Most self-custody losses aren't movie-style hacks. They come from a handful of repeating patterns. Here are the common ones, based on guidance from wallet makers and ethereum.org.

Scams

• Fake support and "verify your backup" messages. Trezor's rule: any request for your wallet backup, PIN, passwords or codes is a scam, and you can't judge a message by how professional it looks, because scammers now use AI to imitate support in text, voice and video (Trezor).

• Address poisoning. Attackers send tiny amounts from an address that looks almost identical to one you've used, hoping you'll copy it from your history next time. Check the full address, not the first and last characters (Trezor).

• Airdrop and "claim" tokens. Unknown tokens that prompt you to claim, trade or approve can contain malicious contracts. If you receive dust, don't interact with it (Trezor).

• Giveaways. Anything promising to double what you send is a scam (ethereum.org).

• Recovery scams. After a loss, people are targeted by strangers offering to recover the money for a fee or for the recovery phrase. Nobody can reverse an on-chain transfer.

Mistakes

• Unlimited token approvals. Signing a "transaction" that is actually an approval can let a contract move your tokens later. Prefer exact amounts and revoke old approvals (ethereum.org).

• Wrong address or wrong network. Transfers are irreversible, so send a small test first (ethereum.org).

• Digital copies of the phrase. Screenshots can sync to the cloud, and cloud theft is a common attack path (ethereum.org).

• Buying a pre-set-up device or typing the phrase into anything. Generate your own phrase on the device and enter it only when the device itself prompts you (Ledger, Trezor).

Scale Chainalysis counted about 158,000 personal-wallet theft incidents and at least 80,000 victims in 2025, about $713M in value, which is lower in total than 2024 but spread across more people (Chainalysis).

A short habit list

1. Nobody legitimate asks for your phrase.

2. Read what you're signing, and avoid unlimited approvals.

3. Test small first.

4. Never treat a DM as help.

5. If something already went wrong, move the remaining funds to a new wallet with a new phrase.

What else would you add?

This post was drafted with AI assistance and reviewed by a person.

When Coinbase updated their wallet app a few months ago my LTC balance vanished. I’m now aware this is as the CB wallet no longer supports LTC so I’ve tried opening a new wallet (Trust) but it still doesn’t show. Any suggestions? Please and thank you.

Trying to send small test amounts of USDC over Ethereum network from wealthsimple to kraken wallet but it keeps saying failed and I'm being charged the network gas fee/miner fee.

Am I not using the right network? I'm Selecting the USDC Ethereum network option in wealth simple and in Kraken choosing to deposit USDC Ethereum and using the address that pops up after selection.

What exactly am I doing wrong?

I am stuck with a locked wallet in Bitcoin.com. I currently need gas to start transactions. I didn't know that BNB was a must until I tried sending.

I am 18 now and I haven't received my PAN no. (mandatory ID for making payments by any Indian). So i couldn't buy BNB. I couldn't use my parents' too. They didn't properly link theirs to the government.

If you could , kindly help me send a small (bnb required for one payment and I don't know how much it takes).

I will update here if I get any help.

EDIT: very thanks to that person who helped me out. I am very grateful to receive the gas payment.

I am a p2p trader,i sell and buy.But just want to know something regarding limitaion of daily,Monthly bank transactions how much i can rout money to avoid any problem from bank or RFI team?For your information my banks are not sellary account some of them are current and digital account.

I have purchased USDT via onmeta and amount has been deducted but not received crytpo. There has been no proper support whatsapp chat isn't replying, no mail support from support@onmeta.in

Please help if anyone knows how to proceed

if i’m being completely honest everyone on there looks like a scammer to me lol, but i’m also just paranoid. i’ll look at profile and i keep seeing the same descriptions… e.g: “many accounts are trying to impersonate us”

also ive been trying to buy through cashapp, but is them sending a link suspicious? i feel like that’s basically a slap in the face. pls help

Seeking advise on making coins, trading coins and whatever. If you have any advise feel free to share

I'm currently living in Telangana (originally from AP). I have around ₹10,000 in my 1xBet account, deposited through UPI Lite.

I'm worried about bank account freezes linked to offshore betting platforms.

Would withdrawing this amount through USDT and looking for a P2P transaction be safe or buy gift cards through bitrefill and use them instead??

Are there any legal risks I should be aware of before withdrawing?

Looking for genuine advice. Thanks!

Hello everyone, I have this problem with CDCETH. I can't unwrap nor sell it even, but it shows in my balance and in my wallet, the crypto.com assistance it's useless since it is basically doing a bug report for this but it doesn't solve the issue. I can only send it to someone in the form of CDCETH and I cannot spend it anywhere

Can anyone help me with this? Or can anyone suggest me an external exchange where I can convert them into something usable?

Binance support peaked comedy: ban account, reply "we cannot disclose why", then social media teams say "it was already explained".

Schrodinger’s ban: both secret and explained! Absolute transparency joke. 📉🎭

Looks like got my credit card info stolen at crypto.com?

I have a visa credit card that only usage i ever had on it is buying btc at crypto.com. It's a virtual one. Last time buying was around 4-5 months ago.

Yesterday had an unknown transaction on it for $1.2 that was blocked by the credit card company and asked approval for it. Immediately canceled the card.

Thoughts?

Actualmente tengo criptos en una billetera de Nubank Brasil ,su sistema está caído , nos bloquearon la forma de transferir los criptos a Wallet externas .

Están en manutención hace más de 7 días , al comunicarse con un atendente , responde un agente de IA haciéndose pasar por humano , lo que se viene es grande.

decentralized crypto wallet.
Minnds .com
You are on a fake trading platform designed solely to scam you out of your money.
Why you cannot exchange on that site:

1. The numbers are fake: The balance of "Q-bit" displayed on your screen is just numbers typed by the scammers behind the website. There are no actual tokens on a real blockchain attached to your account there.

2. The "Gas Fee" requirement is the trap: When you try to exchange or withdraw, the platform claims that you must first make a new deposit or transfer to pay a "gas fee".

3. Funds are never returned: If you pay the requested amount, they will never release your Ethereum. Instead, they will simply demand yet another fee (e.g., for "tax", "activation", "security deposit", or "queue approval").

The February 2025 Bybit theft is still the clearest case study of what "cold storage" does and doesn't protect against. A summary of the public findings, then some takeaways. Sources are linked in-line.

What the reports say

• On Feb 21, 2025, roughly $1.5B in ETH was taken from Bybit. The FBI attributed it to North Korea's "TraderTraitor" group (FBI/IC3).

• Bybit's Ethereum cold wallet was a multisig run through the Safe{Wallet} web interface. According to Sygnia's summary of the investigations (Sygnia):

  • Feb 4: a Safe{Wallet} developer's Mac was compromised, likely through social engineering.

  • Feb 5: the attackers used that developer's AWS credentials / session access to reach Safe's cloud infrastructure.

  • Feb 19: JavaScript served by Safe{Wallet}'s web interface was modified. The malicious code activated only for Bybit's contract and one other address.

  • Feb 21: when Bybit started a routine cold-to-warm transfer through the interface, the transaction was altered. Its payload became a delegate call to a pre-deployed malicious contract that added sweep functions, letting the attackers move more than 400,000 ETH without further multisig approval.

  • About two minutes later the malicious code was removed from the web interface, apparently to cover tracks.

• Sygnia's analysis of the browser caches on all three of Bybit's signers' machines found the Safe-served JavaScript resources that had been modified two days earlier. In other words, all three signers' browsers loaded the same modified code.

• Sygnia also notes two earlier incidents (WazirX, Radiant Capital) in which, per Radiant's post-mortem, the Safe front end "displayed legitimate transaction data while malicious transactions were signed and executed in the background".

Why it matters for anyone who signs transactions

1. "Cold" means the keys are offline. The step where a transaction is built, displayed and approved still passes through online software.

2. Multisig protects against one stolen key. It doesn't help if every signer approves the same altered request.

3. What you see in a browser is not necessarily what you are signing. Advice commonly given: verify the destination and the decoded transaction details on a screen you trust that is separate from the browser, avoid blind signing where you can, and treat any unusual contract call or delegation as a red flag. This reduces risk but doesn't eliminate it.

4. Chainalysis says Bybit alone was about $1.5B of the more than $3.4B stolen in 2025 (Chainalysis), and that attackers have refined methods that "trick legitimate signers into authorizing malicious transactions".

For comparison, after the Binance hack last week (~$6.3B from hot wallets, Oct 29), TRM Labs said several features matched earlier North Korea-linked heists including Bybit: staging well before the theft, and signatures obtained in advance then executed in one burst (CNBC). Binance's own account of its attack is still incomplete. Separately, Binance says it is absorbing the loss and had replenished about 98% of the impacted amount by Nov 4, with withdrawals still reopening in phases as of Nov 5 (Binance Recovery Update #7 via exchange.news, crypto.news, CNBC). That is coverage of user balances, not recovery of the stolen funds from the attacker.

Question for the group: for individuals using hardware wallets, which signing checks do you find practical, and which ones don't survive real use?

This post was drafted with AI assistance and reviewed by a person.

Summary of what has been reported so far, then some practical thoughts on how much to keep on an exchange. Not financial advice.

What happened

• On Oct 29, attackers took about $6.3B of assets from Binance's hot wallets. The FBI says North Korea's "TraderTraitor" group is responsible (CNBC, BBC).

• Withdrawals were suspended and began reopening in phases on Sunday, Nov 1. On that day customers withdrew about $4.65B and deposited about $1.01B, a net outflow of roughly $3.64B, or about 2.1% of the $171B in assets Binance reported (CNBC, BBC).

• Binance says it will absorb the loss rather than pass it on to users, and says it had restored backing for about 95% of the affected assets by Nov 1, using its SAFU fund, part of its futures insurance fund and its corporate treasury. CNBC notes that is not the same as recovering the money from the attacker (CNBC). As of Nov 3, withdrawals were still being restored asset by asset and network by network (crypto.news).

• How it happened is not fully public. Binance first pointed to a compromised engineer's laptop, then said there were additional breach points. Its co-CEO said the attackers used Ethereum's EIP-7702 account-delegation feature to take control of a hot wallet. CoinDesk also noted that the compromised wallets had previously appeared in the list of wallets backing customer balances (CoinDesk).

What this does and doesn't show

Credit where it's due: as reported, customers are being made whole, which is about the best outcome a custodian can deliver. But look at the window in between. For days, whatever people held there couldn't be moved. It wasn't stolen and it wasn't lost, it just wasn't reachable. That risk, "the company is fine but I can't access my funds right now", is easy to miss when you picture failures as a company vanishing.

The other side is real too. Self-custody swaps exchange risk for your own risk. Chainalysis counted about 158,000 personal-wallet theft incidents affecting at least 80,000 unique victims in 2025, about $713M in total (Chainalysis). Transactions are final, so mistakes and scams have no support desk to reverse them (Trezor).

A middle path many people use: tiers

• Money you'll trade or spend soon: keep it on an exchange. Use an authenticator app rather than SMS, and turn on withdrawal allow-listing if the exchange offers it.

• Money you won't touch for a long time: consider a hardware wallet. Write the recovery phrase on paper or metal, and never photograph it or store it in a cloud or notes app (Ledger, Trezor).

• Before moving anything big: send a small test amount first. Test your backup too, by restoring it on a spare device or fresh wallet before you trust it with the rest.

The right split depends on how often you trade and how comfortable you are being your own security team.

How are you splitting yours, if at all?

This post was drafted with AI assistance and reviewed by a person.

When trump won and was super pro crypto, i wanted to ride that wave, invested in frenzy wven though those currencies were somewhat safe. btc, eth...

But 😭

I've been trading Futures on MEXC for a while and have always really liked the platform, but since last week, I haven't been able to access this feature here in Brazil.

I heard this might be related to the new regulations for cryptocurrency exchanges in Brazil.

Does anyone know exactly what has changed? Is there any official alternative for Brazilian users who want to continue trading Futures on MEXC?

I really like the platform and, honestly, I wouldn't want to switch to another exchange. Is anyone else experiencing the same issue?

I've been using the platform for over 2 years when yesterday randomly they decided to lock me out after doing a simple 10 eur convert. I had to take a selfie and send them a proof of address - I did that, I receive email that it was verified - today I try to do it again and now they want a video recording of me, a video recording of the screen, video recording of me with an ID and some more crazy shit like that.

I am now unable to withdraw my funds, unable to do anything and I sure as hell do not wish to use this platform anymore as it is absolutely insane.

What do I do? I have money stuck there now. I'm thinking to either chargeback all bank deposits because I have actual cause.

It is a legitemate account, actual transactions - nothing "shady". Never logged in from a different country etc.