
How airdrop scams work
Free tokens that cost you your wallet: the giveaway exists to collect one signature or one 'gas fee' — everything else is stage design.
Security
What is a dusting attack?
Tiny transfers you never asked for are either mapping your wallet or baiting a click — and the correct response to both is the same: nothing.
Security
How to make a wallet recovery plan
Losing a device should be a bad afternoon, not a catastrophe: offline backups in two media and two locations, a restore you have actually tested, and a path for…
Security
How to secure a crypto exchange account
Four settings do most of the work: app-based 2FA, an anti-phishing code, allowlisted withdrawal addresses, and an email address nobody else knows about.