Project Priority
Security Center
Most losses in DeFi are preventable. We’ve compiled the best practices for protecting your funds—explained in plain language, from the basics to advanced topics.
Protecting your funds is part of the strategy
Most losses in DeFi stem from preventable mistakes: dangerous approvals, phishing, and operational negligence. We've compiled the practices that offer the most protection—from the basics to advanced techniques.
- Store your recovery phrase offline—never in photos or in the cloud
- Review and revoke contract approvals on a regular basis
- Verify the official domain before connecting your wallet
- Use a hardware wallet for significant amounts
- Start any new interaction with small amounts
Revocation of Permissions
Contracts that you have approved will continue to have access to your funds until they are revoked. Review and revoke old approvals periodically.
Contract Approvals
Before signing, check exactly what the transaction authorizes. Unlimited approvals are a common and avoidable risk.
Phishing and Fake Links
Cloned websites and paid ads mimic legitimate sites. Check the domain, use bookmarks, and be wary of urgent offers and freebies.
Hardware wallets
Physical wallets store their keys offline. For significant amounts, they are the most recommended layer of protection.
Bridge Safety
Bridges hold a great deal of value and have been the target of major attacks in the past. Choose audited routes and avoid moving everything at once.
Audited protocols
An audit reduces—but does not eliminate—risk. Check who performed the audit, when it was performed, and whether the code in production is the same as the code that was reviewed.
Wallet Security
Never share your recovery phrase. No legitimate service will ever ask for your seed phrase. Use a separate wallet for testing.
Best Operational Practices
Separate your wallets by purpose, start with small amounts, double-check addresses, and keep your device up to date.