Home/Web3 safety: approvals, phishing and contract risks
THE BLOCKVAR JOURNAL

Web3 safety: approvals, phishing and contract risks

Learn to review wallet approvals, spot phishing and fake airdrops, protect recovery phrases, and understand signatures and on-chain risks.

Wallet Hacked? What to Do First, Step by Step

After a wallet hack, find the cause first: a leaked seed phrase means a new wallet; abused approvals mean revoking. The steps, per MetaMask and Revoke.cash.

What Is Address Poisoning? Zero-Value Transfer Scams and How to Avoid Them

Address poisoning slips a look-alike address into your history with a zero-value transfer. How it works and how to avoid it, per MetaMask and Etherscan.

Is Abstract Global Wallet Safe? Where the Keys of an Email-Login Wallet Live

Abstract Global Wallet lets you sign in with email, a social account or a passkey. From the official architecture docs: how the smart-contract wallet works, how its key is split into three shards, what recovery depends on, and the risks of session keys and cross-chain transfers.

Why an address must be checked with its network

Why does one wallet address show different balances on different networks? Check transfer networks, receiving addresses and token contracts.

How to Spot Fake Airdrop Claim Sites Before You Connect

How to spot fake airdrop claim sites: the no-token rule, domain checks, urgency traps and payment demands, plus a Revoke.cash approval audit.

What Is a Crypto Airdrop, and How Do You Claim One Safely?

What is a crypto airdrop, and why are many claim pages scams? How real airdrops work, common fake-claim tricks, and a checklist before you connect a wallet.

What Is a Hardware Wallet, and When Do You Need One?

What is a hardware wallet? Learn how offline private keys and in-device signing work, when it is worth buying, and the purchase and blind-signing risks.

What Is a Honeypot Token, and How Do You Spot One Before Buying?

What is a honeypot token? Learn why some tokens can be bought but never sold, the warning signs to check before buying, and what to do if you are stuck.

What Is a Token Approval, and How Do You Check and Revoke It?

What is a token approval? How approvals differ from transfers, why unlimited allowances are risky, and how to check and revoke them with Revoke.cash.

What Is a Wallet Drainer, and How Can Beginners Avoid It?

A wallet drainer is a phishing kit that tricks you into signing an approval or transfer, usually hidden behind fake airdrops, fake mints and impersonated links. How it works, what phishing pages look like, what to read before signing, and what to do if you already confirmed.

Does Disconnecting a Wallet Remove Token Approvals?

No. Disconnecting only ends a site's connection to your wallet; onchain token approvals stay in force. The difference, which approvals to revoke, how to check them on Revoke.cash or Etherscan, and what revoking costs.

What Does “Sign Message” Mean in a Crypto Wallet?

Wallet signatures cost no gas and do not go onchain right away, but that does not make them safe. Login signatures, structured signatures and transactions compared, which signatures can hand over your assets, what to read in the prompt, and when to reject.