Thread by @tropoFarmer

Proper wallet segregation can significantly mitigate the risk of your precious NFTs and crypto being stolen. Here's how I recently reorganized my wallets, utilizing ENS for easier management.
🧵👇🧵👇🧵👇🧵👇🧵👇🧵👇🧵👇

First, GET A HARDWARE WALLET. If you don't have a hardware wallet, stop reading this, buy one, and FUCKING USE IT. Read medium.com/@ppman/a-quick… from @_PPMan_ to learn more.

That said, hardware doesn't mitigate all risk--not even close. Having separate wallets will help, though.

To create a separate "wallet" (which is just a separate address), click "Connect Hardware Wallet" from the MetaMask dropdown, choose your device, and select any address. Congrats, you now have an isolated wallet!

Why is this important? A compromised wallet cannot interact with another. If you sign a malicious transaction, the contents of the signing wallet could be stolen. Fortunately, the contents of your other wallets are safe and sound. Make purposeful wallets and separate your assets.

Here is how I've organized my wallets, taking into consideration purpose, convenience, and asset value. If this feels like overkill for you then scale back, but still apply the principals. Security doesn't work if you get lazy and ignore it. 👇

#1 General Purpose: Holds NFTs that I may eventually vault or sell. (yourENS.eth)
#2 Mint: Your degen wallet, from which you mint/interact with untrusted contracts. (mint.yourENS.eth)
#3 Marketplace: Your buying/selling wallet, only interacts w/OS, etc. (marketplace.yourENS.eth)

#4 Vault: Your grails, cold wallet. Safe transfers ONLY. No listings, no unknown contracts. (vault.yourENS.eth)
#5 Bank Vault: Only your ERC-20 tokens. (vault-bank.yourENS.eth)
#6 Mobile: The ONLY wallet I have without hardware, for time-sensitive mints. (hazard.yourENS.eth)

#X Finally, a separate vault wallet for each high-value asset collection. There's no good reason why your ape or punk shouldn't be segregated. (e.g. vault-bayc.yourENS.eth)

For each wallet I've created ENS subdomains. This is completely optional, but it costs literally $1 and adds convenience. And we know that more convenient = more likely to be used. Send each address $1 to verify. This'll also tip you off that this address contains tokens.

Hope this helps keep your precious jpegs a little bit safer. Please check out these additional resources:

medium.com/@Feld4014/mana… @Feld4014

https://twitter.com/4lteredBeast/status/1529362582767026176?t=BbDuXbkI7ysAcegzNHTNPQ&s=19

@4lteredBeast

https://twitter.com/richerd/status/1403728108084023296

@richerd
medium.com/@ppman/a-quick… @_PPMan_

🙏🍌

Pls share if you found this useful. I welcome any feedback, as I am certainly not a cyber security expert. This is merely how I've applied techniques and principles that I've read. Now, @BoringSecDAO? THOSE are experts, follow them.

https://twitter.com/tropoFarmer/status/1547330303642968064?t=1G9hsk9CQZ2ovt5Rlwt3cg&s=19

Also if any of you fuckers are snooping, I literally just set this up and am in the process of safely transferring tokens.

One more thing: if you're using ENS, REMEMBER TO RENEW IT. The ENS dApp has a reminder function and there's a grace period, but if someone snags yours it could be a problem.