before you cast off
The five-minute seaworthiness check before you connect a wallet or sign a transaction. This is the human half of scam safety: Wrecks maps the exploits that already happened, the Cast-Off Check keeps you from being the next one. Part of Safe Passage.
No live numbers here, on purpose. This is durable wallet-security practice, the checklist a careful sailor runs before every voyage. General best practice, not advice for your specific situation.
One wallet is a single point of failure. Split the fleet so one bad signature sinks only one boat.
Long-term holdings, kept offline on a hardware device.
The seed phrase never touches an internet-connected device.
A browser or mobile wallet for small, active balances.
Only ever hold what you could lose to a single bad signature.
A fresh, empty wallet for mints, claims, and unaudited sites.
It holds nothing you would miss. Retire it after the trip.
An isolated wallet for farming and claims.
Never link it to your vault on-chain.
A throwaway for trying a new protocol with a few dollars first.
Prove the exit works before you commit size.
The live exploit ledger is on Wrecks. These are the consumer-side traps it does not cover: how they look, and the safe move.
Tell A slick site says connect and sign to claim or mint.
Safe move Use a burner, and read the signature before you approve it.
Tell A signature grants spending on your tokens instead of making a payment.
Safe move Reject blind approvals. Revoke anything you no longer use.
Tell An unsolicited token appears and tells you to visit a site.
Safe move Ignore it. Interacting is how it drains you.
Tell A DM, a 'support' agent, or a presale with urgency and a first move.
Safe move Assume a first-contact DM is a scam. Verify on the official channel.
Tell A look-alike address appears in your transaction history.
Safe move Copy from the source and verify the first and last characters.
Editorial guidance drawn from widely accepted wallet-security practice. It is general education, not security or financial advice for your specific situation, and tool names are examples, not endorsements. When in doubt, verify against a project's official documentation. See Wrecks for the live exploit ledger and Safe Passage for the rest of the lane.