TOP NFT GAMES is dedicated to spreading the word about exciting NFT projects!
ALERT !! New section NFT Free Mint & Airdrops NFT Free Mint
Follow me on Medium!
What Are the Main Security Risks of Crypto?
Of course, we all know that crypto is volatile (sometimes a bit too volatile on the downside).
But what are the main security risks? In other words, how could your crypto get stolen or hacked?
Getting Scammed
Scams are ubiquitous and popular in crypto. There are several scams like Telegram scams, giveaway scams, Uniswap scams, and more. There’s also pump-and-dump schemes and shitcoins, although those do not strictly count as scams (but you can still lose money).
Keeping your Crypto on Centralized Exchanges
Centralized exchanges are great and sometimes they make sense for longer-term crypto storage. But you can also lose your crypto if they get hacked. Thus, most crypto security experts recommend that you keep all funds that you plan to HODL in self-custody.
Losing Your Private Keys or Seed Phrase
The old favorite. You can either be plain forgetful and not careful enough or you can lose your seed phrase in a phishing attack. Even your phone could guess your seed phrase, so be extra careful with it.
Malware
Malware as a security risk relates to losing your seed phrase, since the phrase could get stolen without you ever noticing it before it’s too late. If you store your seed phrase in the cloud or somewhere where it’s especially exposed to attackers, you might regret it. Best practice says to use a hardware wallet.
Fake Apps or Spoofing
Fake crypto apps or websites that pretend to be legitimate, real crypto applications are a type of phishing attack that can get access to your private keys and drain your wallet of funds. It’s always important to double check the URL you are accessing and make sure that it matches that of the real website.
Protocol Hacks
DeFi protocols are liable to hacks, particularly if they have not been around for a long time and have not passed several audits. As we’ve seen in the past year, DeFi bridges are a favorite target for hacks.
Sending Crypto to the Wrong Address
A transaction sent in a rush, a wrongly-copied address and your crypto ends up on a network it was never supposed to go to. It’s an annoying and entirely avoidable way of losing crypto, so we will cover how to not send it to the wrong address (and if you can recover it).
Secure Internet Connection
A public internet connection makes it easier for any potential attacker to access your crypto. However, by avoiding public WiFi and using a virtual private network (VPN), crypto holders can further prevent online attacks. A VPN hides your IP address and location to enable users to browse privately. It achieves this by routing your internet connection through different servers to make it almost impossible to detect your actual location.
How to Protect Your Private Key and Seed Phrase
There are three mains aspects to safe seed phrase storage:
- Never sharing it with anyone;
- Never storing it in the cloud (or anywhere on the computer);
- Backing it up and storing it offline.
First, you should not share your seed phrase with anyone. You may make an exception with trusted parties like family members or close friends, as long as you can be sure you want these people to know your seed phrase just in case. But do not, under any circumstances, share it with strangers online or offline.
Second, when you store your seed phrase, do so preferably offline. There are ways to engrave seed phrases if you do not want to use an old-fashioned pen and paper. You can also use a computer to store your seed phrase; however, it should be a separate computer from the one you use for transactions, and it should not be used for accessing the internet.
Exchange Hacks — Crypto exchanges are one of the biggest targets for hackers, as they can often gain access to funds from multiple accounts with a single breach. Even the most reputable exchanges are susceptible to malicious attacks. However, some exchanges will cover up to a certain amount of funds lost to theft.
Rug Pull — Rug pulls are one of the most prominent variations of an exit scam in decentralized finance (DeFi). It involves the development of a fraudulent token and a “pump and dump” from the development team. Once the price of the asset is high, the team will sell, extracting as much value as possible before the price of the token drops to zero.
How to Store Your Crypto Safely
Next, you want to make sure that your crypto is safe wherever you keep it.
First, you should use different wallets for different purposes. For example, you may store some crypto on a centralized exchange — but that should not usually be the crypto you intend to hold on to for a long time. The rules of thumb should be:
- Use a hardware wallet for long-term investments;
- Use a software wallet for smaller investments and interactions with protocols;
- Use a centralized exchange if you trade, swap or buy crypto.
Second, you should be careful with the protocols you interact with. You should periodically check which protocols have access to your wallet.
Finally, be careful with the transactions you sign. Remember that a fake transaction can drain your wallet, so only sign the transactions you are certain to be legitimate.
How to Secure Your Devices and Internet Connection
Another important aspect of crypto safety is securing the devices you use for access andan internet connection. Ideally, you have a dedicated device only for crypto transactions. You should not sign smart contract transactions from the same computer you access certain websites with.
Also using two-factor authentication is mandatory. It’s best practice to use a dedicated 2FA app like Google Authenticator instead of 2FA with SMS due to the prevalence of SIM-swapping attacks. Furthermore, your password should be at least 12 characters long.
Finally, consider using a VPN to cover your traces. A malicious party will find it harder to track you if you do not use your real IP address.
First, you should always double and triple-check the addresses and networks you send crypto to. Also double-check the links you click on, particularly when it comes to decentralized applications. You may also want to do test transfers with small amounts first, in case you are unsure you are interacting with a legit protocol.
Second, DMs on Telegram, Twitter or Discord are almost always spam or scams. Do not answer them and do not ever click on a link, unless you know the sender.
How to Prevent Crypto From Being Sent to the Wrong Address
It can happen to the best of us: you need to send some cryptocurrency, but you copy-paste the wrong address or click on the wrong network. Or even worse: you happen to be a victim of a phishing attack and your funds get siphoned off.
Here is how to prevent sending crypto to the wrong address:
- Copy and paste the recipient address or use a QR code.
Always double-check. You can check the first few and final few characters of the address to make sure it’s correct. - If you are receiving crypto, you may want to use a domain like ENS to make it easier for people to send you crypto. Much easier to send crypto to moonboi.eth than to a long 32-character address.
- Double-check the network you are sending to. If you are using a software wallet, make sure you are on the correct network. If you are withdrawing from a centralized exchange, make sure to check that you are withdrawing to the right network.
TOP NFT GAMES is dedicated to spreading the word about exciting NFT projects!
ALERT !! New section NFT Free Mint & Airdrops NFT Free Mint
Follow me on Medium!
