What to know first
Risk signals can prompt extra review, but no alert system catches every threat. Learn what to inspect when a request looks unfamiliar.
Never share private keys or recovery phrases. This page provides general guidance; verify capabilities in the actual software you use.
A practical review sequence
Pause before approving unfamiliar permissions
Pause and confirm this point independently. Keep a record of relevant non-secret settings and stop whenever the source or request cannot be verified.
Verify the dApp origin and connected network
Do not treat a warning as a routine click-through. Understand the effect of the operation before continuing.
Review the contract and recipient details
Review network context and avoid sharing sensitive credentials even with someone claiming to provide support.
Stop and independently verify anything unexpected
Finish with a final check and keep the recovery plan available offline.
Common mistakes and next steps
Avoid deciding based only on token names, page appearance or links received in messages. When in doubt, stop and verify with a known trusted source.