Staying safe

On chain there is no undo and no support desk that can get your funds back: once assets leave your wallet, they are almost never recovered. The habits below stop most common scams.

What this site does and does not do

• This site only reads the blockchain. It reads public on-chain data and displays it. It does not need your wallet, never asks you to sign anything, and never sends a transaction.
• This site will never ask for your seed phrase, private key or wallet password. It will not DM you, and there is no "site support" account.
• The only transfer this site involves is a membership payment, and only you can start it: sign in, create an order under "Membership plans" on My account, and the order page shows an exact amount with its own decimal tail and a receiving address. Send exactly that amount to that address from your own wallet, and membership opens by itself once the transfer is confirmed on chain. You never connect a wallet and never need to send anyone a transaction hash.
• Outside that flow, anyone asking you in this site's name to transfer, "top up a difference" or "verify your wallet" is a scammer. When you pay, trust only the amount and address on the order page you opened yourself, never an address from a DM, a group chat or a screenshot.
• If you register, your notes, groups, tracked addresses and recent lookups are stored on this site's server, and every sign-in records your IP address and device. Never put a private key, seed phrase or any password in a note.
• This is not the official AWAKE HELIX Protocol website, and membership fees have nothing to do with the project team. To transfer, approve or take part in the protocol, use the official dApp.

How to reach the author

The only way to contact Xiaoming, who builds this site, is a private message on DeBox: DeBox ID 5cwdkdxk, address 0x79420ff783119c56adf122a7c0e2375801c68209. "Contact Xiaoming" in the header opens his DeBox profile in one tap, or shows a code to scan with your phone.

• Xiaoming never messages you first; he only replies to messages you send him.
• He never asks for private keys, seed phrases or any password, and never asks you to pay any address. Membership is paid only on your own order page.
• Anyone claiming to be Xiaoming, site support or an admin from any other account is an impersonator. When you check, match the DeBox ID, and at least the first 6 and last 6 characters of the address exactly.

Know the official domains

• Bookmark the official dApp and only open it from that bookmark. Do not reach it through search ads, group chat links or DMs.
• Phishing sites use lookalike domains: one extra or missing letter, a different ending, or the real name buried inside a longer address. Check the domain in the address bar character by character.
• A page that looks identical proves nothing; interfaces are easy to copy. Only the domain tells you who you are talking to.

Spot fake support

• Legitimate teams and group admins do not DM you first, and never ask for a seed phrase or private key, or ask you to "verify", "sync" or "unlock" your wallet.
• "Send a small amount to verify", "pay a fee before you can withdraw" and "we can recover your assets" are all scams.
• If someone DMs you claiming to be an admin, check their identity back in the group instead of continuing in private.
• Refuse any request for remote access, screen sharing, or installing an unknown app or browser extension.

Understand approvals

Using a token in DeFi usually starts with an approval: you allow a contract to spend up to a certain amount of one token from your wallet. The approval is itself an on-chain transaction that your wallet asks you to confirm. Before you confirm, check three things:

1. Who is being approved

   The wallet prompt shows the approved address (the spender). It should be the official contract you are using. If in doubt, paste the address into Anubis Explorer and look it up: is it a contract, which address created it, does it have a normal transaction history?

2. How much

   Many dApps request an unlimited amount by default. An unlimited approval lets that contract spend your entire balance of the token in the future. If your wallet allows it, approving only what you need this time is safer.

3. Which token

   Make sure the token name and contract address are the ones you expect, not a lookalike token with the same name.

An approval does not expire when you close the page. For contracts you no longer use, you can revoke it by setting the allowance to 0; revoking is also a transaction and costs a fee.

Be careful with signature requests

Besides transactions, a site can ask you to sign a message. Signing costs nothing and looks harmless, but some signatures can also authorize someone to spend your tokens. If you cannot understand what you are signing, do not sign. This site never requests any signature.

Guard your seed phrase

• Write it on paper only and keep it offline. No screenshots, photos or cloud storage, and never send it to anyone, including people claiming to be family, friends or technicians.
• Never type it into a web page. Only your wallet app or extension needs it, and only when restoring a wallet.
• Consider keeping larger holdings in a separate wallet and using a smaller one for day-to-day actions.

If you think your wallet is compromised

1. Move to a new wallet now

   Create a new wallet (with a new seed phrase) and move whatever is left in the old one over as quickly as you can. Stop using the old wallet.

2. Revoke the old wallet's approvals

   If tokens that cannot be moved remain in the old wallet, set their allowances for unfamiliar contracts to 0.

3. Ignore recovery services

   People who offer to recover stolen funds are, in the vast majority of cases, the second round of the scam.

Finally

Be especially wary of anything promising guaranteed or risk-free returns. Crypto asset prices are highly volatile and you can lose all of your principal. Make your own decisions and take responsibility for your own risk.

To learn how to check on-chain numbers yourself, see Verify any number on the explorer.