How to protect your digital assets from hackers:
Step-by-step guide: 👇
Step-by-step guide: 👇
It was a usual morning on Dec 2, 2021...
That day, thousands of folks found their wallets drained off their precious crypto.
Someone had stolen $120M by hacking a DeFi website.
After some tracking, PeckShield Inc found the stolen booty:
That day, thousands of folks found their wallets drained off their precious crypto.
Someone had stolen $120M by hacking a DeFi website.
After some tracking, PeckShield Inc found the stolen booty:
https://twitter.com/peckshield/status/1466356911842856967?s=20
The question is:
How did the hackers manage to steal all of this?
Did someone leak a list of private keys?
Was it due to some accident by an unassuming crypto enthusiast?
The answer is:
None of the above.
Instead, what happened was a totally wicked thing...
How did the hackers manage to steal all of this?
Did someone leak a list of private keys?
Was it due to some accident by an unassuming crypto enthusiast?
The answer is:
None of the above.
Instead, what happened was a totally wicked thing...
A script was inserted in the UI of the DeFi website.
It tracked all the transactions happening on the protocol.
Shortly after, it inserted a request to transfer the victims' tokens to the hacker's address.
You know what's super scary about this?
It tracked all the transactions happening on the protocol.
Shortly after, it inserted a request to transfer the victims' tokens to the hacker's address.
You know what's super scary about this?
You could use the safest wallet out there and still get robbed in a sec.
You see:
The moment you used your wallet on the malicious website..
The script was tracking everything and inserting a transfer request.
Seconds after..
Poof!
All was gone.
So, wanna avoid this?
You see:
The moment you used your wallet on the malicious website..
The script was tracking everything and inserting a transfer request.
Seconds after..
Poof!
All was gone.
So, wanna avoid this?
Safety Measure #1:
Before you connect your wallet to your favorite DeFi protocol, ensure the website address is right.
Often, hackers create an identical version of a DeFi website.
Shortly after, this happens:
Before you connect your wallet to your favorite DeFi protocol, ensure the website address is right.
Often, hackers create an identical version of a DeFi website.
Shortly after, this happens:
A tiny tweak in the URL might take you to its sinister clone.
As soon as you connect your wallet…
Your crypto disappears in thin air.
How do you check Stader?
Double-check if the link is the same as our official channels (Twitter, Telegram, etc).
In fact:
As soon as you connect your wallet…
Your crypto disappears in thin air.
How do you check Stader?
Double-check if the link is the same as our official channels (Twitter, Telegram, etc).
In fact:
This morning we issued a scam alert:
A group of scammers just created a FAKE website that emulates our own.
On that website, fake $SD tokens are being offered for sale.
Please, beware of this scam.
The fake website looks like this:
A group of scammers just created a FAKE website that emulates our own.
On that website, fake $SD tokens are being offered for sale.
Please, beware of this scam.
The fake website looks like this:
Safety Measure #2:
Avoid dealing with custodial wallets and websites.
If you do, you instantly lose control over your assets.
An extra transfer fee is always worth the safety.
By the way, Stader is a non-custodial platform.
Next:
Avoid dealing with custodial wallets and websites.
If you do, you instantly lose control over your assets.
An extra transfer fee is always worth the safety.
By the way, Stader is a non-custodial platform.
Next:
Safety measure #3:
Never share your seed phrase or private key with anybody.
If someone asked you about it...
It's a scam!
At Stader, our support team will never DM you over Telegram, Discord or Twitter...
We will never ask you for keys.
Finally, pro-tip:
Never share your seed phrase or private key with anybody.
If someone asked you about it...
It's a scam!
At Stader, our support team will never DM you over Telegram, Discord or Twitter...
We will never ask you for keys.
Finally, pro-tip:
Safety Measure #4:
Many #lunatics prefer to use the following extra tip to connect to @terra_money's web wallet:
Instead of using the browser extension...
Many folks actually scan the QR code using the mobile phone.
How does this protect your tokens?
Many #lunatics prefer to use the following extra tip to connect to @terra_money's web wallet:
Instead of using the browser extension...
Many folks actually scan the QR code using the mobile phone.
How does this protect your tokens?
See, it's much harder for malware to hack Android and iOS devices.
On top of that:
Connecting to the web wallet using a QR code creates an air gap.
No direct connection in between.
Hence, more safety.
Remember:
On top of that:
Connecting to the web wallet using a QR code creates an air gap.
No direct connection in between.
Hence, more safety.
Remember:
Between 2016 and 2020, hackers have seized over $2B worth of crypto.
See this table?
It’s no joke at all:
See this table?
It’s no joke at all:
2021 hasn't been much different.
So if you haven't taken these safety measures yet, it’s time to do it.
Also, remember:
Never use websites without audited contracts.
At Stader, we’ve been fully audited:
blog.staderlabs.com/stader-update-…
So if you haven't taken these safety measures yet, it’s time to do it.
Also, remember:
Never use websites without audited contracts.
At Stader, we’ve been fully audited:
blog.staderlabs.com/stader-update-…
We can proudly say we’ve taken all the measures to protect you.
You are still on-time to farm our $SD tokens.
With 5+ million TVL, the price is still $0.73.
So catch them before they're gone on the official website:
Stake now: terra.staderlabs.com/pools
You are still on-time to farm our $SD tokens.
With 5+ million TVL, the price is still $0.73.
So catch them before they're gone on the official website:
Stake now: terra.staderlabs.com/pools
• • •
Missing some Tweet in this thread? You can try to
force a refresh
