Security
How to secure a crypto exchange account
Four settings do most of the work: app-based 2FA, an anti-phishing code, allowlisted withdrawal addresses, and an email address nobody else knows about.
Security: Threats and Protection
Documented attack surfaces across contracts, bridges and users, with post-mortems of major losses and the habits preventing the most common thefts.
Security
What is a rug pull, and how to spot one
The team takes the money and runs — through the liquidity pool, a hidden mint, or tokens you were never able to sell in the first place.
Security
How token approval scams work
The signature that lets a contract spend your tokens is convenient by design — and it is exactly what a fake 'claim your reward' page is built to collect.
Security
What is address poisoning?
Scammers seed your transaction history with look-alike addresses so that one careless copy-paste sends real money to them — and the usual check won't catch it.
Security
What a hardware wallet does and doesn't protect
A hardware wallet keeps your private keys offline — powerful against remote theft, powerless against a transaction you confirm with your own hands.