Security Knowledge¶
Twenty guides on how attacks work. Each one ends with a short self-check, so you can turn the explanation into a decision.
Start with Common Fraud Cases if you want the map first. If you are here because something already happened, go straight to Theft Prevention.
| Guide | What it covers |
|---|---|
| Decentralized vs Centralized | Who holds the keys in each model, and where each one fails. |
| Common Fraud Cases | The recurring patterns behind almost every loss — the overview page for this group. |
| Common Transfer Phishing Scams | A payment request that changes the destination at the last moment. |
| Stay Away from Fake Wallet Scams | Clones of real wallets that capture your phrase during setup. |
| Phishing App Scam | Impersonated or sideloaded apps, and how to verify what you installed. |
| Be Aware of Phishing Addresses | Address poisoning: a lookalike address planted in your history. |
| Fake RPC Nodes, Fake Balances | A node that lies about your balance, your transactions, or both. |
| Beware of Custom RPC Node Scams | Why "a faster node" is a request to see and alter what you sign. |
| Fake Marketplace Platform Scams | Fake shops and task platforms that require a deposit before you can withdraw. |
| Beware of the "0 USDT" Transfer Scam | A zero-value transfer used to plant a fake address in your history. |
| Prevent a New Type of Token Transfer Scam | Tokens that look like incoming payments but are traps. |
| Free Recovery Phrase Scam | "Recovery services" whose first step is asking for the phrase. |
| Fake Airdrop/Giveaway Scam | Free tokens that require an approval, a signature, or a fee. |
| Fake QR Code Scam | A sticker over a real code, or a code that opens a drainer. |
| Phishing Website Scam | A perfect copy on a near-perfect domain. |
| Fake Token Scam | Tokens you cannot sell, or that drain you when you try. |
| Fake Customer Service Scam | "Support" in your DMs with a remote-access request. |
| DApp Approval Scam | Unlimited approvals that let a contract move your tokens later. |
| Quickly Identify Scams | The five signals that decide whether to stop. |
| Malicious Multi-Sig Scams | A multi-sig request that makes you a co-signer on someone else's trap. |
No page here can recover funds
These guides explain prevention and first response. If a transaction is already confirmed, the network cannot reverse it. Contact the wallet provider and the exchange or bridge involved, and treat any service that promises recovery for an upfront fee as a second scam.
Next step¶
Read Security Measures for the controls that correspond to each attack — approvals, key storage, app verification, and recovery planning.