Topic: Careful where you connect your wallet - page 2. (Read 686 times)

Let me quickly share a related experience to this topic I had a few days ago. It was a random female user on telegram (that was the claim but I knew it was a male at the other end) who tried talking me into a passive mining engagement. I blatantly told him it was a set up but he wouldn't give up. He continued talking to me until I feigned interest and obliged him. The mining app was a Tronlink wallet for me to download on playstore since I use an Android phone. I already had one, so I opened a new account on the one I already had and told him I was set. The next thing was a mining link he sent. It was a suspicious one and then I reminded him of what I thought about what he was trying to lead me into.

I'm sharing this here so that newbies will understand that these scams come in different formats. See my chat with the said user. Be wise, newbies. No free money anywhere online. I had to blank out part of the link so users won't be tempted to copy it out. Take a look at the url, there's nothing related to Tronlink in there. I'm cocksure if I had clicked on it it would've directed me to a scam. Besides, read carefully how he denied knowing anything called malware. In this time and age, does anyone online not know what is malware let alone someone who claims he has a mining gig. It's a red flag when people deny knowing a popular thing you accuse them of.

Yeah, most of it were just worthless and I even recall one airdrop team trying to even phish my MyEtherWallet back in 2018. I used the unsecured method of storing coins which where they provided the wallet file and gave me what I needed such as the phrase/seeds and the private key.
These airdrop scums are just looking for the obvious free advertisement and it is the reason why I started thinking that they are not worth my attention now these days.

There are to many Phishing sites and apps that sets traps for stealing our money , in world of crypto we are the owner of our funds and for any mistake only we are responsible for loose of funds , and we know that in crypto there is no any rule of reversing transaction ,
So my advice is keep you real wallet on which our life saving and big investment present keep them offline and use a second wallet for active small amounts and if you are Airdrop hunter or participate in bounties then you are on high risk separate your primary wallet .

If someone is not skilled enough to avoid getting a virus on their computer or connecting to a malicious site then it is unlikely they will be able to use a faster bot than the one implemented by a hacker trying to steal their coins, in that case it would probably better for those people to just wipe their computer clean and make a fresh install, get a wallet from the official website and transfer whatever coins they have left from their old wallet to a new one.

Here, perhaps, the reason is that when you connected to the site, you provided excessive permission to use your funds. In this case, it was enough to check the list of connected sites in the MetaMask settings and disable suspicious sites.

Yes.  I have also experienced something similar to what you are experiencing.  Indeed, I admit, this instantly steals the coins we have.  so I immediately created a special wallet that I don't use carelessly (connecting to a web that we don't know)

Metamask is open source, but Trust Wallet is not. Metamask wallet is way more encouraged to be used in many degrees.

Talking about digital security, in this case, the wallet itself has lesser significance compared to the user's digital security practice. Both wallets without a doubt is widely used and for sure many hackers keeping an eye on them, but, a more approachable weak point is the user itself who doesn't have thorough digital security knowledge to store their own cryptocurrencies safely.

There are some airdrops that require us to connect the wallet.
And if that happens and becomes one of the requirements for getting tokens or coins, I will think several times about doing it.
- If the project is new and still in doubt, it's better to leave it.
- If we have doubts about the project because many say it is good but some say it is doubtful, then leave it.
- If the project is really good and the team is proven to be real, then we can follow these requirements. However, don't use our main wallet. It would be better if we use a new wallet to connect it. If not allowed, then leave.

This is a matter of assets and money, so we must be more careful to avoid things that we don't want or expect.

^This is fine if you don't save your private key on the computer or a device that you frequently use.
This is what I usually do when an exchange wants to connect your wallet to them, just create a new wallet that is intended for that exchange and transfer your token and send a little amount of ETH for the gas fee, connect your new wallet to them and your main wallet is safe from linking to them. Though this process will probably have an additional cost for us at least we are safe from hacking. However, connecting is not a problem, but if it asking for your private key, that is a big problem.

What are you trying to say? I'm using trustwallet and the experience the OP share had happened to me early this year. I can confidently tell you that my phrases are highly secured but I don't know how this things are happening. When I checked the transaction time, both my phone and my pc were in my possession. Was just wondering and no option than to transfer out the rest of my assets. Mind you, I don't actually subscribe to ideas of connecting wallet to strange sites.

We have to protect the wallet that is connected to a suspicious project, so we have to disconnect the wallet immediately after finishing using the features of that project, but it is recommended that we use an alternative wallet to connect with any project because the access to the wallet connection will provide opportunities for hackers to find bugs so that access our wallet and steal all the assets we have in that wallet

I've tried using Metamask before and found out that as you can easily link and connect it to other websites, the easier you'll also get hacked by phishing sites so you must think before you click and be observant as you will be targeted by scammers and hackers so as much as possible, store your funds in a more secured personal wallet. It's better to be skeptical than to lose all your funds.

If you don't remember where you connected your wallet, then you just need to check it and revoke the dapps website that was connected. Use a website like unrekt.net to do a revoke, the website will provide information about where you have been connected and at the same time revoke the address so that it doesn't become a place for scammers to exploit your wallet. And to prevent unwanted things from happening, before connecting with any dapps, it's a good idea to check whether the dapps are safe or not by looking at other user information.

These are unwritten rules. It is money we are talking about, we have to take extra cautions of risks involved regarding important informations and that includes website that you access on a daily basis which could endanger your assets or wallet itself.
Problem is; if your infos leaked, it would be hard to retrieved especially if your assets were already stolen. Reporting it would cost you time proving that ut is really stolen. Prevention is always better than cure. Some are even double checking the spelling of the website they are accessing 'coz there are fake platforms mispelling the known one by single letter only. Once you've input your infos, everything's done for.

Many cases happen that we put blame because our wallet is connected to many websites which is also possible. Hackers can simply wipe out your funds once they got access to your PC especially if you are using an online wallet. We should have to avoid this kind of doing. Extra precaution is really needed to keep safe of our funds and we don't let these scammers take our hard-earned money. Though we know it was a trusted website still we can't assure that we are safe, better if we have to hesitate about the possible things to happen that being sorry later.

Some airdrop project eligible for old wallet or have reach many transaction and I don't think used with new wallet will eligible earn airdrop coins, I have one trick after connecting with new site of airdrop few hours later revoke with all connecting seems not trusted. Usually on BSC coins receiving have warning with scam coins but I understand all if problem with dusting attack token.

I can protect my wallet from dusting attack and I know which one scam coin arriving in my wallet but I don't sure when connecting with dapp exchange actually with new dapp airdrop keep my wallet secure or not, every day active joined with many kinds of airdrop and I don't remember about which one airdrop site trusted or scam because looking on website secure and not the website of airdrop looks like nothing suspicious.

I had also connected my Trustwallet to many websites, although that was Trusted. And we can reduce this risk, through revoke cash website, which means that we can reduce the risk of being connected to other websites. One of my friend's PC was hacked and all of his funds were stolen, so revoke cash website will be a better option after all these.

I think the most dangerous part of connecting your metamsk wallet is to a new domain which is registered most recently and is not listed as trustworthy by ratings sites. One such experience is with the NFT website. The trend did not followed because it might have been worthless attempts by hackers to steal but they used to connect the wallet on fake NFT selling sites and promising the ownership transfer. However, that was just worst way to lure people into the trap and it was actually taking the coins from you and never ever talked about the trade as well. It's funny that hackers could go to any extent to get some extra bucks.

However, the point here is there could be millions of ways to loot us, but one should have their personal discipline as to where to connect your wallet and where to ask legitimacy questions before proceeding.

It is not about being scared, it is about not even wanting them. Just because it would be free, I wouldn't want 100 zimbabwe dollars neither, because we all know it worths nothing, so why spend time on it. Most of the airdrops require you to follow them on twitter, join their telegram group, retweet their tweet, and tag 3 friends.

This is the most common thin they ask for, and I believe 90% of the ones we have right now worth nothing at all, so why would I do those things for free? They believe that they can grow it and make it bigger thanks to your help, but I know that it won't and that means I worked for free and that makes no sense to me at all.

It is very important to check dApps websites before you connect - such as airdrop websites, etc. In recent times, performing some airdrops now requires connecting ones wallet to the project website, but unfortunately, some of these websites are malicious and are designed to infect/drain the participants wallet, it is safer not to even interact/approve a transaction with such websites. IMO, I prefer to perform airdrops that does not require wallet connection, moreover, you save yourself some gas fees. Sometime last year, some of us witnessed something strange in the crypto space - where fake tokens were sent out to wallets. Till date, I still receive fake tokens in my wallet. Some of the tokens will have a website in the token name suggesting that you visit the website. Interacting with such websites may be dangerous. One important thing is that such tokens are never found is CEX, also some are fake versions of already existing tokens.

Summary: I prefer to perform airdrops that does not require wallet connection. Secondly, cross check the original contract address of the tokens you are dealing with in airdrops, etc. in a place like CMC if the token(s) are already listed. Take extra measures to insure you are connecting to a good website if you must interact with such website.