# theonchaindiary.com — content map

> AI-readable snapshot of theonchaindiary.com (Web3 on-chain security education (articles + glossary, EN/ZH)), generated by the mcp.jask.dev MCP hub from the site's content manifest. 419 items (en/zh). This is metadata + links: for full text use the MCP tools below or fetch the item URLs.

- Site: https://theonchaindiary.com
- MCP: POST https://mcp.jask.dev/mcp — tools: search(query, site="onchaindiary"), read(site="onchaindiary", id)
- Manifest JSON: https://theonchaindiary.com/mcp/manifest.json

## glossary (232)

- [51% Attack](/glossary/51-percent-attack/) — An attack where a single entity controls more than 50% of a blockchain's mining hash rate, enabling double-spending and chain reorganization
- [Account Abstraction (ERC-4337)](/glossary/account-abstraction/) — An Ethereum standard enabling smart-contract wallets with gasless transactions, social recovery, and multi-sig security without changing the
- [Address Poisoning](/glossary/address-poisoning/) — A scam where attackers send fake transactions from addresses that look almost identical to a victim's frequent contacts, tricking them into 
- [Airdrop](/glossary/airdrop/) — The distribution of free cryptocurrency tokens to wallet addresses, used to bootstrap adoption, reward early users, or decentralize governan
- [Algorithmic Stablecoin](/glossary/algorithmic-stablecoin/) — A stablecoin that maintains its peg through algorithmic mint/burn and incentive mechanics rather than fiat or crypto collateral.
- [AMM (Automated Market Maker)](/glossary/amm/) — A protocol that prices assets algorithmically using a liquidity pool, replacing traditional order books.
- [APR (Annual Percentage Rate)](/glossary/apr/) — The yearly interest rate earned or paid on crypto assets, expressed as a simple (non-compounding) percentage.
- [APY (Annual Percentage Yield)](/glossary/apy/) — The effective annual rate of return on an investment, accounting for compounding interest.
- [Arbitrage](/glossary/arbitrage/) — The practice of profiting from price differences of the same asset across different markets or exchanges, a core mechanic in crypto trading 
- [Base Fee](/glossary/base-fee/) — The protocol-determined minimum gas price on Ethereum post-EIP-1559, which automatically adjusts based on network demand and is permanently 
- [Byzantine Fault Tolerance](/glossary/bft/) — A property of distributed systems that can continue operating correctly even when up to one-third of participants act maliciously or fail ar
- [BIP-39](/glossary/bip-39/) — The 2013 standard that converts wallet entropy into 12-24 readable backup words — the seed phrase. Defines the 2,048-word list, the checksum
- [Blacklist](/glossary/blacklist/) — A list of blockchain addresses flagged as malicious, fraudulent, or sanctioned, used by exchanges, wallets, and compliance tools to block tr
- [Blob (EIP-4844)](/glossary/blob/) — A new data storage type on Ethereum introduced by EIP-4844 (Proto-Danksharding) that provides cheaper storage for Layer 2 rollup data.
- [Blob-Carrying Transaction (EIP-4844)](/glossary/blob-carrying-transaction/) — A new Ethereum transaction type that carries large 'blob' data payloads for rollups, slashing L2 data costs by routing them out of the expen
- [Block](/glossary/block/) — A container holding a batch of verified transactions, linked to previous blocks to form a chain.
- [Block Builder](/glossary/block-builder/) — A specialized entity in Ethereum's PBS system that constructs optimized blocks from MEV searcher bundles and competes to have their block se
- [Block Confirmation](/glossary/block-confirmation/) — The number of blocks added to a chain after your transaction's block, reducing the probability of reversal.
- [Block Explorer](/glossary/block-explorer/) — A web-based search engine for blockchain data, allowing anyone to look up transactions, addresses, blocks, and smart contract interactions.
- [Bonding Curve](/glossary/bonding-curve/) — A mathematical curve that defines the relationship between a token's price and its supply, enabling continuous minting and burning.
- [Brain Wallet](/glossary/brain-wallet/) — A cryptocurrency wallet whose private key is derived from a memorized passphrase. Convenient but catastrophically insecure against brute-for
- [Bridge](/glossary/bridge/) — A protocol that enables assets and data to move between different blockchain networks.
- [Bug Bounty](/glossary/bug-bounty/) — A reward program that pays security researchers for finding and responsibly disclosing vulnerabilities in smart contracts, protocols, or pla
- [Bundler](/glossary/bundler/) — An ERC-4337 participant that collects UserOperations, validates them, and packages them into a single on-chain transaction for execution.
- [Burn Address](/glossary/burn-address/) — A cryptographic address with no known private key, used to permanently destroy cryptocurrency tokens by making them unspendable.
- [Burner Wallet](/glossary/burner-wallet/) — A disposable low-value wallet used for risky interactions — minting, airdrop claims, unfamiliar dapps — so a compromise costs pocket change 
- [CBDC (Central Bank Digital Currency)](/glossary/cbdc/) — A digital form of sovereign currency issued and controlled directly by a central bank.
- [Celestia](/glossary/celestia/) — A modular blockchain built specifically for data availability, enabling rollups to publish data cheaply without running their own consensus.
- [Censorship Resistance](/glossary/censorship-resistance/) — A blockchain's ability to process any valid transaction regardless of who sends it, with no party able to block or freeze it.
- [CEX (Centralized Exchange)](/glossary/cex/) — A cryptocurrency trading platform operated by a central entity that holds custody of user funds, such as Binance, Coinbase, or Kraken.
- [Circulating Supply](/glossary/circulating-supply/) — The number of tokens currently in public circulation and available for trading, excluding locked, reserved, or burned tokens.
- [Cliff (Vesting)](/glossary/cliff/) — A lockup period at the start of a vesting schedule during which no tokens are released, ensuring long-term commitment from team and investor
- [Clipboard Hijacking](/glossary/clipboard-hijacking/) — Malware that monitors the clipboard for cryptocurrency addresses and silently replaces them with the attacker's address, redirecting transfe
- [Cold Wallet](/glossary/cold-wallet/) — A cryptocurrency wallet that is not connected to the internet, providing maximum security for long-term storage of digital assets.
- [Collateral Factor](/glossary/collateral-factor/) — The percentage of an asset's value a lending protocol lets you borrow against — for example, 75% means $100 of collateral backs up to $75 of
- [Consensus Mechanism](/glossary/consensus-mechanism/) — The algorithm that enables distributed nodes in a blockchain network to agree on the state of the ledger without trusting each other.
- [Contract Audit](/glossary/contract-audit/) — A systematic security review of smart contract source code that combines automated analysis tools with expert manual review to identify vuln
- [Copy Trading](/glossary/copy-trading/) — A feature that automatically replicates another trader's positions in your account, popular on both CEXs and DEXs for following successful o
- [Cross-Chain Bridge](/glossary/cross-chain-bridge/) — A protocol that transfers assets and messages between independent blockchains, typically by locking assets on one chain and minting represen
- [Custodial Wallet](/glossary/custodial-wallet/) — A cryptocurrency wallet where a third-party service holds and manages the user's private keys, similar to a traditional bank account.
- [Danksharding](/glossary/danksharding/) — Ethereum's full scalability roadmap that uses data availability sampling to enable 100,000+ transactions per second via L2 rollups.
- [Decentralized Autonomous Organization (DAO)](/glossary/dao/) — A member-owned organization governed by smart contracts and token-based voting, without centralized leadership.
- [Decentralized Application (DApp)](/glossary/dapp/) — An application whose backend runs on a decentralized blockchain network instead of centralized servers.
- [Data Availability](/glossary/data-availability/) — The guarantee that transaction data published by a rollup or block producer is actually accessible to all network participants for verificat
- [DDoS Attack (Blockchain)](/glossary/ddos-attack/) — A Distributed Denial of Service attack that overwhelms a blockchain network, exchange, or dApp with excessive transactions or requests, caus
- [DeFi (Decentralized Finance)](/glossary/defi/) — Financial services built on blockchain smart contracts that operate without intermediaries, including lending, borrowing, trading, and yield
- [Deflationary Token](/glossary/deflationary-token/) — A crypto whose supply shrinks over time via token burns. What deflation actually does to price — and the red flags in burn-heavy token marke
- [Depeg](/glossary/depeg/) — When a stablecoin or pegged asset loses its target price (e.g., a 'dollar stablecoin' trading below $1), signaling a loss of market confiden
- [Derivation Path](/glossary/derivation-path/) — The address of a key inside an HD wallet's tree — e.g. m/44'/60'/0'/0/0. Tells a wallet which branch of your seed phrase to read; mismatched
- [DEX (Decentralized Exchange)](/glossary/dex/) — A peer-to-peer marketplace for trading cryptocurrencies without intermediaries, using smart contracts instead of order books.
- [Difficulty Adjustment](/glossary/difficulty-adjustment/) — The protocol mechanism that automatically recalibrates how hard it is to mine a new block, keeping block production rate stable.
- [Dusting Attack](/glossary/dusting-attack/) — A privacy attack where tiny amounts of cryptocurrency are sent to many wallet addresses to trace transactions and de-anonymize users.
- [Eclipse Attack](/glossary/eclipse-attack/) — A network-level attack where a victim node is surrounded by attacker-controlled peers so it sees a fake, isolated view of the blockchain.
- [EigenLayer (Restaking)](/glossary/eigenlayer/) — The leading Ethereum restaking protocol that lets staked ETH be reused to secure additional services (AVSs) for extra yield and extra risk.
- [EIP-1559](/glossary/eip-1559/) — An Ethereum improvement proposal that reformed gas fee pricing by introducing a base fee that is burned, making ETH potentially deflationary
- [EIP-4844 (Proto-Danksharding)](/glossary/eip-4844/) — An Ethereum upgrade introducing 'blob' data storage for L2 rollups, reducing transaction costs by 10-100x.
- [Entropy](/glossary/entropy/) — The true randomness that secures a crypto wallet. Measured in bits — 128 bits (a 12-word seed phrase) is already more than every computer on
- [EOA (Externally Owned Account)](/glossary/eoa/) — An Ethereum account controlled by a private key (a user's wallet), as opposed to a smart contract account controlled by code.
- [Epoch](/glossary/epoch/) — A unit of time in Ethereum's Proof of Stake system consisting of 32 slots (6.4 minutes), used for validator committee assignments and finali
- [ERC-1155](/glossary/erc-1155/) — A smart contract concept in the Web3 and blockchain ecosystem.
- [ERC-20](/glossary/erc-20/) — The standard for fungible tokens on Ethereum — defines the interface every interchangeable token must implement.
- [ERC-4337 (Account Abstraction)](/glossary/erc-4337/) — An Ethereum standard implementing account abstraction via a separate transaction layer, enabling smart-contract wallets with gasless txs, ba
- [ERC-721](/glossary/erc-721/) — The Ethereum token standard for non-fungible tokens (NFTs), where each token is unique and non-interchangeable.
- [Event Log](/glossary/event-log/) — Immutable records stored on the blockchain by smart contracts, providing auditable logs of on-chain activities and data for off-chain indexi
- [EVM (Ethereum Virtual Machine)](/glossary/evm/) — The runtime environment that executes smart contract code on Ethereum and all EVM-compatible blockchains.
- [Exit Scam](/glossary/exit-scam/) — A fraud where project operators abruptly shut down and disappear with user funds after building trust over weeks or months.
- [Fake Token](/glossary/fake-token/) — A counterfeit cryptocurrency designed to impersonate a legitimate token, often airdropped to wallets or listed on DEXs to trick users into t
- [FDV (Fully Diluted Valuation)](/glossary/fdv/) — The theoretical total market cap if every token that will ever exist was in circulation at the current price.
- [Finality](/glossary/finality/) — The point at which a blockchain transaction becomes irreversible, guaranteeing it will not be reversed or altered by future blocks.
- [Finney Attack](/glossary/finney-attack/) — A Bitcoin double-spend where a miner pre-mines a block paying themselves, then tricks a merchant before broadcasting it.
- [Flash Crash](/glossary/flash-crash/) — A sudden, severe price drop in an asset that occurs within minutes, often followed by a partial recovery.
- [Flash Loan](/glossary/flash-loan/) — An uncollateralized loan that must be borrowed and repaid within a single blockchain transaction.
- [Flash Loan Attack](/glossary/flash-loan-attack/) — An exploit using uncollateralized flash loans to manipulate prices, drain liquidity, or exploit oracle vulnerabilities.
- [Flashbots](/glossary/flashbots/) — A research and development organization that created a private transaction relay system to reduce MEV's negative impact on Ethereum users.
- [Floor Price](/glossary/floor-price/) — The lowest listing price for any item in an NFT collection, used as the primary market valuation metric.
- [Fork](/glossary/fork/) — A change to a blockchain's protocol rules that creates a divergence in the network, either resulting in two separate chains or a unified upg
- [Fraud Proof](/glossary/fraud-proof/) — A cryptographic guarantee used in optimistic rollups where anyone can challenge an invalid state transition by submitting evidence of fraud.
- [Front-Running](/glossary/front-running/) — The practice of exploiting advance knowledge of pending transactions to profit from the price impact.
- [Gas Fee](/glossary/gas-fee/) — The cost of executing a transaction on a blockchain, paid to validators or miners.
- [Gas Limit](/glossary/gas-limit/) — The maximum amount of gas units a user is willing to spend on a single transaction, acting as a safety cap against runaway computation costs
- [Gas Optimization](/glossary/gas-optimization/) — Techniques and best practices for reducing the computational cost of smart contract operations on Ethereum and other EVM chains.
- [Gas War](/glossary/gas-war/) — A situation where users compete for limited block space by bidding increasingly higher gas prices, often during popular NFT mints or token l
- [Gnosis Safe (Safe)](/glossary/gnosis-safe/) — The most widely used smart contract multisig wallet in Ethereum, now rebranded as Safe, requiring multiple signatures to authorize transacti
- [Governance Token](/glossary/governance-token/) — A cryptocurrency that grants holders voting rights in a protocol's governance, allowing them to propose and vote on changes.
- [Hardware Wallet](/glossary/hardware-wallet/) — A physical device that securely stores private keys offline, protecting crypto assets from digital theft.
- [Hash](/glossary/hash/) — A fixed-length digital fingerprint produced by a one-way mathematical function, fundamental to blockchain security and integrity.
- [Hash Rate](/glossary/hash-rate/) — A measure of computational power securing a Proof-of-Work blockchain, typically expressed in trillions of hashes per second (TH/s).
- [HD Wallet](/glossary/hd-wallet/) — Hierarchical Deterministic wallet — one seed phrase deterministically generates a whole tree of private keys and addresses, which is why bac
- [Honeypot](/glossary/honeypot/) — A malicious smart contract designed to look profitable but traps users' funds by blocking sales or withdrawals.
- [Hot Wallet](/glossary/hot-wallet/) — A cryptocurrency wallet connected to the internet, offering convenience for frequent transactions at the cost of reduced security.
- [ICO (Initial Coin Offering)](/glossary/ico/) — A fundraising method where a project sells new cryptocurrency tokens to early investors, similar to an IPO but largely unregulated in its ea
- [IDO (Initial DEX Offering)](/glossary/ido/) — A token sale conducted on a decentralized exchange, allowing projects to raise funds and distribute tokens without a centralized intermediar
- [Impermanent Loss](/glossary/impermanent-loss/) — The temporary loss liquidity providers face when token prices diverge from their deposit ratio.
- [Inflationary Token](/glossary/inflationary-token/) — A cryptocurrency whose supply increases over time through block rewards, staking, or other emission mechanisms.
- [Intent-Based Architecture](/glossary/intent-based-architecture/) — A paradigm where users express what they want ('intents') rather than how to execute, letting solvers compete to find the best path.
- [Interest Rate Model](/glossary/interest-rate-model/) — The algorithmic function a lending protocol uses to set borrow and supply rates based on how much of the pool's liquidity is currently borro
- [KYC (Know Your Customer)](/glossary/kyc/) — The identity verification process required by regulated crypto platforms to comply with anti-money laundering laws, involving document submi
- [Launchpad](/glossary/launchpad/) — A platform that curates, hosts, and facilitates token sales for new crypto projects, providing vetting and distribution infrastructure.
- [Layer 1](/glossary/layer-1/) — A base-layer blockchain that settles transactions and provides security, serving as the foundation for applications and Layer 2 networks.
- [Layer 2](/glossary/layer-2/) — A scaling solution built on top of a Layer 1 blockchain that processes transactions off-chain while inheriting the base layer's security.
- [LayerZero](/glossary/layerzero/) — An omnichain interoperability protocol enabling cross-chain messaging and token transfers, compromised in the $292M Kelp DAO exploit via a f
- [Lending Protocol](/glossary/lending-protocol/) — A DeFi platform where users can lend crypto to earn interest or borrow against crypto collateral.
- [Light Client](/glossary/light-client/) — A lightweight blockchain node that verifies only block headers and specific transactions, enabling wallets and mobile apps to interact witho
- [Liquid Staking](/glossary/liquid-staking/) — Staking ETH through a protocol that issues a liquid token (LST) representing your staked position, enabling DeFi use without unbonding.
- [Liquidation](/glossary/liquidation/) — The forced sale of collateral when a borrower's loan position falls below the required collateralization ratio.
- [Liquidity Mining](/glossary/liquidity-mining/) — A DeFi incentive program that distributes protocol tokens to users who supply liquidity or use a protocol, rewarding early participation.
- [Liquidity Pool](/glossary/liquidity-pool/) — A smart contract holding token reserves that enables decentralized trading without an order book.
- [Liquidity Provider](/glossary/liquidity-provider/) — A user who deposits tokens into a liquidity pool in exchange for trading fees and LP tokens.
- [Mainnet](/glossary/mainnet/) — The production blockchain network where transactions involve real economic value, as opposed to a testnet where tokens have no value.
- [Market Cap](/glossary/market-cap/) — The total dollar value of a cryptocurrency's circulating supply, calculated as current price multiplied by circulating supply.
- [Maximal Extractable Value (MEV)](/glossary/max-extractable-value/) — The maximum value that can be extracted by reordering, including, or excluding transactions inside a block — originally called Miner Extract
- [Max Supply](/glossary/max-supply/) — The maximum number of tokens that will ever exist for a given cryptocurrency, set by protocol rules and enforceable only through consensus.
- [Mempool](/glossary/mempool/) — The pending transaction pool on a blockchain where submitted transactions wait to be included in a block by validators or miners.
- [Merkle Tree](/glossary/merkle-tree/) — A hierarchical data structure that efficiently organizes and verifies large sets of transactions using cryptographic hashes.
- [Metadata](/glossary/metadata/) — The JSON-structured data that describes an NFT's attributes, image, name, and traits, typically stored off-chain and referenced by the token
- [Maximal Extractable Value (MEV)](/glossary/mev/) — The profit extractable by reordering, including, or excluding transactions within a block.
- [MEV Bot](/glossary/mev-bot/) — Automated software that monitors the blockchain mempool for profitable trading opportunities, executing arbitrage, liquidation, and sandwich
- [Mining](/glossary/mining/) — The process of using computational power to validate transactions and create new blocks on a Proof-of-Work blockchain.
- [Mint Authority](/glossary/mint-authority/) — The power to create new tokens from a smart contract. If misused or centralized, it allows the token creator to dilute holders or crash the 
- [Minting](/glossary/minting/) — The process of creating a new NFT or token and registering it on a blockchain.
- [Mixer](/glossary/mixer/) — A service or protocol that blends cryptocurrency from multiple users to obscure the transaction trail between sender and recipient.
- [Modular Blockchain](/glossary/modular-blockchain/) — A blockchain architecture that separates core functions—execution, consensus, settlement, and data availability—into specialized, interchang
- [Multi-Sig Wallet](/glossary/multi-sig-wallet/) — A wallet requiring multiple signatures from different key holders to authorize a transaction, adding security through distributed approval.
- [Nakamoto Coefficient](/glossary/nakamoto-coefficient/) — The minimum number of independent entities that would need to collude to attack a blockchain network, measuring its decentralization.
- [NFT (Non-Fungible Token)](/glossary/nft/) — A unique digital asset whose ownership and authenticity are verified on a blockchain.
- [NFT Collection](/glossary/nft-collection/) — A set of unique digital assets (NFTs) sharing a common theme, art style, and smart contract, typically ranging from 1,000 to 10,000 items.
- [Node](/glossary/node/) — A computer running blockchain client software that participates in the network by validating, storing, and propagating transactions and bloc
- [Non-Custodial Wallet](/glossary/non-custodial-wallet/) — A cryptocurrency wallet where the user holds and controls their own private keys, maintaining full ownership of their assets.
- [Nonce](/glossary/nonce/) — A sequential number assigned to each transaction from an Ethereum account, ensuring transactions execute in order and preventing replay.
- [Nullifier](/glossary/nullifier/) — A unique on-chain marker published when a shielded note is spent, preventing double-spending without revealing which note was spent — the re
- [Optimistic Rollup](/glossary/optimistic-rollup/) — A Layer 2 scaling solution that assumes transactions are valid and uses fraud proofs to challenge invalid batches.
- [Oracle](/glossary/oracle/) — A service that delivers off-chain real-world data (prices, weather, sports results) to on-chain smart contracts.
- [Oracle Manipulation](/glossary/oracle-manipulation/) — The deliberate manipulation of price feeds to exploit DeFi protocols that depend on external data.
- [Overcollateralization](/glossary/overcollateralization/) — The practice of pledging collateral worth more than the borrowed amount, required by DeFi lending protocols to secure loans.
- [Paymaster](/glossary/paymaster/) — An Account Abstraction component that sponsors gas fees for smart accounts, enabling gasless transactions and flexible payment models.
- [Pending Transaction](/glossary/pending-transaction/) — A transaction that has been broadcast to the network but not yet included in a block, typically waiting in the mempool for confirmation.
- [Permit Signature Phishing](/glossary/permit-sign-phishing/) — An attack where scammers trick users into signing off-chain EIP-2612 permit messages that grant token spend approvals without an on-chain tr
- [Permit2](/glossary/permit2/) — Permit2 is a universal approval router developed by Uniswap Labs that extends ERC-2612 permit functionality to any token with advanced secur
- [PFP (Profile Picture)](/glossary/pfp/) — NFT collections designed primarily for use as social media profile pictures, characterized by generative trait combinations, rarity rankings
- [Phishing Attack](/glossary/phishing-attack/) — Social engineering attacks that trick crypto users into signing malicious transactions, approving token spend, or revealing seed phrases—res
- [Plasma](/glossary/plasma/) — A family of Layer 2 scaling designs that use Merkle trees and fraud proofs to secure off-chain computation, proposed by Joseph Poon and Vita
- [Price Impact](/glossary/price-impact/) — The percentage change in an asset's market price caused by a single trade's size relative to the available liquidity in an automated market 
- [Priority Fee](/glossary/priority-fee/) — An optional user-set tip paid to validators to prioritize transaction inclusion, layered on top of EIP-1559's protocol-set base fee.
- [Private Key](/glossary/private-key/) — A secret cryptographic number that proves ownership of cryptocurrency assets and authorizes transactions.
- [Proof of Reserves (PoR)](/glossary/proof-of-reserves/) — A cryptographic audit proving that a custodian holds the assets it claims, without revealing sensitive user data.
- [Proof of Stake (PoS)](/glossary/proof-of-stake/) — A consensus mechanism where validators are chosen to produce blocks based on the amount of cryptocurrency they have staked.
- [Proof of Work (PoW)](/glossary/proof-of-work/) — A consensus mechanism where miners compete to solve cryptographic puzzles to validate blocks, securing the network through computational ene
- [Proxy Pattern](/glossary/proxy-pattern/) — A smart contract architecture enabling upgradeability by separating logic and state through delegate calls between proxy and implementation 
- [Public Key](/glossary/public-key/) — The public half of a cryptographic key pair, derived from the private key and used to verify signatures without ever revealing the key that 
- [Pump and Dump](/glossary/pump-and-dump/) — A market manipulation scheme where organizers artificially inflate a token's price through coordinated buying and hype, then sell their hold
- [Reentrancy Attack](/glossary/reentrancy-attack/) — A smart contract exploit where an attacker recursively calls a vulnerable function to drain funds before the contract updates its state.
- [Relayer](/glossary/relayer/) — An entity or service that forwards transactions or messages between different blockchain networks or from users to block builders, enabling 
- [Reorg (Reorganization)](/glossary/reorg/) — A blockchain event where previously confirmed blocks are replaced by alternative blocks, potentially reversing transactions that users belie
- [Replay Attack](/glossary/replay-attack/) — An attack where a valid signed transaction from one chain is fraudulently re-broadcast and executed on another chain.
- [Reserve Factor](/glossary/reserve-factor/) — The share of interest paid by borrowers that a lending protocol redirects to its own reserve treasury rather than to suppliers.
- [Restaking](/glossary/restaking/) — Restaking ETH to secure additional protocols beyond Ethereum consensus, earning extra rewards but taking on additional slashing risk.
- [Rollup](/glossary/rollup/) — A Layer 2 scaling solution that executes transactions off-chain and posts compressed transaction data to a Layer 1 for security and settleme
- [BGP Routing Attack](/glossary/routing-attack/) — An attack that hijacks internet routing (BGP) to intercept, isolate, or censor blockchain node traffic at the network layer.
- [Royalty](/glossary/royalty/) — A percentage of secondary sale proceeds paid to the original NFT creator on every resale.
- [RPC](/glossary/rpc/) — Remote Procedure Call — the communication protocol that allows dApps and wallets to read from and write to a blockchain.
- [Rug Pull](/glossary/rug-pull/) — A crypto exit scam where project developers drain liquidity or abandon a project after attracting investor funds.
- [Real-World Assets (RWA)](/glossary/rwa/) — Physical or traditional financial assets tokenized on a blockchain, bringing off-chain value (real estate, treasuries, commodities) on-chain
- [Sanctions](/glossary/sanctions/) — Government-imposed restrictions that prohibit transactions with specific individuals, entities, or addresses, enforced by agencies like OFAC
- [Sandwich Attack](/glossary/sandwich-attack/) — An MEV exploit where a bot front-runs and back-runs your transaction to profit from the price impact.
- [Searcher (MEV)](/glossary/searcher/) — An automated bot or operator that monitors the blockchain for MEV opportunities and submits optimized transaction bundles to block builders.
- [Seed Phrase](/glossary/seed-phrase/) — A human-readable list of 12-24 words that generates and recovers all private keys in a cryptocurrency wallet.
- [Self-Custody](/glossary/self-custody/) — The practice of holding and managing your own cryptocurrency private keys directly, without relying on a third party like an exchange or ban
- [Sequencer](/glossary/sequencer/) — The node or service responsible for ordering transactions, executing them, and publishing state updates in a Layer 2 rollup.
- [Sharding](/glossary/sharding/) — A scaling technique that splits a blockchain's state and transaction processing across multiple parallel segments called shards.
- [Shielded Address](/glossary/shielded-address/) — A Zcash address type that hides sender, receiver, and amount using zero-knowledge proofs, with value held in shielded pools rather than the 
- [Sidechain](/glossary/sidechain/) — An independent blockchain that runs parallel to a main chain, connected via a two-way bridge for asset transfers.
- [Signature Replay](/glossary/signature-replay/) — Reusing a valid cryptographic signature more than once — or on a different chain — because a smart contract failed to mark it as consumed.
- [Slashing](/glossary/slashing/) — The punishment mechanism in proof-of-stake where validators lose staked funds for proven misbehavior or attacks.
- [Slippage](/glossary/slippage/) — The difference between the expected price of a trade and the actual executed price.
- [Slot](/glossary/slot/) — A fixed 12-second time interval in Ethereum's Proof of Stake system during which one validator is chosen to propose a block.
- [Smart Contract](/glossary/smart-contract/) — Self-executing code deployed on a blockchain that automatically enforces agreements when conditions are met.
- [Snapshot (Governance)](/glossary/snapshot/) — An off-chain voting platform used by DAOs to conduct gasless governance votes, and the process of recording on-chain state at a specific blo
- [Social Engineering](/glossary/social-engineering/) — Manipulating people into revealing secrets or performing actions that compromise security — now the leading attack vector in Web3, responsib
- [Social Recovery](/glossary/social-recovery/) — A wallet recovery method where trusted contacts (guardians) co-sign to restore access, eliminating the need for seed phrases.
- [Solidity](/glossary/solidity/) — The primary programming language for writing smart contracts on Ethereum and EVM-compatible blockchains.
- [Soulbound Token (SBT)](/glossary/soulbound-token/) — A non-transferable token that represents identity, credentials, or commitments within a Web3 ecosystem.
- [Stablecoin](/glossary/stablecoin/) — A cryptocurrency pegged to a stable asset (usually the US dollar), combining blockchain benefits with price stability.
- [Stablecoin Reserve](/glossary/stablecoin-reserve/) — The assets backing a stablecoin's value, held by the issuer as collateral to guarantee redemption at the pegged price.
- [Staking](/glossary/staking/) — Locking cryptocurrency to secure a proof-of-stake network and earn rewards in return.
- [Staking Pool](/glossary/staking-pool/) — A service that combines many users' stake into a single validator set, letting small holders participate in proof-of-stake rewards without t
- [StarkNet](/glossary/starknet/) — A ZK-rollup for Ethereum by StarkWare that uses the Cairo programming language for high-throughput computation.
- [State Channel](/glossary/state-channel/) — A two-party off-chain payment channel that enables instant, gasless transactions settled on-chain only at open and close.
- [Supply Chain Attack](/glossary/supply-chain-attack/) — An attack where a dependency, package, or tool in a software supply chain is compromised to distribute malware to downstream users — a growi
- [Sybil Attack](/glossary/sybil-attack/) — Creating multiple fake identities to manipulate a system, common in airdrop farming, governance, and network consensus.
- [Testnet](/glossary/testnet/) — A replica of a blockchain network used by developers for testing smart contracts, protocol upgrades, and application functionality without r
- [Timejacking Attack](/glossary/timejacking/) — A Bitcoin attack where false node timestamps skew a victim's network-adjusted time to slow or speed up difficulty adjustment.
- [Timelock](/glossary/timelock/) — A smart contract mechanism that delays the execution of privileged operations, giving users time to react before changes take effect.
- [Token Airdrop](/glossary/token-airdrop/) — A distribution method where projects send free tokens to wallet addresses, typically to bootstrap adoption, reward early users, or decentral
- [Token Allocation](/glossary/token-allocation/) — The distribution plan for a project's total token supply across team, investors, community, and treasury.
- [Token Burn](/glossary/token-burn/) — The permanent removal of tokens from circulation, reducing total supply to increase scarcity and potentially support price.
- [Token Generation Event (TGE)](/glossary/token-generation-event/) — The moment a cryptocurrency token is officially created and distributed, marking the start of vesting schedules and secondary market trading
- [Token Vesting](/glossary/token-vesting/) — A schedule that gradually releases locked tokens to team members and investors over time, preventing immediate selling.
- [Tokenization](/glossary/tokenization/) — The process of representing real-world or digital assets as blockchain tokens, enabling fractional ownership and programmable transfer.
- [Tokenomics](/glossary/tokenomics/) — The economic design of a cryptocurrency token — its supply, distribution, utility, and incentive mechanisms.
- [Tornado Cash](/glossary/tornado-cash/) — A decentralized crypto mixer protocol that breaks the link between sender and recipient addresses, sanctioned by OFAC in 2022 for facilitati
- [Transaction](/glossary/transaction/) — A cryptographically signed instruction submitted to a blockchain to transfer value, interact with smart contracts, or deploy code.
- [Transaction Malleability](/glossary/transaction-malleability/) — A property that lets a transaction's signature/hash be altered before confirmation, changing its ID without invalidating it.
- [Total Value Locked (TVL)](/glossary/tvl/) — The total amount of assets deposited in a DeFi protocol, the key metric for measuring adoption.
- [TWAP (Time-Weighted Average Price)](/glossary/twap/) — A pricing method that averages an asset's price over a specified time period, used to reduce slippage in large trades and resist oracle mani
- [Upgradeable Contract](/glossary/upgradeable-contract/) — A smart contract whose logic can be modified after deployment using a proxy pattern, allowing bug fixes and feature updates — but also creat
- [UTXO (Unspent Transaction Output)](/glossary/utxo/) — The fundamental accounting model used by Bitcoin where each transaction consumes previous outputs and creates new ones, rather than using ac
- [Validator](/glossary/validator/) — A network participant in proof-of-stake blockchains who proposes and attests blocks in exchange for rewards.
- [Validity Proof](/glossary/validity-proof/) — A cryptographic proof that validates every state transition in a ZK-rollup, ensuring only correct transactions are accepted without relying 
- [Vanity Address](/glossary/vanity-address/) — A custom wallet address containing specific characters or patterns (e.g., starting with specific prefixes), generated by trying millions of 
- [veToken](/glossary/ve-token/) — A vote-escrowed token model where users lock tokens for a period to gain voting power and yield boosts, pioneered by Curve Finance.
- [Vesting](/glossary/vesting/) — A mechanism that gradually releases tokens to team members and early investors over time, preventing immediate sell-offs and aligning long-t
- [Viewing Key](/glossary/viewing-key/) — A Zcash key that grants read-only visibility of a holder's shielded transactions to a third party, without surrendering spending control — t
- [Wallet](/glossary/wallet/) — A software program or physical device that stores cryptocurrency private keys and enables users to send, receive, and manage digital assets.
- [Wallet Address](/glossary/wallet-address/) — The public account identifier others use to send you crypto — safe to share, derived from your public key, and useless for spending without 
- [Wallet Connect](/glossary/wallet-connect/) — An open protocol connecting wallets to DApps through a secure pairing process, widely used but exploited by phishing drainers.
- [Wallet Drainer](/glossary/wallet-drainer/) — Malicious software embedded in fake dApp websites that tricks users into signing transactions that drain all tokens and NFTs from their wall
- [Wallet Passphrase](/glossary/wallet-passphrase/) — An optional secret word (the BIP-39 '25th word') added to a seed phrase — it opens a completely different hidden wallet, enabling plausible 
- [Wash Trading](/glossary/wash-trading/) — A market manipulation technique where a trader simultaneously buys and sells the same asset to create fake trading volume and mislead other 
- [Web3](/glossary/web3/) — The vision of a decentralized internet built on blockchain, where users own their data, identity, and assets.
- [Wei](/glossary/wei/) — The smallest unit of Ether (ETH), where 10^18 wei equals 1 ETH. Gwei is the most commonly used subdivision for gas pricing.
- [Whale](/glossary/whale/) — An individual or entity that holds a large enough amount of a cryptocurrency to potentially influence market prices through their trading ac
- [Wrapped BTC (WBTC)](/glossary/wrapped-btc/) — An ERC-20 token representing Bitcoin on Ethereum, backed 1:1 by BTC held by a centralized custodian under a merchant-custodian model.
- [Wrapped ETH (WETH)](/glossary/wrapped-eth/) — An ERC-20 token representing native ETH 1:1, enabling ETH to interact with smart contracts and DeFi protocols that require the ERC-20 standa
- [Wrapped Token](/glossary/wrapped-token/) — A tokenized version of a cryptocurrency on a different blockchain, backed 1:1 by the original asset held in reserve.
- [Wrench Attack](/glossary/wrench-attack/) — A physical attack where criminals coerce a crypto holder into surrendering funds in person — the offline endgame of online data leaks. Named
- [x402](/glossary/x402/) — An open protocol that repurposes HTTP's 402 Payment Required status code for native web payments, enabling pay-per-request APIs without API 
- [Yield Aggregator](/glossary/yield-aggregator/) — A DeFi protocol that automatically moves deposited funds across yield sources and compounds rewards to maximize returns for users.
- [Yield Farming](/glossary/yield-farming/) — Strategically providing liquidity to DeFi protocols in exchange for token rewards, interest, and trading fees.
- [ZK-Rollup](/glossary/zk-rollup/) — A Layer 2 scaling solution that uses zero-knowledge proofs to verify transaction batches with mathematical certainty.
- [zk-SNARK](/glossary/zk-snark/) — A cryptographic proof system that allows one party to prove knowledge of information without revealing it, with Succinct, Non-interactive, v
- [Zero-Knowledge Proof (ZKP)](/glossary/zkp/) — A cryptographic method to prove you know something without revealing the actual information.
- [zkSync](/glossary/zksync/) — A zero-knowledge rollup for Ethereum by Matter Labs, offering high-throughput, low-cost transactions with EVM compatibility.

## article (183)

- [Abstract Chain Is Shutting Down: Bridge Out Before December 15 or Lose Access](/articles/abstract-chain-shutdown-migration-guide/) — Abstract Chain shuts down December 15, 2026 — assets left behind become permanently inaccessible. Official bridges, deadlines, and migration
- [Access Control Attacks Explained: How Broken Permissions Let Attackers Drain Smart Contracts](/articles/access-control-attacks-explained/) — Broken permission checks let anyone mint tokens or seize a contract. How access control attacks work and the red flags to check before you d
- [Address Poisoning Attacks: How They Work and How to Avoid Them](/articles/address-poisoning-attacks-explained/) — Scammers seed your history with lookalike addresses, hoping you paste the wrong one. How address poisoning works and the one habit that stop
- [Address Risk Scoring: How to Read the Signs of a Dangerous Wallet](/articles/address-risk-scoring-explained/) — Phishing links, sanctions, laundering hops — a wallet's history tells you if it's dangerous. How risk scoring works and how to check any wal
- [Wallet Drained? What You Can Actually Do After a Drainer Attack](/articles/after-wallet-drainer-what-now/) — A malicious signature took your tokens or NFTs. What still works — revocation, reporting, the recovery-scam second wave — and what doesn't.
- [AI-Powered Crypto Scams in 2026: How Artificial Intelligence Became the Top Attack Weapon](/articles/ai-powered-crypto-scams-2026/) — AI now writes the phishing, clones the site, and fakes the video calls. How AI-powered crypto scams work and the defenses that still hold.
- [Airdrop Eligibility Checker Phishing: How Fake Checkers Harvest Wallets](/articles/airdrop-eligibility-checker-phishing/) — 'Check your eligibility' sites spawn every season — most harvest wallets. How fake checkers work and how to verify eligibility without conne
- [The Airdrop Safety Checklist: 12 Checks Before You Connect a Wallet](/articles/airdrop-safety-checklist/) — Twelve checks in one list: source verification, URL discipline, contract inspection, signature reading. Run top to bottom — any failed check
- [Airdrop Scam Checker: Verify Any Airdrop On-Chain in 5 Steps](/articles/airdrop-scam-checker/) — Before you connect a wallet to claim an airdrop, run the 5-step on-chain check: contract age, deployer, holders, approvals, domain — free to
- [Airdrop Signature Scams: Why the Claim Button Is the Dangerous Part](/articles/airdrop-signature-scams/) — Fake airdrop pages don't want your seed phrase — they want a signature. The four signature types a claim site can request and what each lets
- [Airdrop Snapshot Scams: Why 'Verify Your Wallet Before the Deadline' Is Always Phishing](/articles/airdrop-snapshot-verification-scams/) — Real snapshots need no action from you, ever. How snapshot scams use countdown pressure and why eligibility can always be checked without a 
- [How to Analyze Token Distribution: Concentration, Whales, and Risk](/articles/analyzing-token-distribution/) — Token distribution tells you who holds the power. How to check concentration, spot whale risk, and judge whether a supply is healthy before 
- [Arbitrum Token Safety: How to Avoid Scams on Arbitrum](/articles/arbitrum-token-safety/) — Cheap fees made Arbitrum a scam-token hotspot. Verify contract, owner powers, holders, and liquidity before you buy — free 5-step on-chain c
- [Arc Mainnet Day-One Risks: Copycat Tokens and Fake Airdrops in the First Hours](/articles/arc-mainnet-day-one-risks/) — Circle's stablecoin L1 went live and copycats appeared within hours — duplicate tickers, pump spikes, fake drops. A field guide from day-one
- [Base Chain Token Safety: How to Avoid Scams on Coinbase's Layer 2](/articles/base-chain-token-safety/) — Base's low fees drew a wave of scam tokens. Check contract source, owner powers, holders, and liquidity before you buy — the free 5-step che
- [Best Ways to Verify Token Addresses: 6 Checks That Hold Up Against Real Scams](/articles/best-ways-to-verify-token-addresses/) — Six ways to verify a token address before you buy: official-source cross-checks, explorer verification, scam scanners, and how scammers fake
- [Anatomy of the Biggest Airdrop Scams: How Fake Claim Sites Actually Work](/articles/biggest-airdrop-scams-anatomy/) — Anatomy of the fake-claim playbook: lookalike domains, wallet-connect harvesting, signature traps. How the biggest airdrop scams actually wo
- [Bitcoin Blackmail Emails Explained: The Password Is Real, the Video Is Not](/articles/bitcoin-blackmail-email-scam/) — Got an email with your real password demanding Bitcoin? The webcam video is fake. Here's how the scam works and what to do in the first hour
- [Bitget Hack Explained: $387M Moved Without a Single Private Key Stolen](/articles/bitget-hot-wallet-hack-explained/) — Bitget lost $387M when attackers fed spoofed data into its wallet backend — no private keys were stolen. How it worked and what users should
- [Blast L2 Is Shutting Down: How to Withdraw Safely Before October 26](/articles/blast-l2-shutdown-withdrawal-guide/) — Blast is shutting down its chain. What happens to assets left on it, which bridges still work, and the withdrawal steps to take before the w
- [Blind Signing Explained: The Hidden Risk in Every Hardware Wallet Transaction](/articles/blind-signing-explained/) — Blind signing makes your wallet display hashes instead of readable terms — so you approve what you can't verify. How it works and when to re
- [BNB Chain Token Safety: How to Avoid Scams on Binance's Chain](/articles/bnb-chain-token-safety/) — Scam tokens follow BNB Chain's cheap fees everywhere. Check contract, owner powers, holders, and liquidity before you buy — the free 5-step 
- [Bridge Attacks Explained: How Cross-Chain Bridges Became Crypto's Biggest Vulnerability](/articles/bridge-attacks-explained/) — Bridges hold pooled funds and verify cross-chain messages — both get attacked. How the biggest bridge hacks worked and what to check before 
- [Cross-Chain Bridge Security: Understanding and Analyzing Bridge Risks](/articles/bridge-security-explained/) — Lockups, validators, message verification — bridge designs fail differently. The risk model to apply before you trust any cross-chain bridge
- [ClickFix Scam Explained: How a Fake CAPTCHA Drains Crypto Wallets](/articles/clickfix-fake-captcha-scam-explained/) — A fake 'verify you are human' page tells you to press Win+R and paste a command. That command installs malware that drains wallets. How the 
- [Clipboard Hijacking Malware Explained: When Copy-Paste Steals Your Crypto](/articles/clipboard-hijacking-malware-explained/) — Malware swaps the address you copied the moment you paste. How clipboard hijackers work, where they come from, and how to make pasted addres
- [Crypto Airdrop Scams Explained: How to Spot and Avoid Fake Airdrops](/articles/crypto-airdrop-scams-explained/) — Fake drops arrive by DM, hijacked accounts, and lookalike domains. How airdrop scams bait a wallet connect — and the checks that expose them
- [Crypto Dusting Attacks Explained: How Tiny Transactions Expose Your Identity](/articles/crypto-dusting-attacks-explained/) — Tiny token amounts appear from nowhere — that's dusting, and it's not a gift. What dusting tries to learn and when those fractions become a 
- [Crypto Recovery Scams Explained: How Fake Recovery Services Target Scam Victims](/articles/crypto-recovery-scams-explained/) — Stolen once, then targeted again — recovery firms that charge upfront and deliver nothing. How the second-wave scam works and the verificati
- [Crypto Task Scams Explained: How Easy-Money Jobs Turn Your Wallet Into a Money Mule](/articles/crypto-task-scam-money-mule/) — Like-and-earn job offers turn your wallet into a mule pipeline for stolen funds. How task scams groom, pay small, then trap — and the exit s
- [DeFi Liquidation Cascades Explained: How Cascading Liquidations Trigger Market Crashes](/articles/defi-liquidation-cascades-explained/) — One liquidation forces the next, and prices gap through everyone's stops. How cascades form, on-chain signs of buildup, and defenses that ho
- [DeFi Protocol Red Flags: How to Spot Risky Protocols Before You Deposit](/articles/defi-protocol-red-flags/) — Anonymous teams, unaudited upgrades, giant emission taps. The red flags that show up before a protocol fails — and how to check each one on-
- [DeFi Yield Farming Risks: How to Evaluate Opportunities Safely](/articles/defi-yield-farming-risks/) — Sky-high APYs price in risks you can't see — contract bugs, rug pulls, impermanent loss. How to weigh a farm before you deposit a single tok
- [Denmark CPR Breach: 8.8M Identities Sat Behind a '123456' Password](/articles/denmark-cpr-breach-123456/) — Millions of citizen records with trivially weak passwords — and crypto accounts in the blast radius. What the breach exposed and what to do 
- [EIP-7702 Airdrop Phishing: One Signature, Total Wallet Control](/articles/eip-7702-airdrop-phishing/) — EIP-7702 lets a single approval touch every token you own. How scammers abuse the new signature flow — and the prompt you should never, ever
- [When 'Encrypted' Is Just a Word: A 3-Step Reality Check for Crypto Privacy Claims](/articles/encrypted-claims-reality-check/) — A generative-art project claimed zk-powered locks; the data sat in plain HTML. How we checked — a method you can reuse on any 'zero-knowledg
- [ERC-20 Token Security Check: A Developer's Guide to Auditing Any Token Contract](/articles/erc20-token-security-check/) — Source verification, owner powers, holder spread, taxes, honeypot traps. The six checks that catch most malicious ERC-20 tokens — free tools
- [ETH sign Phishing Explained: The Deprecated Method Still Draining Wallets](/articles/eth-sign-phishing-explained/) — eth_sign lets a site move any asset from your wallet. It was deprecated years ago and still drains victims — how the prompt looks and how to
- [Exchange Inflows & Outflows: What They Tell You About Market Sentiment](/articles/exchange-inflows-and-outflows/) — Coins flowing into exchanges often precede selling; big withdrawals can mean accumulation. How to read flow data — and what it can't tell yo
- [How Fake Airdrops Reach You: Hijacked Accounts, Discord Bots, and Compromised News Sites](/articles/fake-airdrop-distribution-channels/) — Hijacked accounts, Discord bots, compromised news sites — the distribution layer that puts scam drops in front of you. How each channel work
- [Fake Crypto Exchange Scams: Why the Balance Grows but the Withdrawal Never Comes](/articles/fake-crypto-exchange-withdrawal-scam/) — The dashboard shows profit, the withdrawal is frozen, and support wants a fee. How fake crypto exchanges work, the deposit-address test that
- [Fake Crypto Job Offers Explained: The $1.5B Hack That Started With One Recruiter Message](/articles/fake-crypto-job-offer-scams/) — Recruiters offering crypto jobs with salary in USDT — then the 'work platform' takes your deposit. How fake job offers drain applicants, ste
- [Fake Crypto Wallet Apps: How Scam Wallets in App Stores Steal Funds](/articles/fake-crypto-wallet-apps/) — Cloned wallet apps sit in official stores, waiting to swallow your seed phrase. How fakes get listed, how they phish, and the install checks
- [Fake Crypto Support Scams Explained: Why Support That Contacts You First Is Always Fake](/articles/fake-customer-support-scams/) — A comment replies 'DM for support' under your post — the account is a scammer. How fake support works and why real teams never ask for what 
- [Flash Loan Attacks Explained: How Borrowed Billions Exploit DeFi](/articles/flash-loan-attacks-explained/) — Borrow, attack, repay — all in one transaction with zero capital. How flash loan attacks warp prices and drain protocols, with real case ana
- [FMMR Mining Scam: A Fake Pool Farmed 151 Wallets for Over 1.5M USDC — and the Permits Are Still Live Until 2030](/articles/fmmr-fake-mining-pool-scam/) — FMMR Mining is a fake pool that farmed 151 wallets for 1.5M USDC. Victims signed permits valid until 2030 — if you connected a wallet, revok
- [FomoPeek Malware: How a Read-Only Whale Tracker Stole iOS Private Keys](/articles/fomopeek-app-malware-explained/) — An iOS app passed review, then shipped kernel-level wallet theft. How the FomoPeek attack worked, who it hit, and what to check before any a
- [Front-Running Attacks Explained: How Predatory Traders Profit from Your Pending Transactions](/articles/front-running-attacks-explained/) — Your pending transaction is an announcement — bots trade ahead of it. How front-running works, what it costs you, and settings that reduce e
- [GIWA Fake RPC Scam: Full Forensics of a 771-ETH Fake Bridge Built From Verified Code](/articles/giwa-fake-rpc-bridge-scam-explained/) — A verified-code proxy, a fake RPC, a mainnet that doesn't exist. How the GIWA fake bridge drained depositors — and the check that catches co
- [Governance Attacks Explained: How Attackers Exploit DAO Voting to Steal Millions](/articles/governance-attacks-explained/) — Flash-loan votes, hijacked delegations, smuggled proposals. How governance attacks seize DAO treasuries — and the signals of a manipulable s
- [Hardware Wallet Scams Explained: Fake Devices, Phishing Letters, and the Setup Traps](/articles/hardware-wallet-scams-explained/) — The purchase itself can be the attack — tampered devices, fake letters, pre-filled recovery sheets. Six scam patterns and a buy-side checkli
- [Hormuz Strait Crypto Toll Scams: Fake 'Safe Passage' Messages, Explained](/articles/hormuz-strait-crypto-scam/) — Ship operators get messages demanding crypto for transit — some impersonate real tolls, some are pure extortion. What's real, what's fake, h
- [How Stolen Crypto Is Actually Recovered: The Real Process Behind the Headlines](/articles/how-stolen-crypto-is-recovered/) — Chain-hopping leaves traces, exchanges freeze on request, seizures do happen. How recovery actually works — and what victims should do in th
- [How to Audit Your Own Wallet: A Step-by-Step On-Chain Security Review](/articles/how-to-audit-your-wallet-activity/) — Your history lists every approval and signature you've ever given. How to audit your own wallet with free tools — and clean up what shouldn'
- [How to Avoid Crypto Phishing Scams: A Complete Defense Guide](/articles/how-to-avoid-crypto-phishing-scams/) — Phishing sites and malicious approvals have stolen over $1 billion. How the attacks lure a signature — and the habits that protect any walle
- [How to Check if Liquidity Is Locked: A Step-by-Step Guide for Token Buyers](/articles/how-to-check-liquidity-locked/) — Unlocked liquidity means devs can pull the pool anytime. Here's how to verify a lock on the explorer before you buy — 5 checks, free tools o
- [How to Claim an Airdrop Safely: The Burner Wallet Workflow](/articles/how-to-claim-airdrops-safely/) — Verify the source independently, pick the URL before the frenzy, claim from a dedicated wallet, revoke after. The safe-claim workflow, in le
- [How to Detect NFT Wash Trading: A Practical On-Chain Workflow](/articles/how-to-detect-nft-wash-trading/) — Recycled token IDs, circular funding, round-trip cost math — the on-chain workflow that separates real NFT volume from wash-traded bait befo
- [How to Prevent Wallet Drainer Attacks: A Complete Defense Framework](/articles/how-to-prevent-wallet-drainers/) — Spotting drainers isn't enough — segregate wallets, cap approvals, monitor in real time. The defense stack that stops attacks before they la
- [How to Read a Blockchain Explorer: Etherscan Step by Step](/articles/how-to-read-a-blockchain-explorer/) — Addresses, transactions, contract tabs, event logs — the explorer is your primary window on-chain. Learn to read it, step by step, from zero
- [How to Read a Smart Contract Audit Report: A Practical Guide](/articles/how-to-read-a-smart-contract-audit-report/) — An audit badge alone tells you almost nothing. How to read scope, severity, and fix status in an audit report — and spot projects that only 
- [How to Report a Crypto Scam: IC3, Exchange Freeze Requests, and What Actually Happens After You File](/articles/how-to-report-crypto-scam/) — Assemble the evidence, file the IC3 complaint field by field, send exchange freeze requests that get read — and what to expect after you sub
- [How to Spot Wallet Drainers: A Field Guide to Malicious dApps](/articles/how-to-spot-wallet-drainers/) — Drainer sites look like legitimate dApps until the signature prompt. How to identify them, how they lure, and the habits that keep assets sa
- [How to Track Stolen Crypto: A Guide to Blockchain Forensics](/articles/how-to-track-stolen-crypto/) — Blockchains are public ledgers — theft leaves a trail. How investigators trace stolen funds, how thieves hide, and what victims should do fi
- [How to Track Whale Wallets: Free Tools and Methodology](/articles/how-to-track-whale-wallets/) — Whale wallets move markets. How to find, label, and follow large holders with free tools — plus the alerting setup that fires the moment the
- [How to Verify a Token Before Buying: A Complete On-Chain Safety Checklist](/articles/how-to-verify-a-token-before-buying/) — Source, liquidity lock, holders, mint functions, taxes, honeypot traps. The on-chain checklist to run before buying any token — free tools i
- [Infinite Approval Explained: Why Unlimited Token Approvals Are a Ticking Time Bomb](/articles/infinite-approval-explained/) — An unlimited approval lets a hacked contract drain your wallet months after you signed. Check your open approvals and revoke the ones you do
- [Infostealer Malware Explained: How Stolen Sessions Drain Crypto Accounts](/articles/infostealer-malware-crypto-attacks/) — One infected download grabs session cookies, saved passwords, and wallet vaults. The full crypto kill chain — and the defenses that actually
- [Integer Overflow and Underflow Attacks Explained: How Math Bugs Broke Smart Contracts](/articles/integer-overflow-attacks-explained/) — Numbers that wrap past their limits minted quadrillions of tokens and bypassed balance checks. How overflow attacks worked — and what Solidi
- [Is This Token a Scam? How to Check Any Crypto Token Before Buying](/articles/is-this-token-a-scam/) — Source verification, hidden mints, holder spread, taxes, honeypot traps. Six free on-chain checks that answer the question before your money
- [Kelp DAO Hack Explained: How a 1-of-1 DVN Configuration Let Attackers Forge $292M in Fake rsETH](/articles/kelp-dao-hack-explained/) — A 1-of-1 bridge validator config let attackers forge $292M in unbacked rsETH in under an hour. How the largest DeFi hack of 2026 worked.
- [Khabib's Crypto Deals, Explained: Gyms, NFTs, and the "Regulated Tokenization" Pitch](/articles/khabib-crypto-deals-explained/) — Hashrate-backed NFTs, a papakha drop, a $10B tokenized-gym pitch — we separate what's documented from what's promised in Khabib's crypto dea
- [The Ledger–CryptoBilis Hack: How Buying a Trusted Reseller Became the Attack](/articles/ledger-cryptobilis-supply-chain-hack/) — An authorized reseller was secretly acquired and its devices implanted — buyers lost an estimated $72M–$90M. Full timeline of the takeover.
- [The $86M 'Ledger Hack': What the On-Chain Evidence Actually Shows](/articles/ledger-drain-address-poisoning/) — Multiple Ledger users were drained in October 2026. We traced the flagged wallets on-chain — what the evidence shows and what Ledger owners 
- [Ledger Implants Reach European Retail: Two MediaMarkt Devices, One 'Eurasian Version' Antenna](/articles/ledger-mediamarkt-implant-europe/) — Hardware implants found in Ledger devices at European retail; the chain delisted Ledger group-wide. What's verified, what's speculation, wha
- [The Task Scammer Who Lost 60 BTC to a Tampered Ledger Wallet](/articles/ledger-task-scammer-loses-60-btc/) — A task-scam operator kept 60 BTC of stolen proceeds in tampered Ledger wallets — drained in a single morning. A rare look at scammers gettin
- [Magic Eden Exploit Explained: A Dead Marketplace, Living Approvals, and a $5.7M Whitehat Rescue](/articles/magic-eden-payment-processor-exploit/) — NFTs left wallets for 0 ETH via a contract Magic Eden stopped using — the approvals never expired. How the exploit worked and the whitehat r
- [MetaMask Infrastructure Incident Explained: Why Your Wallet Was Never at Risk](/articles/metamask-infrastructure-incident-explained/) — Validators began exiting after a disclosed incident — but wallets were never exposed. The key-splitting architecture that protected user fun
- [MEV Explained: Maximal Extractable Value and How It Affects Your Transactions](/articles/mev-explained/) — Bots reorder, front-run, and sandwich your transactions for profit. How MEV extraction works, who profits from it, and settings that cut wha
- [NEAR Intents Hack Explained: How a Signed-Note Bug Drained $3.87M](/articles/near-intents-hack-explained/) — A signed-note bug let an attacker withdraw $3.87M without any user signature. Full timeline, where the money went, and why users couldn't ha
- [NPM Supply Chain Attacks: How Compromised Packages Are Stealing Crypto Wallets in 2026](/articles/npm-supply-chain-attacks-2026/) — Compromised packages — from Axios to the Injective SDK — ship wallet-stealing malware straight into builds. How npm supply chain attacks wor
- [Building Your On-Chain Analysis Workflow: A Complete Tool Stack Guide](/articles/on-chain-analysis-workflow/) — From explorer basics to alerts and daily routines — a step-by-step workflow that turns raw blockchain data into decisions. Beginner to pract
- [On-Chain Indicators That Matter: MVRV, NVT, SOPR & More Explained](/articles/on-chain-indicators/) — MVRV, NVT, SOPR, Puell — what each metric measures, what it says about valuation, and how to read them together instead of in isolation.
- [Oracle Manipulation Attacks in DeFi: How Price Feeds Get Exploited](/articles/oracle-manipulation-defi/) — Flash loans bend a price feed for one block; protocols trusting it get drained. How oracle attacks work and what to check before you deposit
- [Permit2 Phishing Explained: How One Free Signature Can Drain an Entire Wallet](/articles/permit2-exploit-explained/) — Uniswap's universal router lets one free signature cover every token. How scammers weaponize Permit2 — and why it's riskier than ERC-20 appr
- [Where Pig Butchering Money Actually Goes: Tracing a $73 Million Laundering Pipeline](/articles/pig-butchering-crypto-tracing/) — Fake platforms show gains while deposits move through shells and USDT. Inside a documented $73M laundering pipeline — each hop as seen on-ch
- [Pig Butchering Scams Explained: The On-Chain Anatomy of Romance Investment Fraud](/articles/pig-butchering-scams-explained/) — Grooming, fake trading platforms, on-chain money trails — why pig butchering tops the FBI's loss charts, and how the funnel works at every s
- [Polygon Token Safety: How to Avoid Scams on the MATIC Chain](/articles/polygon-token-safety/) — Every Ethereum scam pattern follows cheap fees onto Polygon. Check contract, owner powers, holders, and liquidity — the free 5-step check.
- [Proxy Contract Upgrade Attacks Explained: How Upgrade Patterns Became Attack Vectors](/articles/proxy-upgrade-attacks-explained/) — Control the upgrade function and you can swap trusted logic for a drain. How Parity, Wormhole, and Uranium-grade bugs worked — and the patte
- [Public Key vs Private Key vs Wallet Address: The Difference Scammers Hope You Never Learn](/articles/public-key-private-key-wallet-address/) — Every wallet scam relies on you not knowing which string is which. The difference between the three — and what each one can cost you if leak
- [Reading Smart Contract Events and Logs: A Practical Guide](/articles/reading-smart-contract-events/) — Event logs are a contract's public diary of transfers, mints, and approvals. How to read them on any explorer for free — and what they revea
- [Reentrancy Attacks Explained: The Smart Contract Vulnerability That Started It All](/articles/reentrancy-attacks-explained/) — Call back in before the balance updates, and you drain the vault on loop. How reentrancy worked from the DAO era to today — and the fixes th
- [Rug Pulls Explained: How Liquidity Pulls and Hidden Mint Functions Drain Your Wallet](/articles/rug-pulls-explained/) — Liquidity unlocks, mint authority, holder concentration — rug pulls telegraph themselves on-chain. The red flags to check before you buy any
- [Sandwich Attacks Explained: How MEV Bots Front-Run and Back-Run Your Trades](/articles/sandwich-attacks-explained/) — Your trade sits in the mempool; bots front-run and back-run it. How sandwich attacks work mechanically and the slippage settings that blunt 
- [Why You Should Never Generate a Seed Phrase Online](/articles/seed-phrase-generator-risk/) — Online generators either log the phrase or trust the browser with randomness. How real wallets create seed phrases — and the fix if you alre
- [How to Store a Seed Phrase: Steel, Paper, Copies, and Inheritance](/articles/seed-phrase-storage/) — A backup survives only what it can survive — fire, flood, theft, your own memory. Paper done right, when steel earns its price, and copies t
- [Crypto Signature Scams: How One Signature Can Drain Your Wallet](/articles/signature-scam-explained/) — The prompt looks harmless; the payload moves your tokens. Every signature-scam variant explained — and how to verify what you are actually s
- [SIM Swap Attacks Explained: How Phone Number Theft Drains Crypto Accounts](/articles/sim-swap-attacks-explained/) — Take the phone number, reset the exchange login, drain the account. The full SIM-swap attack chain, real cases, and the defenses that actual
- [Slippage Attacks Explained: How MEV Bots Exploit Price Movement During Transaction Execution](/articles/slippage-attacks-explained/) — Between submit and execution, MEV bots move the price against you. How slippage attacks work, why tolerance settings matter, and safer fills
- [Crypto Scams on X, Telegram, and Email: The Full Attack Chain Explained](/articles/social-media-crypto-scam-playbook/) — Fake moderator DMs that drop malware, honeypot 'friends,' airdrop emails from lookalike domains — how the social-engineering playbook works,
- [Solana Token Safety: How to Avoid Scams on Solana](/articles/solana-token-safety/) — A new Solana token looks like a 100x. Check mint authority, holders, and liquidity before you connect a wallet — the free 5-step on-chain ch
- [How to Spot Rug Pulls and Honeypots On-Chain Before You Lose Money](/articles/spotting-rug-pulls-and-honeypots/) — Liquidity locks, contract permissions, supply concentration — the on-chain flags that expose rugs and honeypots before you invest a single c
- [Stablecoin Depegging: What It Means and How to Spot the Signs On-Chain](/articles/stablecoin-depegging/) — When a stablecoin's peg breaks, minutes decide losses. How depegging happens, the early on-chain warning signs, and a dip versus a death spi
- [Crypto Stolen? The First 24 Hours: A Step-by-Step Emergency Runbook](/articles/stolen-crypto-first-24-hours/) — Triage the intrusion, secure what's left in the right order, build evidence, fire freeze requests before the mixer. The emergency runbook, i
- [Where Stolen Crypto Goes Dark: Privacy Pools and What Tracing Can Still Do](/articles/stolen-crypto-privacy-pools/) — The trail usually ends in a shielded pool or mixer. How privacy layers change fund tracing — and what victims can still realistically do aft
- [A Sui Bridge Claim Bot Just Paid the Cetus Hacker — 17 Months After the Freeze](/articles/sui-bridge-claim-bot-cetus-hacker/) — A rescue bot finalized the Cetus hacker's 17-month-old bridge claims and paid out $392K. Why dormant bridge claims are live liabilities for 
- [Sybil Attacks Explained: How Fake Identities Undermine Decentralized Systems](/articles/sybil-attacks-explained/) — One operator, a thousand wallets, airdrop farming at industrial scale. How Sybil attacks distort voting and rewards — and how networks fight
- [Telegram Airdrop Bot Scams: How Tap-to-Earn Games Drain Real Wallets](/articles/telegram-airdrop-bot-scams/) — Tap-to-earn onboarded millions — and industrialized fake bots. The five scam patterns inside Telegram airdrop games and the checks that expo
- [The Telegram Crypto Pitch, Read Back to the Scammer: A Real Chat, Dissected Line by Line](/articles/telegram-crypto-pitch-script/) — A stranger pitches a token 'launching tonight on Base.' We annotate every beat of the real script — and what happened when we pitched it bac
- [Testnet Airdrop Safety: How to Farm Testnets Without Getting Drained](/articles/testnet-airdrop-safety/) — Fake testnet sites, seed harvesters, mainnet bait-and-switch — which testnet risks are real, and the workflow that keeps every season safe.
- [Token Approval Safety: How to Audit and Revoke Smart Contract Permissions](/articles/token-approval-safety/) — Every approval is a standing permission to move your tokens. How to audit what you've signed — and revoke everything that shouldn't still be
- [Token Flow Analysis: Following the Money Trail on the Blockchain](/articles/token-flow-analysis/) — Funds tell the story — wallets, exchanges, protocols, timing. The methodology and patterns that show what's really happening behind a token'
- [Token Taxes Explained: How Buy/Sell Fees Work and When They Become a Trap](/articles/token-taxes-explained/) — Buy and sell fees can fund a treasury — or hide a honeypot exit. How token taxes work and how to check the rate before you're the one paying
- [Token Unlocks Explained: How Vesting Schedules Move Markets and How to Track Them](/articles/token-unlocks-explained/) — Locked supply releases on a schedule, and prices feel it. How vesting works, why unlocks create sell pressure, and how to track what's comin
- [Unbacked Mint Attacks: How Fake Receipts Drained Liquid Network and Symbiosis](/articles/unbacked-mint-attacks-explained/) — Mint wrapped assets against deposit receipts that never happened. How Liquid Network and Symbiosis lost real BTC to the same trick in one we
- [Understanding Gas Fees: Why Transactions Cost What They Cost](/articles/understanding-gas-fees/) — Base fee, priority fee, L2 pricing — what you actually pay for every transaction. How gas fees work on Ethereum and the levers that cut your
- [Unsolicited Airdrop Tokens in Your Wallet: The Claim Trap Explained](/articles/unsolicited-airdrop-tokens/) — Tokens you never signed up for are bait — fake claim sites, import tricks, address dusting. What happens if you interact, and the only corre
- [Wallet Labels: How to Identify Who Owns What on the Blockchain](/articles/wallet-labels/) — Exchange hot wallets, contracts, whales, team treasuries — labels turn hex addresses into actors. How to read and use them in on-chain analy
- [Wash Trading Detection: How to Spot Fake Volume on DEXs and NFT Markets](/articles/wash-trading-detection-explained/) — Paired wallets, impossible volume-to-liquidity ratios, clockwork timing — how to detect wash trading on DEXs and NFT markets with on-chain d
- [What Is On-Chain Analysis? A Complete Beginner's Guide](/articles/what-is-on-chain-analysis/) — Reading blockchain data to follow money and spot risk — the practice, the free tools, and where to start if you've never opened an explorer.
- [Zcash Cold Storage: How to Store ZEC Offline in 2026](/articles/zcash-cold-storage-guide/) — Transparent addresses work anywhere; shielded mostly don't. What Trezor and Ledger actually support, three working setups, and the scams to 
- [Zcash Whitelist Season: One Takes Your ZEC, One Takes Your Identity Map](/articles/zcash-whitelist-what-you-hand-over/) — One project charged for a testnet NFT; another collects identity-to-address maps for free. What each whitelist model actually takes from you
- [zkSNARKs Auction Cleared 12,000 ZEC. Here Is What the Winners Actually Hold](/articles/zksnarks-auction-what-bidders-bought/) — Zcash's zkSNARKs identity auction cleared 12,000 ZEC. But ZSA isn't on mainnet — what winners actually hold, and why the data is unverifiabl
- [企鹅链 Abstract 宣布关停：12 月 15 日硬死线，过期资产无法取回](/zh/articles/abstract-chain-shutdown-migration-guide/) (zh) — 2026 年 10 月 6 日，Pudgy Penguins 母公司 Igloo 宣布 Abstract 链 12 月 15 日关停，未迁出资产将无法访问。和 Blast 关网不同，这次没有过期后路。官方迁移通道、假迁移站骗术预警、完整撤退指南。
- [地址投毒攻击：假地址如何骗走你的资金](/zh/articles/address-poisoning/) (zh) — 地址投毒攻击通过向你的钱包发送伪造交易记录，让你的常用地址列表里混入骗子控制的假地址。一旦你不小心选到假地址，资金就会转到骗子手里。本文详解攻击原理和防范方法。
- [链上地址风险评分详解：如何识别危险钱包](/zh/articles/address-risk-scoring/) (zh) — 什么是地址风险评分？如何通过链上数据判断一个钱包是否与钓鱼、制裁、洗钱或诈骗有关联。6 类风险因素 + 实操检测方法。
- [钱包被清空之后：还能做的三件事，和必须躲开的第二刀](/zh/articles/after-wallet-drainer-what-now/) (zh) — 签名被盗、钱包被清，钱还能追回吗？撤销授权、报案、防二次收割的完整行动清单，以及为什么这个地址不能再用了。
- [空投安全指南：领取前必须做的 5 项链上检查](/zh/articles/airdrop-safety-checklist/) (zh) — 空投安全不靠运气，靠链上验证。域名核对、合约账龄、部署者历史、持有人分布、签名内容——五步检查流程全部用免费工具完成，连钱包都不用先连接。附真实案例的失败点拆解。
- [空投诈骗识别指南：假空投如何盗取你的资产](/zh/articles/airdrop-scams/) (zh) — 空投是加密货币的常见营销手段，也是诈骗者的常用武器。本文详解假空投的 5 种形式——钓鱼网站、 Permit 签名诈骗、恶意代币投毒、假 NFT 铸造和冒充官方渠道，以及如何验证真实空投。
- [空投快照前要「验证钱包」？这个动作在机制上就不成立](/zh/articles/airdrop-snapshot-verification-scams/) (zh) — 快照是项目方在某个区块高度读一遍链上历史的只读操作，你的余额和交互记录链上都记得，真快照永远不需要你提前注册或验证。拆解「倒计时 + 验证资格」的钓鱼剧本：骑真项目官宣、假账号评论区截流、验证页连钱包就是签名收割，还有活动结束多年仍在收网的僵尸骗局。四条判断规则，让这类页面一眼就
- [Arc 主网首日实录：一小时的链上数据里，仿冒币、土狗和假空投都到齐了](/zh/articles/arc-mainnet-day-one-risks/) (zh) — Circle 的稳定币公链 Arc 主网上线首小时，链上已经出现同名不同约的仿冒盘、一小时涨 64 倍的土狗和假空投钓鱼。用真实链上数据拆解新链打新的五个坑。
- [买币前怎么验证代币合约地址：六种查法，和每种是怎么被绕过的](/zh/articles/best-ways-to-verify-token-addresses/) (zh) — 买币前怎么验证代币合约地址是真的：官网交叉核对、区块浏览器、貔貅检测工具、持币分布、地址投毒防范，一条条拆，连每种方法的漏洞一起讲。
- [比特币勒索邮件拆解：密码是真的，视频是假的](/zh/articles/bitcoin-blackmail-email-scam/) (zh) — 邮件标题里是你真用过的老密码，正文声称木马偷拍了你，要求 48 小时内把比特币打过去。链上研究和 FBI 公告都指向同一个结论：这是群发模板，不是定向偷拍。另外提醒中文读者：国内更常见的『裸聊敲诈』是另一种真骗局，处置方式完全不同，本文一并讲清。
- [Bitget 被盗 3.87 亿美元拆解：私钥一把没丢，钱照样没了](/zh/articles/bitget-hot-wallet-hack-explained/) (zh) — Bitget 热钱包被盗 3.875 亿美元（首报 3.516 亿），攻击者没偷私钥，而是黑进钱包后端伪造交易数据，让交易所自己的签名流程放行。事件拆解与用户应对。
- [Blast 宣布关闭：10 月 26 日前，怎么把资产安全撤回以太坊](/zh/articles/blast-l2-shutdown-withdrawal-guide/) (zh) — 2026 年 10 月 2 日，Blur 创始人 Pacman 做的 L2 Blast 宣布关网：运营成本超过链上收入。用户要在 10 月 26 日前走官方界面提币，之后只能手动碰 L1 桥合约。完整时间线、提币步骤、关网期骗术预警。
- [区块链浏览器使用指南：如何用 Etherscan 查看链上数据](/zh/articles/blockchain-explorer-guide/) (zh) — 区块链浏览器是链上分析的核心工具。本文手把手教你用 Etherscan 查看地址余额、交易记录、合约代码、代币授权，以及识别可疑交易的方法。
- [假验证码骗局拆解：ClickFix 骗你亲手装上偷币木马](/zh/articles/clickfix-fake-captcha-scam-explained/) (zh) — 假验证码不让你点红绿灯，而是让你按 Win+R 粘贴一条命令。5400 个被黑网站、链上投毒、按比例抽走钱包余额，完整链条拆解。
- [兼职刷单拆解：那份「轻松赚钱」的工作，正把你的账户变成洗钱通道](/zh/articles/crypto-task-scam-money-mule/) (zh) — 刷单做任务第一天真的会给你打钱——那是成本，不是诚意。从点赞群到充值做单、提现卡冻结，再到「商家账户」「代收代付」让你收陌生人的钱再换成 USDT 转出去：你的银行卡和钱包是怎么一步步变成别人的洗钱管道的，冻卡和涉案风险从哪来，已经卷进去该怎么收场。
- [丹麦国家级身份数据库被 123456 打穿：880 万人身份信息泄露，持币人最该防的是下一波精准诈骗](/zh/articles/denmark-cpr-breach-123456/) (zh) — 黑客借一家小公司的合法通道，用 123456 的管理员密码进了丹麦中央人口登记系统，10 天跑了 1400 万次查询，880 万人的姓名、住址、身份号被打包带走。对持币人的意义：身份信息就是钓鱼弹药。
- [「加密」只是个词：三个动作，鉴别加密项目的隐私声明](/zh/articles/encrypted-claims-reality-check/) (zh) — 一个打着加密旗号的白名单项目，页面源码里锁着的内容全是明文。把这次实测拆成三个谁都能上手的鉴别动作，教你分辨真加密和安全剧场。
- [假交易所出金骗局：K 线是真的，余额是假的，按钮只进不出](/zh/articles/fake-crypto-exchange-withdrawal-scam/) (zh) — 老师带赚、账户翻倍、提现冻结、缴税解冻——假交易所的完整套路拆解。教你一招链上自查：充值地址每次都变的平台，百分之百是假的。
- [假招聘骗走 15 亿美元：币圈打工人的简历正在变成黑客的入口](/zh/articles/fake-crypto-job-offer-scams/) (zh) — Bybit 被盗 15 亿美元的起点不是合约漏洞，是一封招聘私信。拆解币圈假招聘的完整套路，附求职者自查清单。
- [币圈假客服拆解：主动找上门的「客服」，百分之百是骗子](/zh/articles/fake-customer-support-scams/) (zh) — FBI 2024 年专项预警过的骗局：冒充交易所员工的电话和私信。假客服漏斗怎么运转、三种结局（钓鱼页、验证签名、远程控制）、链上事后痕迹长什么样，以及一条能过滤全部变种的总规则。
- [闪电贷攻击详解：一笔交易如何盗走数千万美元](/zh/articles/flash-loan-attack/) (zh) — 闪电贷让攻击者无需任何本金就能借到巨额资金发动攻击。本文详解闪电贷攻击的原理、为何 DeF 协议容易受攻击，以及几个经典案例。
- [FMMR 假矿池案：首投 300U 真能提现，151 个钱包被割约 154 万 USDC，授权挂到 2030 年](/zh/articles/fmmr-fake-mining-pool-scam/) (zh) — FMMR 假矿池割了 151 个钱包、约 154 万 USDC，每人签下的 USDC 授权上限 1000 万枚、有效期到 2030 年。原域名 fmmrvip.click 已死，fmmrvip.space 是同一个盘子（同日注册），如今在谷歌搜自己的名字排进首页。排名和 AI 的
- [FomoPeek 恶意 App 详解：打着只读看盘的旗号，直取 iOS 钥匙串里的私钥](/zh/articles/fomopeek-app-malware-explained/) (zh) — FomoPeek 以只读巨鲸追踪工具的身份过审上架苹果商店，1.1 到 1.2 版本却内置 iOS 内核攻击框架，解密钥匙串偷私钥。附我们自己的取证时间线和处置清单。
- [GIWA 假 RPC 骗局完整取证：1331 人、771 ETH、14 小时，用「已验证合约」搭起来的假桥](/zh/articles/giwa-fake-rpc-bridge-scam-explained/) (zh) — 主网没上线的 Upbit L2，被一个假 DYORSWAP 前端 + 假 RPC + 指向真 OptimismPortal2 源码的代理合约收割。逐笔转账、爆发节奏、洗钱链路、团伙图谱，全部一手链上数据。
- [如何识别和防范蜜罐（貔貅）代币](/zh/articles/honeypot-detection/) (zh) — 蜜罐代币（貔貅盘）是什么？如何通过链上数据识别只买不卖的陷阱合约。6 个识别信号 + 实操检测方法 + 防范策略。
- [霍尔木兹海峡的加密「过路费」骗局：假官员、真危机、可追踪的钱](/zh/articles/hormuz-strait-crypto-scam/) (zh) — 航运公司收到自称伊朗官方的消息，承诺缴 BTC 或 USDT 就能安全通过霍尔木兹海峡——这是少见的针对船东和租家而非散户的加密骗局。它为什么能骗到人？因为伊朗真的在收加密通行费，TRM Labs 记录过单次最高 200 万美元的过路费；骗局只是给真实付费通道套了个假钱包。本文拆
- [币被骗了怎么报案：国内报案全流程、交易所冻结邮件模板与 IC3 涉外补充](/zh/articles/how-to-report-crypto-scam/) (zh) — 被骗之后报案是唯一能启动冻结和追缴的开关。本文给出国内报案（110/网安/反诈中心）的完整材料清单和流程、写给境外交易所的英文冻结请求模板、IC3 涉外报案要点，以及报案后到底会发生什么。
- [无限授权（Infinite Approval）风险：如何检查和撤销代币授权](/zh/articles/infinite-approval/) (zh) — 无限授权让智能合约可以无限次转移你的代币，是 DeFi 安全中最容易被忽视的风险。本文详解无限授权的原理、风险以及如何检查和撤销不必要的授权。
- [信息窃取木马详解：一条 cookie 如何绕过你的所有防护盗走加密资产](/zh/articles/infostealer-malware-crypto-attacks/) (zh) — Infostealer 运行不到两分钟就能拖走浏览器 cookie、保存的密码、钱包插件加密库和 Telegram 会话。本文拆解完整盗币链路、2025 年的跨国打击行动，以及真正有效的防御清单。
- [小鹰的加密生意拆解：健身房代币化、NFT 争议和「合规」两个字值多少钱](/zh/articles/khabib-crypto-deals-explained/) (zh) — 「Khabib crypto scam」的搜索量正在暴涨，但比结论更重要的是事实链：从 2023 年 GoMining「算力背书」NFT，到 9 月引发众怒的帕帕哈帽 NFT，再到与 MultiBank 集团在迪拜落地的「全球首个合规代币化体育生态」——30 多家小鹰健身房搬上 
- [教科书级供应链攻击：先秘密收购 Ledger 授权经销商，再静悄悄投毒七个月](/zh/articles/ledger-cryptobilis-supply-chain-hack/) (zh) — CryptoBilis 三月被神秘买家收购、八月股权登记变更、十月用户钱包被集中清空。7200 万至 9000 万美元失窃案背后，攻击者买的不是漏洞，是信任。
- [Ledger 用户集体被盗：我们逐笔追完 10 个盗币地址，真凶在渠道不在固件](/zh/articles/ledger-drain-address-poisoning/) (zh) — 10 月 9 日 Ledger 用户钱包被清空事件：独立链上取证可验证损失约 2700 万美元，受害交易全是普通转账；Ledger 官方回应指向经销商 CryptoBilis 供应链污染——设备被篡改，不是固件被破。
- [植入 Ledger 流入欧洲实体店：两家 MediaMarkt 各一台，天线印着「Eurasian version」](/zh/articles/ledger-mediamarkt-implant-europe/) (zh) — 德国买家在两家不同 MediaMarkt 门店买到的 Ledger Nano X 里都拆出了硬件植入物，Karpeles 判定是早期版本设计，天线标注「Eurasian version」暗示按区域射频分版本。此后 48 小时：MediaMarktSaturn 集团全线下架 Led
- [黑吃黑：任务刷单团伙 60 个 BTC 存进植入 Ledger，17 天后一夜被端](/zh/articles/ledger-task-scammer-loses-60-btc/) (zh) — Chainalysis 披露 Ledger 盗币案最大受害者之一竟是一个任务刷单骗局的操盘手——60 个 BTC 的赃款在三个被植入的硬件钱包里躺了 17 天，10 月 9 日早晨被一笔端走。
- [0 ETH 卖走你的 NFT：Magic Eden 身后的幽灵授权，和一场 570 万美元的白帽搬运](/zh/articles/magic-eden-payment-processor-exploit/) (zh) — 9 月 25 日数百个钱包的 NFT 被 0 成交价转走，源头不是 Magic Eden 现有系统，而是它 2024 年 10 月就弃用的结算合约。市场关了，授权还活着。
- [小狐狸钱包（MetaMask）被黑事件拆解：为什么你的钱包根本没事](/zh/articles/metamask-infrastructure-incident-explained/) (zh) — MetaMask 母公司 9 月 30 日披露基础设施安全事件，约 1.7 万个验证者、52 万枚 ETH 退出质押。链上研究员追踪到被转走的只有 0.36 ETH 奖励。你的钱包为什么安全？关键在以太坊把「验证者密钥」和「提款凭证」拆成了两把钥匙，而 Consensys 从来不
- [NEAR Intents 被盗 387 万美元复盘：坑出在「白条」机制，你的签名再谨慎也防不住](/zh/articles/near-intents-hack-explained/) (zh) — 2026 年 10 月 1 日，NEAR 上的跨链兑换服务 NEAR Intents 被掏走 387 万美元，几乎全是 USDT。不是钓鱼、不是骗签名——bug 出在平台自己的记账层。完整时间线、洗钱路线图、普通用户能学到什么。
- [链上分析入门：如何阅读区块链数据](/zh/articles/onchain-analysis-beginners-guide/) (zh) — 链上分析是什么？如何通过区块链浏览器查看交易、地址和合约数据。面向华语 Web3 新手的完整入门指南。
- [加密货币钓鱼攻击全景：5 种常见手法和防范方法](/zh/articles/phishing-scams-prevention/) (zh) — 钓鱼攻击是加密货币领域最常见的诈骗手段。本文详解假网站钓鱼、恶意授权钓鱼、空投诱饵、域名仿冒和社交工程 5 种手法，以及如何通过链上数据识别和防范。
- [杀猪盘的钱去哪了：拆一条 7300 万美元的洗钱链路，顺便说清报案要交什么](/zh/articles/pig-butchering-crypto-tracing/) (zh) — 平台还登得进去、余额还在涨、提现要交税，这三个信号同时出现时，你的钱早已不在那个「账户」里。本文用美国司法部公开卷宗拆一条 7300 万美元的杀猪盘洗钱链路：壳公司银行账户、巴哈马银行、换成 USDT、归集钱包收了 3.41 亿。看懂钱怎么走，才知道报案时警方真正要看的证据是哪几
- [公钥、私钥、钱包地址的区别：骗子最希望你搞混的三样东西](/zh/articles/public-key-private-key-wallet-address/) (zh) — 钱包里三样东西听起来像一回事，干的活完全不同：助记词和私钥能动钱，公钥只是验证零件，地址是给人看的收款标识。本文讲清从助记词到地址的单向链条、每层泄露的真实代价，以及专门寄生在「搞混」上的骗术：验证钱包话术、签名钓鱼、剪贴板劫持和假转账记录。
- [重入攻击详解：区块链历史上最著名的智能合约漏洞](/zh/articles/reentrancy-attack/) (zh) — 重入攻击是智能合约最经典的漏洞。2016 年 The DAO 事件差点摧毁以太坊。本文用通俗语言详解重入攻击的原理、为什么它至今仍然危险，以及如何防范。
- [拉地毯（Rug Pull）详解：三种手法和链上预警信号](/zh/articles/rug-pull/) (zh) — 拉地毯是加密货币最常见的项目方诈骗方式。本文详解流动性撤走型、隐藏铸币型和限制卖出型三种 Rug Pull 的运作原理，以及如何通过链上数据在投资前识别风险。
- [三明治攻击：MEV 机器人如何夹你](/zh/articles/sandwich-attack/) (zh) — 三明治攻击是 DEX 上最常见的 MEV 剥削方式。MEV 机器人监控你的待处理交易，抢跑买入、你买入后再卖出，从中赚取差价。本文详解攻击原理和如何用滑点设置保护自己。
- [为什么助记词绝对不能在线生成](/zh/articles/seed-phrase-generator-risk/) (zh) — 搜「助记词生成器」本身就踩进了雷区：正规钱包都是本机自己生成助记词，硬件钱包更是在安全芯片里离线生成。在线生成器要么记录你拿到的词组，要么从预制池里发词；让 ChatGPT 帮你选词同样会被机器人扫走——Coinspect 的「Ill Bloom」调查给出了链上证据。本文讲清生成
- [助记词怎么存才安全：钢板、纸张、份数与继承](/zh/articles/seed-phrase-storage/) (zh) — 助记词的备份要扛住的不是黑客，是你控制不了的事：火、水、贼、来过你家的每一个人，还有你自己的记性。本文讲清楚大多数人做错的基础款（纸面备份的正确姿势）、金属备份到底防什么、哪些做法等于把私钥送出去（拍照、网盘、密码管理器、聊天记录）、备份留几份放在哪，以及比小偷更狠的继承问题。与
- [签名诈骗：一个签名如何清空你的钱包](/zh/articles/signature-scam/) (zh) — 签名诈骗是加密货币领域最高危的攻击之一。用户被诱导签署看似无害的链下签名消息，实际上这些签名赋予了攻击者转移资产的全部权限。本文详解 5 种签名诈骗变体和防范方法。
- [币圈社交诈骗全链路：X 假招募、TG 杀猪盘、仿冒邮件，套路逐段拆解](/zh/articles/social-media-crypto-scam-playbook/) (zh) — X 上假版主招募骗你装 Windows 木马，Telegram 上慢养话术推貔貅盘，邮件仿冒域名骗签名。三条渠道一套打法，本文逐段拆解每个环节的识别点。
- [加密货币被盗后的 24 小时：从止损到报案的行动手册](/zh/articles/stolen-crypto-first-24-hours/) (zh) — 钱包被盗或交易所账户被清空后，头 24 小时的每一个动作都在决定损失会停在多大。本文按入侵类型分诊（授权钓鱼、私钥泄露、设备木马、交易所被盗），给出小时级的止损顺序、证据清单、报案和冻结请求的完整流程。
- [赃款的最后一跳：进了隐私池之后，链上追踪还剩什么](/zh/articles/stolen-crypto-privacy-pools/) (zh) — 被盗的币走进混币器或 Zcash 隐私池之后，追踪是不是就结束了？拆解隐私池的可见性边界、进池出池口还留着什么证据，以及受害者此时真正该做的事。
- [链上「救援」机器人把 Cetus 黑客压了 17 个月的跨链桥提款，连夜打给了黑客本人](/zh/articles/sui-bridge-claim-bot-cetus-hacker/) (zh) — 一个专门帮人认领「卡在桥上的资产」的机器人，把 Cetus 黑客 2025 年留下的 8 笔旧提款打包执行，39.2 万美元进了黑客钱包。我们链上复核了全部三笔交易，并核实 Tether 已拉黑该地址。
- [TG 陌生人喊我买「今晚 19 点上线」的币，我把他的话术原样念了回去](/zh/articles/telegram-crypto-pitch-script/) (zh) — 一段真实的 TG 搭话实录：从「朋友你也在玩合约吗」到「今晚 19 点 Sushi 上线」，逐句拆解这套推销剧本的六个节拍——以及把同款话术念回给骗子听时，他秒懂的反应。
- [购买代币前的安全检查清单：6 步排除 90% 的诈骗](/zh/articles/token-safety-checklist/) (zh) — 购买任何代币前必须做的 6 项链上安全检查：合约源码验证、流动性锁定、持有者分布、铸币权限、买卖税、交易历史。附免费工具。
- [追踪被盗加密货币：链上取证全流程](/zh/articles/track-stolen-crypto/) (zh) — 加密货币被盗后怎么办？本文详解链上资金追踪全流程——从识别攻击手法、追踪资金流向、标记混币器和跨链桥，到报警和交易所冻结。
- [如何追踪巨鲸钱包：链上资金流向分析方法](/zh/articles/track-whale-wallets/) (zh) — 什么是巨鲸？如何识别和追踪链上大额持有者（巨鲸）的钱包。标签识别、聚类分析、资金流向追踪的实操方法。
- [伪造凭证如何搬走真比特币：Liquid 与 Symbiosis 一周两案拆解](/zh/articles/unbacked-mint-attacks-explained/) (zh) — 2026 年 9 月上旬，Liquid Network 被提走 3.2 亿美元 BTC，五天后 Symbiosis 桥被铸出海量无抵押 syBTC。两起案件的攻击手法相同：不钓鱼、不偷私钥，直接伪造存款凭证骗过协议的验证逻辑。本文拆解这一攻击模式。
- [钱包窃取器（Wallet Drainer）：原理、识别和防范](/zh/articles/wallet-drainer/) (zh) — 钱包窃取器是 2024 年以来加密货币最大的威胁之一。本文详解 Wallet Drainer 的技术原理、常见分发渠道、识别方法和防范策略。
- [ZEC 冷钱包怎么存？Zcash 硬件钱包与离线存储指南（2026）](/zh/articles/zcash-cold-storage-guide/) (zh) — ZEC 冲进市值前十，新手第一课是把币从交易所提出来。但 Zcash 有两种地址：T 地址任何硬件钱包都能存，z 地址 Trezor 官方明确不支持。哪种设备能用、三套可行方案、以及正在盯着新 ZEC 持有者的骗局。
- [Zcash 白名单季：一个收走你的币，一个收走你的身份图谱](/zh/articles/zcash-whitelist-what-you-hand-over/) (zh) — ZecBit 收 8 刀卖主网上根本不存在的资产，最后留下一条带 txid 的投诉；zaddr 免费申请什么都不要，却攒下一张 X 身份对应屏蔽地址的对照表。两种白名单各拿走了什么。
- [zkSNARKs 一场盲拍收了 12000 ZEC，赢家拿到的是什么](/zh/articles/zksnarks-auction-what-bidders-bought/) (zh) — Zcash 生态最火的 NFT 拍卖：16971 个出价、1.5 ZEC 统一结算、二级最低挂 1.98 ZEC。但 ZSA 资产标准没上主网，所有权存在数据库里，行情数据按设计无法审计。这篇讲清楚这场炒作里买家实际拿到的是什么。

## page (4)

- [Onchain Anti-Scam Yellow Paper · 链上防骗黄皮书](/yellowpaper/) — Bilingual (en/zh) systematic manual on onchain fraud: five-class scam taxonomy by mechanism, onchain forensics primer, layered defense check
- [Onchain Security MBTI · 链上安全人格测试](/security-mbti/) — Bilingual 16-question scenario quiz mapping crypto security habits to a 16-type personality profile with a security index and a sharp verdic
- [Airdrop Safety Hub](/airdrop-safety/) — Verified guide series on airdrop scams and verification: how fake airdrops drain wallets, how to verify a claim, and checklists before conne
- [The Author's Letter · 作者的话](/letter/) — Why Onchain Diary exists, written by the author: an anti-fraud research background turned into a free bilingual education archive.