Cryptocurrency wallet drain, endagaano entegefu embi, n'okukkaanya ebigambo by'ensigo¶

Okuzuula nti waleti yo eya cryptocurrency eyeekuuma (nga MetaMask, Rabby, Phantom, Trust Wallet, Coinbase Wallet, oba waleti ya hardware nga Ledger oba Trezor) ekola nnyo okuggyibwamu obubonero ne NFTs, mbeera ya mangu mu by’ensimbi ya digito ey’okubiri, ey’okubiri. Olw’okuba enkolagana ya blockchain ey’olukale ku Ethereum, Bitcoin, Solana, Arbitrum, Base, Polygon, ne BNB Chain tesobola kukyusibwa mu ngeri ya cryptographically oluvannyuma lw’okukakasibwa mu block, obusobozi bwo okutereka eby’obugagga byonna ebisigaddewo businziira ddala ku by’okola mu ddakiika ttaano ezisooka.

Buli cryptocurrency wallet drain egwa mu kimu ku biti bibiri eby’enjawulo eby’ekikugu: oba wassa omukono ku malicious smart contract approval oba Permit2 signature ku mukutu gwa phishing (ekisobozesa omulumbaganyi okusika obubonero obw’enjawulo okuva ku ndagiriro yo nga tolina ekigambo kyo eky’ensigo), OBA 12-to-24-word secret recovery seed phrase yo / private key yennyini yali mu kabi (nga eyitira ku mukutu gwa waleti ogw’ekicupuli, clipboard malware, cloud backup hack, oba infostealer virus). Okuzuula obulumbaganyi ki ku bubiri obugenda mu maaso, okukola waleti y’okununula ennyonjo erimu ebituli mu mpewo ku kyuma ekitaliiko kabi, okusazaamu ensako za token ezitaliiko kkomo, n’okulondoola ssente enzibe okutuuka ku bifo eby’okuwanyisiganya ssente mu kifo ekimu (centrized exchange off-ramps) kikuwa omukisa ogusinga okuyimiriza omudumu gw’amazzi n’okusiba eby’obugagga ebibbe.

Kino kikole kati¶

Bw’olaba emirimu egy’ebweru egitakkirizibwa nga gikulukuta waleti yo eya cryptocurrency oba n’okitegeera nti waakayungibwa ku mukutu gwa phishing oba okufulumya ekigambo kyo eky’ensigo, kola emitendera gino omukaaga mu nsengeka entuufu:

1. TOKOZESA kompyuta y’emu okukola waleti empya ey’okununula: Singa PC yo oba Mac yo ekwatibwa infostealer malware (nga Lumma Stealer, Atomic macOS Stealer, oba Poseiden) oba browser extension embi, okukola waleti empya ku kompyuta eyo yennyini kikwasa mangu ekigambo kyo ekipya eky’ensigo eri omulumbaganyi. Situla ssimu ey’omu ngalo oba waleti ya Hardware eyawuddwamu, ennyonjo okukola endagiriro ya waleti empya, etaliiko kye yeekoledde gy’ogenda mu kiseera kino.
2. Tusa obubonero bwo obwa ggaasi enzaaliranwa obusigaddewo n’ensimbi ezikyusibwa mu waleti empya ennyonjo OKUSOOKA: Nga tonnaba kukola kintu kirala kyonna, weereza ssente zo ezisigaddewo ezikyusibwa (ETH, BTC, SOL, USDC, USDT, WBTC) okuva mu waleti eyali mu kabi butereevu ku ndagiriro yo empya ennyo eya waleti ennyonjo. Lekawo ddoola ntono zokka eza ggaasi enzaaliranwa (nga 3 ku 5 USD eza ETH, SOL, oba BNB) bw’oba ​​weetaaga okusazaamu okukkiriza endagaano ez’amagezi ku bifo ebisigadde nga bisibiddwa.
3. Manya oba omulumbaganyi alina Seed Phrase yo oba Malicious Token Approval yokka:
   • Omukono gw'endagaano ya Smart Contract / Permit2 Approval: Akabonero kamu kokka akatongole (nga USDT oba okukung'aanya NFT) kaasimbuddwa okuyita TransferFrom oluvannyuma lw'okunyiga "Approve" oba "Sign" ku mukutu gwa yintaneeti, ate nga bbalansi yo eya ggaasi eya ETH/SOL enzaaliranwa etudde nga tekwatibwako.
   • Sign of a Compromised Seed Phrase / Private Key: Buli ssente mu blockchains ez’enjawulo eziwera (Ethereum, Solana, Bitcoin, Arbitrum) zisengulwa nga ziyita mu butereevu Transfer essimu, era ETH/SOL yonna enzaaliranwa gy'osindika ebbibwa mu sikonda 1 sweeper bot ekola mu ngeri ey'otoma.
4. Sazaamu okukkiriza kwonna okw’akabonero k’endagaano amagezi okukolebwa amangu ddala: Singa ggaasi wo enzaalwa ya ETH/SOL akyali mu waleti yo, ggulawo omuddukanya ensako eyesigika (revoke.cash, Omukebera okukkiriza obubonero bwa Etherscan ku etherscan.io/tokenapprovalchecker, oba Rabby Wallet's built-in Approval Manager) ne Revoke byonna ebikkirizibwa okukozesa token ebitaliiko kkomo n'emikono gya Permit2 egyaweebwa endagiriro z'endagaano ezitamanyiddwa.
5. Ggyako entuula zonna eza dApp ezikola n'enkolagana za WalletConnect: Ggulawo ensengeka za waleti yo -> Emikutu Egiyungiddwa / Entuula za WalletConnect n'onyiga Ggyako Byonna omukutu gwa phishing ne guleme kuddamu kufuluma kusaba kussa mukono.
6. Singa "Sweeper Bot" ebba mangu ggaasi gy'oteeka okununula obubonero obuteekeddwa ku staked, kozesa Flashbots / MEV rescue bundler: Tosigala ng'osindika ETH mu waleti efugibwa sweeper bot, script ya bot eya automated erondoola mempool era n'ebba ETH yo mu milliseconds nga tonnanyiga "Unstake". Mu kifo ky’ekyo, kozesa empeereza ey’obwannannyini ey’okununula ERC-4337 / Flashbots MEV atomic bundle (nga flashbots.net ebikozesebwa eby’enkoofiira enjeru oba revoke.cash delegated fee features) okusonda ssente za ggaasi n’okuggya obubonero mu bulooka emu etaddukanyizibwa mu maaso.

Omuti gw’okusalawo: okuyimiriza okufulumya amazzi mu waleti ya crypto ekola¶

Goberera enkola eno ey’okusunsulamu eby’ekikugu mu kiseera ekituufu okuyimiriza omusaayi n’okununula eby’obugagga byo ebya digito ebisigaddewo:

flowchart TD
    A["Enkolagana za Crypto ezifuluma ezitakkirizibwa zizuuliddwa"] --> B["Okukola Wallet Ennongoofu Empya Ku Wallet Ya Ekyuma Ekiyonjo / Hardware Ekyenjawulo"]
    B --> C{"Wawandiika ekigambo kyo eky’ensigo eky’ebigambo 12/24 oba wawanula fayiro, oba onyiga ku Sign/Approve yokka ku mukutu?"}
    C -->|"Nyiga yokka Sign / Approve / Claim ku dApp"| D["Endagaano ya Smart embi oba Olukusa2 Drain"]
    D --> E["Amangu ago genda ku revoke.cash oba Etherscan Token Approvals era osazeewo ensako embi"]
    E --> F["Teeka obubonero bw’amazzi obusigadde mu waleti yo empya ennyonjo ng’okwegendereza"]
    C -->|"Yawandiika Seed Phrase, yafulumya Private Key, oba yaddukanya PC malware"| G["Full Seed Phrase / Okukkaanya kw'ekisumuluzo eky'obwannannyini"]
    G --> H{"Sweeper Bot ekola automated ebba mangu ggaasi yenna eya ETH/SOL gy’oteeka?"}
    H -->|"Nedda: Gaasi enzaaliranwa akyakola"| I["Evacuate all liquid coins & unstake DeFi positions amangu ddala ku waleti empya ennyonjo"]
    H -->|"Yee: ​​Sweeper Bot ebba ggaasi mu < sekondi 2"| J["MUKOMERA okusindika ggaasi. Kozesa Flashbots private RPC atomic bundle okununula obubonero obuteekeddwa ku staked/airdrop"]
    F --> K["Londoola waleti y'omulumbaganyi ku Block Explorer, lipoota eri Exchange Compliance & FBI IC3 / Poliisi"]
    I --> K
    J --> K

Okuzuula vector y’okulumba: Smart Contract Drainer vs. Okukkaanya mu bigambo by’ensigo¶

Okwewala okufiirwa ssente eziwera ng’ogezaako okutereka waleti yo, olina okusooka okutegeera engeri omulumbaganyi gy’atambuzaamu ssente zo ng’onoonya endagiriro ya waleti yo ku public block explorer (etherscan.io, . solscan.io, . arbiscan.io, . basescan.org, oba mempool.space).

Okugerageranya enkola 4 enkulu ez’okufulumya waleti za cryptocurrency¶

Protocol 1: Okuyimiriza Endagaano ya Smart embi oba Permit2 Ekyuma ekifulumya amazzi¶

Bw’okolagana n’enkola z’ebyensimbi ezisaasaanyizibwa (DeFi) ku Ethereum ne EVM-compatible blockchains (Arbitrum, Optimism, Base, Polygon, Avalanche, BNB Chain), obubonero nga USDC, USDT, DAI, PEPE, oba WETH zikozesa omutindo gwa ERC-20. Okusinziira ku dizayini, endagaano entegefu tesobola kuggya bubonero bwa ERC-20 mu waleti yo okuggyako ng’osoose kugiwa Allowance. Ebikozesebwa mu kubba ("Drainers-as-a-Service" nga Angel Drainer, Pink Drainer, oba Inferno Drainer) bilimbalimba abakozesa ne bawa Unlimited Allowance (115792089237316195423570985008687907853269984665640564039457584007913129639935 units) oba okussa omukono ku kiwandiiko ekitali kya lujegere EIP-2612 Permit / Okukyusakyusa (Uniswap). Permit2 obubaka butereevu ku ndagaano y'omufere.

Engeri y'okusazaamu okukkiriza kwa token okw'obulabe mu sikonda 60¶

1. Ggulawo ekintu ekituufu, ekyetongodde eky'okusazaamu ensako:
   • Okusazaamu.ensimbi enkalu (revoke.cash) , Ewagira blockchains za EVM ezisukka mu 100 era eraga byombi standard ERC-20/ERC-721 approvals ne Permit2 emikono nga giriko ennaku z’omwezi eziggwaako.
   • Abakebera Olukusa Abatongole Abakola Block Explorer:
     • Ethereum: etherscan.io/tokenapprovalchecker
     • Olujegere lwa BNB: bscscan.com/tokenapprovalchecker
     • Enjuyi eziwera: . polygonscan.com/tokenapprovalchecker
     • Arbitrum: arbiscan.io/tokenapprovalchecker
     • Base: basescan.org/tokenapprovalchecker
   • Rabby Wallet Built-in Security Tab: Bw’oba okozesa Rabby Wallet, nyweza akabonero k’engabo Approvals butereevu munda mu nkola ya waleti okusazaamu endagaano ez’akabi mu kibinja nga togguddewo mukutu gwa yintaneeti.
2. Sonda ebikkirizibwa okusinziira ku "Ebipya" oba "Omuwendo oguli mu kabi":
   • Laba mu kisenge kya Spender. Protocols ezikkirizibwa zijja kulaga labels ezikakasibwa nga Uniswap: Universal Router oba Aave: Pool V3.
   • Ebifulumya amazzi eby’obulabe bitera okulabika nga endagiriro ya hexadecimal embisi etakakasiddwa (e.g., 0x4f8a...9c12) oba endagaano ey’ebicupuli eyaakassibwa mu nkola.
3. Nyiga "Revoke" era okakasizza okutunda mu waleti yo:
   • Okunyiga Revoke kiweereza enkolagana ku lujegere ewandiika ku nsako y'omusaasaanya okudda ku ** .0**.
   • Oluvannyuma lw’okutunda okwo okukakasa ku blockchain (ebiseera ebisinga mu sikonda 2 ku 12), endagaano ya drainer esalibwako mu kubala okuva mu waleti yo era tesobola kusika ssente ndala ku kabonero ako.

Protocol 2: Okumegga "Sweeper Bot" eya otomatiki ku kigambo ky'ensigo ekitali kituufu¶

Singa omukozi w’obuzibu aba abbye ekigambo kyo ekituufu eky’ensigo y’okuzzaawo ebigambo 12 oba ebigambo 24 (oba ekisumuluzo eky’ekyama ekibisi), amangu ago batikka ekisumuluzo kyo eky’ekyama mu script ya seva ey’obwengula eyitibwa Sweeper Bot.

Engeri Sweeper Bot gy'etega abakoseddwa¶

Ka tugambe nti waleti yo eya Ethereum eyali efuuse ekizibu ekyalina $15,000 omuwendo gwa staked tokens mu ndagaano ya Aave, Lido, oba EigenLayer (oba egenda okuyitibwa claimable token airdrop), OBA ekyakutte ERC-20 token omulumbaganyi tannasenguka, naye omulumbaganyi yasenya balance yo eya native ETH wansi okutuuka 0.0000 ETH.

1. Okusumulula oba okukyusa \(15,000 zo eza tokens out to safety, waleti yo efunye obuzibu yeetaaga **\)2.00 worth of ETH okusasula blockchain network gas fee**.
2. Osindika $5.00 eza ETH okuva ku akawunti yo eya Coinbase mu waleti yo eyali efuuse obuzibu osobole okunyiga "Unstake".
3. Mu sikonda 0.8 okuva ku $5.00 ETH deposit yo okukka, nga engalo zo ez'obuntu tezinnaba na kunyiga button ya "Unstake", Sweeper Bot ya hacker ezuula ETH eyingidde mu public mempool era amangu ago n'ekuba enkolagana ya ggaasi ey'okukulembeza ennyo ebba $5.00 yo eya ETH right back out to the hacker's address.
4. Abakoseddwa batera okugezaako okusindika ETH emirundi 10 egy’omuddiring’anwa, nga bafiirwa ddoola 50 oba 100 mu ggaasi eri Sweeper Bot buli mulundi ate nga obubonero bwabwe obuteekeddwa ku nsimbi busigala nga busibye munda mu waleti eyali efuuse ekizibu.

Engeri y'okukubamu Sweeper Bot ng'okozesa Flashbots / Private MEV Atomic Bundles¶

Lekera awo okusindika ssente za ETH eza bulijjo mu waleti elondoolebwa Sweeper Bot. Sweeper bots zitunuulira public transaction mempool era zeetaaga block 1 (oba public pending transaction) okulaba n'okubba ETH yo gy'otereka. Osobola okuwangula Sweeper Bot yonna ng’okozesa Flashbots Protect / MEV Atomic Bundling (ku njegere za Ethereum ne EVM) oba Jito Bundles (ku Solana):

1. Engeri Atomic Rescue Bundle gy'ekola: Mu kifo ky'okusindika ETH mu Block #1 n'okugezaako okunyiga "Transfer/Unstake" mu Block #2, atomic bundle epakira enkolagana bbiri ez'enjawulo mu array emu ey'obwannannyini esindikibwa butereevu okuziyiza abazimbi nga bayita mu Private RPC (ekitalabika ddala mu mempool ya lukale Sweeper Bot gy'ali okulaba):
   • Bundle Transaction #1 (okuva mu Clean Safe Wallet yo): Aweereza ggaasi omutuufu (0.0015 ETH) okutuuka ku Wallet eya Compromised.
   • Bundle Transaction #2 (essiddwaako omukono nga tennabaawo Compromised Wallet): Amangu ago ekola... unstake() oba transfer() wa tokens zo ez’omuwendo okuva mu Clean Safe Wallet yo, ng’onywa 100% ku ekyo 0.0015 ETH ggaasi mu bulooka y’emu ddala ku microsecond y’emu yennyini.
2. Olw'okuba transactions zombi zikola atomically munda mu block emu nga zero public mempool visibility, hacker's Sweeper Bot telabako ETH etuuka n'egenda ne 0.0000 ETH ebisigaddewo nga obubonero bwo butuuse bulungi mu waleti yo ennyonjo.
3. Eby'obugagga ebyesigika eby'okutaasa Whitehat eri abakoseddwa Sweeper Bot:
   • Seal 911 (Security Alliance Whitehat Emergency Hotline): Yatondebwawo Paradigm era abanoonyereza abakulembedde mu by’okwerinda ku blockchain. Bw’oba ​​olina ssente ennene ezisibiddwa emabega wa sweeper bot oba active smart contract exploit, tuukirira omutongole verified SEAL 911 bot ku seal911.org (oba nga bayita ku mukutu gwabwe omutongole ogwa Telegram ku... securityalliance.org) ku bwereere whitehat MEV okununula bundling obuyambi.
   • Ebiwandiiko by'okununula ebya Flashbots Whitehat: Ebiwandiiko ebiggule (flashbots/searcher-sponsored-tx) ku docs.flashbots.net okukusobozesa okusponsa ggaasi okuva mu waleti ennyonjo okununula eby’obugagga bya ERC-20/ERC-721 okuva ku kisumuluzo ekitali kituufu nga towandiise koodi ya custom.
   • EIP-7702 / Delegated Gas Tools: Ebikozesebwa mu kununula eby’omulembe ebiyungiddwa mu bikozesebwa nga revoke.cash ne Ambire/Rabby bakkiriza okusasula okusazaamu oba okununula ggaasi okuva mu waleti ey’okubiri.

Protocol 3: Okulondoola ssente enzibe, okusiba envumbo ku bifo eby’okuwanyisiganya ssente, n’okukola lipoota ku bakuumaddembe¶

Wadde nga tewali asobola kuzzaawo nkolagana ku blockchain egabanya, abamenyi b’amateeka ku mikutu gya yintaneeti okukkakkana nga baagala okukyusa crypto enzibe mu ssente enkalu ezisaasaanyizibwa oba stablecoins ennyonjo. Ssente enzibe bwe zikwata ku Centralized Exchange (CEX) (nga Binance, Coinbase, Kraken, OKX, Bybit, oba KuCoin) oba nga zisigala nga zikuumibwa mu centralized stablecoins (Tether / USDT ne Circle / USDC), ensimbi ezo ZIYINZA okuteekebwa mu bbugumu okuva eri abagaba oba ttiimu egoberera okuwanyisiganya singa okola amangu n’ossaayo lipoota entongole ey’okukuuma amateeka.

1. Okulondoola amangu ku lujegere n’okulabula ku stablecoin freeze¶

1. Koppa Hash y'okutunda (TxID) ne Attacker’s Receiving Address: Ggulawo block explorer y’olujegere lwo, koppa hash yennyini ey’okutunda ey’obubbi, n’onyiga ku ndagiriro ya waleti y’oyo eyafuna ssente zo.
2. Tosazaamu byafaayo bya browser yo oba ebiwandiiko bya waleti: Bambega ba forensic beetaaga URL entuufu ey’obufere gye wakyalidde n’ebiseera ebituufu.
3. Singa obungi bwa... USDT (Okusiba) oba USDC (Circle) zabbibwa: Okwawukanako ne decentralized ETH oba BTC, zombi Tether (USDT) ne Enkulungo (USDC) balina omulimu gw’endagaano entegefu oguzimbibwamu (addBlackList() / . blacklist()) esobola okusiba enkalakkalira USDT oba USDC enzibe butereevu munda mu waleti ya hacker eyeekuuma nga efunye okusaba okw’amangu okuva mu bakuumaddembe oba ekiragiro kya kkooti.
4. Londoola omukozi w'obuzibu w'atambuliza ssente ng'okozesa ebilondoola ebirabika eby'obwereere:
   • Teeka endagiriro ya waleti ya hacker mu MetaSleuth (metasleuth.io), Okulondoola Enkuba (misttrack.io), Ebikuta by'omugaati (breadcrumbs.app), oba Obukessi bwa Arkham (platform.arkhamintelligence.com).
   • Teekawo Etherscan / Solscan Watch Alert ey’obwereere ku ndagiriro ya waleti y’omubbi olwo n’ofuna email mu kaseera ako omubbi w’asindika ssente enzibe ku ndagiriro y’okutereka mu Centralized Exchange (okugeza, endagiriro ewandiikiddwa Binance 14, . OKX, . FixedFloat, oba ChangeNOW).

2. Okutuukirira Centralized Exchange Compliance Desks & Okuwandiika Lipoota za Poliisi¶

Amangu ago okulondoola kwo ku lujegere kulaga ssente enzibe nga ziyingira endagiriro y’okutereka mu Centralized Exchange oba empeereza ya instant swapper:

1. Wereza Tikiti y’okusaba Freeze ey’amangu ey’okukuuma amateeka mu kifo ekyo ekigere: Buli exchange enkulu ekola omukutu gw’okugula tikiti ez’obufere/ensimbi ezibbiddwa mu bwangu (nga Binance Law Enforcement / Stolen Funds support, Coinbase Support, Kraken Security, oba FixedFloat/ChangeNOW support). Waayo:
   • Endagiriro yo eya waleti y’omukoseddwa, endagiriro z’omulumbaganyi ez’omu makkati, Endagiriro entuufu ey’okutereka ku kuwaanyisiganya, ne Transaction Hash (TxID) nga balaga ssente eziyingira mu waleti yaabwe eya exchange hot.
   • Exchange ezisinga zijja kuteeka essaawa 24 okutuuka ku 72 ez’okugoberera amateeka munda okw’ekiseera** ku akawunti z’okutereka eziteekeddwako bendera eziteeberezebwa okukuwa obudde okuteeka ennamba ya lipoota ya poliisi entongole n’okubeera n’omuserikale anoonyereza ku email ku mukutu gwa exchange ogw’okusaba okukuuma amateeka (kodexglobal.com oba omukutu gwa LE ogw’obutereevu ogw’okuwanyisiganya).
2. Fayira lipoota entongole ez'eggwanga ku bumenyi bw'amateeka ku mikutu gya yintaneeti mu bwangu (100% ya bwereere):
   • Amerika: Waayo lipoota ey’amangu mu FBI Internet Crime Complaint Center (IC3) ku... ic3.gov (londa ssente ezirabika (virtual currency) era oteekemu buli hash y’okutunda, token ticker, omuwendo gwa USD, ne endagiriro ya waleti y’oyo afuna), lipoota eri Secret Service local field office cyber fraud task force, era oteeke lipoota ya poliisi y’omu kitundu okufuna Case Number entongole.
   • United Kingdom: Teeka lipoota ku yintaneeti ne Action Fraud ku... actionfraud.police.uk oba kuba 0300 123 2040 ekitongole ekikessi mu mivuyo mu ggwanga n’ekitongole kya poliisi ekivunaanyizibwa ku bumenyi bw’amateeka ku mikutu gya yintaneeti basobole okufulumya ekiwandiiko ekikuuma okuwanyisiganya.
   • Omukago gwa Bulaaya, Canada, & Australia: Fayiro ng'oyita mu Chainabuse (chainabuse.com, eddukanyizibwa TRM Labs), egabana butereevu lipoota ya endagiriro yo eya waleti y’omufere mu bifo ebinene eby’okuwanyisiganya, enkalala enjeru ez’obukuumi bwa waleti, n’emikwano gy’abakuumaddembe, wamu n’ekitongole kya Canadian Anti-Fraud Center (CAFC), Australian Cyber Security Center (cyber.gov.au), oba emmeeza yo ey’eggwanga Europol ekola ku bumenyi bw’amateeka ku mikutu gya yintaneeti.

Okulongoosa obucaafu oluvannyuma lw’akabenje: okuyonja ebyuma byo n’okukaza waleti ez’omu maaso¶

Nga tonnaba kukozesa waleti yo empya eya cryptocurrency okukola emirimu egya bulijjo, ggyawo obuzibu bw’ekikolo obwavaako okukkaanya:

1. Singa Seed Phrase yo yabbibwa ng’okozesa Windows PC oba Mac, kitwale nti olina akawuka ka Infostealer: Malware ekwese munda mu nnyatika z’emizannyo ez’ebicupuli, enkolagana za Zoom/Calendly ez’ebicupuli, obuyambi bwa Notion/PDF obw’ebicupuli, oba pulogulaamu ezijingirire esoma mu kasirise fayiro za LevelDB vault ez’omu kitundu ez’okugaziya browser (MetaMask, Phantom) n’etunuulira clipboard yo. Ggyako PC ku Wi-Fi, backup ebiwandiiko ebya bulijjo byokka, era okole okujjuza USB clean reinstall mu bujjuvu Windows oba macOS.
2. Kozesa Hardware Wallet (Cold Storage) eyetongodde okutereka, ne "Hot Wallet" ey'enjawulo ku dApps eza buli lunaku:
   • Vault / Cold Wallet (90%+ of funds): Kuuma Bitcoin, Ethereum, Solana, ne stablecoins zo ez’ekiseera ekiwanvu ku waleti ya hardware eyetongodde (nga Trezor, Ledger, Coldcard, oba Keystone) ekisumuluzo eky’ekyama we kiterekebwa munda mu chip ya Secure Element etali ku mukutu etakwatako ku RAM ya kompyuta yo. Toyungako ndagiriro yo eya Cold Vault ku mikutu gya yintaneeti egy'enjawulo, NFT mints, oba airdrops.
   • Burner / Hot Wallet (< 10% of funds): Kuuma waleti ya browser ey’enjawulo erimu ssente entono zokka z’oteekateeka okuwanyisiganya oba okuzikuba n’olunaku olwo. Bw’oba ​​onyiga ku link embi ku Hot Wallet yo, Cold Vault yo esigala 100% nga tekwatibwako.
3. Teeka eky'okugaziya eky'okukoppa okutunda mu kiseera ekituufu ekya Web3: Walets ez'omulembe nga Rabby Wallet ne Phantom, oba eby'okwerinda bya browser eby'obwereere nga Pocket Universe ne Wallet Guard, koppa buli nkolagana nga tonnagissa mukono era n'ofuluma okusoma okulabula okumyufu okwakaayakana: "OKULABULA: Okussa omukono ku bubaka buno kijja kuggya USDC ne NFT zo zonna mu kifo ekiteesiga endagiriro."
4. Never store your 12/24-word seed phrase digitally: Never take a smartphone photo of your seed phrase (cloud photo backups are a prime target for hackers), never save it in a password manager, Apple Notes, Google Docs, or Draft emails, and never type your seed phrase into any website or keyboard. Only write your seed phrase on physical paper or stamp it onto fireproof stainless steel plates stored in a physical safe.

Ebibuuzo ebitera okubuuzibwa¶

Ensonda zeekebeddwa¶

• Federal Bureau of Investigation (FBI, United States): Internet Crime Complaint Center (IC3) Cryptocurrency Fraud Reports and Public Service Announcements on DeFi Smart Contract Drainers (ic3.gov).
• Cybersecurity and Infrastructure Security Agency (CISA, United States) & NSA: Cryptocurrency Security, Phishing-Resistant Authentication, and Infostealer Malware Advisories (cisa.gov).
• Consumer Financial Protection Bureau (CFPB) & Federal Trade Commission (FTC, United States): Avoiding Crypto Scams and Fake Recovery Services (consumer.ftc.gov).
• National Cyber Security Centre (NCSC) & Action Fraud (United Kingdom): Cryptoasset Security Guidance and Reporting Stolen Digital Assets (ncsc.gov.uk, . actionfraud.police.uk).
• Ethereum Foundation & EIP Standards (International): ERC-20 Token Standard (EIP-20), Permit Gasless Approvals (EIP-2612), and Account Abstraction / Bundling (ethereum.org, . eips.ethereum.org).
• Security Alliance (SEAL 911) & Flashbots Whitehat Collective (International): Emergency Whitehat Sweeper-Bot Rescue Protocols and MEV Atomic Bundling (securityalliance.org, . docs.flashbots.net).

Ebiragiro ebikwatagana nabyo¶

• Data breach response and password leaks
• MFA phishing and adversary-in-the-middle bypass
• SIM swapping
• Emivuyo n’obufere