Genuine wallet download channel
Recently, a large number of fake TokenPocket download links have appeared on search sites. If the fake wallet above is downloaded through these fake links, the fake wallet will intercept and steal when the user imports the private key mnemonic phrase. After obtaining permission, they The assets in the wallet may be stolen directly, or the wallet may be monitored and stolen immediately when a large amount of assets are transferred to the address.
I would like to remind everyone: Do not access and download wallets at will, especially on search sites; do not use fake installation packages recommended by others, and stay away from fake TokenPocket wallets. Using a genuine wallet is the most basic first step for the security of your assets.
Security Tips for Creating a Wallet
During the process of creating a wallet, you will see the following security tips. Please keep and back up your wallet mnemonic. It is highly recommended to learn through the video content, keep in mind the safety points, and improve wallet security awareness.
Safety tips for exporting wallets
1. Security tips for exporting private keys
In order to improve users' wallet security awareness, when you perform the private key export operation, please carefully study and check the security points, and do not share your private key with any third party!
2. Safety tips for exporting mnemonic phrases
In order to improve users' wallet security awareness, when you perform the mnemonic phrase export operation, please carefully study and check the safety points, and do not share your mnemonic phrase with any third party!
Security Tips for Transferring Money
1. Contract address transfer tips
In order to prevent users from transferring funds to the Token contract address, when you set the contract address as the payment address during the transfer process, TokenPocket will display the content as shown below. Please be sure to carefully check the security prompt information in the wallet.
Please note that a smart contract is composed of an address and the code stored corresponding to that address. For example, issuing an ERC20 Token on Ethereum essentially creates a Token smart contract. The code of the smart contract determines all the contents of the Token in this address. Smart contracts usually do not have private keys. Once transferred to the contract address, it may never be transferred out again.
Warm reminder, TokenPocket supports multi-signature address transfer. This prompt will also appear when you transfer to a multi-signature address. This is because the multi-signature wallet address itself is a smart contract address. Therefore, if the multi-signature wallet address is used as a payment address, Then you can receive the transferred assets normally.
2. Tips for transferring funds to different network addresses
Taking the EVM compatible chain as an example, when you set the wallet address of a non-EVM compatible chain as the payment address during the transfer process, TokenPocket will issue the following security prompts.
Please note that different networks cannot directly transfer funds to each other. If the receiving address is an EVM-compatible chain address, the private key mnemonic of the receiving wallet address can be imported into the sending network. For example, public chains such as ETH, HECO, BSC, and OKC are all EVM compatible chains. Although their address formats are the same, the Tokens of these addresses cannot be transferred directly.
However, since these public chains are EVM compatible chains, their private keys or mnemonics can be imported into each other. For example, if the Token of the BSC chain is transferred to the payment address of the ETH chain, you only need to import the private key or mnemonic phrase of the ETH chain into the BSC wallet in a safe environment to successfully retrieve it.
3. Risk address transfer tips
TokenPocket has localized risk markers for fraudulent wallet addresses. When you enter the payment address and the following risk prompt appears, please stop the transfer immediately and pay attention to asset safety! (Only TokenPocket users can view the risk mark)
4.Multiple signature address prompts
In response to the TRON multi-signature wallet scam, TokenPocket has issued special safety tips. When the following prompt appears during the wallet transfer process, your signature permissions have been modified and it is a multi-signature wallet (or the permissions have been replaced).
At the same time, for the TRON multi-signature wallet, TokenPocket also provides the following security prompt pop-up window when you import the private key or mnemonic phrase into the wallet.
Please note that when you see the above pop-up window or security prompt (it is normal to observe prompts in your wallet), please analyze whether you have encountered a scam according to the prompts, and abandon the current wallet immediately.
5. Tips for copying transfer address
"0 amount" transfers and "disguised address" scams can easily cause users to make incorrect transfers. In order to remind users to copy the payment address incorrectly, TokenPocket has added the following safety tips. Please be sure to carefully check the complete payment before transferring. Is the address correct?
It is recommended that users who frequently conduct fund transactions should check the payment address when transferring money and conduct a complete verification of the payment address; secondly, use the wallet address book transfer function to add the daily wallet address in the address book Once included, you can directly select the address through the address book when transferring money.
Safety Tips for Using DApps
1. Enter the DApp prompt
In the TokenPocket wallet, when you use the DApp browser to open a third-party link, the following safety prompts will pop up to emphasize the precautions for using DApps and show popular science about common scams.
Please be careful not to enter any third-party websites of unknown origin, and do not believe any projects that claim to be high-yield. TokenPocket is only used as a wallet tool. All third-party DApps do not belong to TokenPocket. At the same time, these DApps are controlled by the project party. Please be sure to understand the security of DApps before using it!
2. Enter risk DApp prompts
TokenPocket will provide localized prompts for risky websites and complained websites. When you open a DApp and the following security prompt appears, please stop all operations and exit the website.
3. Security tips about authorization
In order to prevent users from arbitrarily authorizing, before you perform authorization operations, please be sure to understand the security knowledge in the pop-up window and confirm to check the following security tips.
Please do not participate in DApps with unknown origins, do not participate in DApps without open source, do not participate in DApps without audit reports, do not participate in DApps from anonymous teams, and do not trust any projects spread by the community.
Token security tips
In order to help users identify security risks such as "Pixiu" or "Fake Token", TokenPocket carries out localized risk marking for such tokens. If you see the risk prompt in the picture on the asset page, please stop any operations immediately and actively delete the assets!
Introduction to security detection tools
Token security detection tool
Completing Token circulation in DEX is a function that is often used in daily life. Because of the decentralized openness of the Token circulation platform, it can allow any person or team to list different types of Tokens. In this process, some fraudsters will be involved in the contract. There are manipulations, such as being unable to circulate (Pixiu), having additional issuance functions, hiding owner permissions and other abnormal functions. At this time, you need to use a Token contract security detection tool. Although the detection of the tool cannot guarantee 100% accuracy, it can eliminate some risks to a large extent and choose safer Tokens for circulation.
Wallet address authorization detection tool
Approve means authorization. It allows users who hold Tokens to authorize a certain quota to a designated account by calling the Approve method, giving the account the power to freely use Tokens within the quota. If authorized to a malicious account, all authorized assets will be stolen without notification.
Because Approve is a very common operation in daily interactions with DApps, we need to regularly manage the history of authorization, and set the number of authorizations appropriately when performing authorization. If you detect a contract address that no longer requires interaction, you can use the authorization detection tool to clean it up.
This issue of security knowledge popularization summarizes the most important wallet security tips in the current wallet for all TokenPocket users. While helping users improve their awareness of asset security, we also hope that all users can read all the security tips in the wallet carefully. , protect the security of wallet assets!