Staying safe

On chain there is no undo and no support desk that can get your funds back: once assets leave your wallet, they are almost never recovered. The habits below stop most common scams.

What this site does and does not do

• This site only reads the blockchain. It reads public on-chain data and displays it. It does not need your wallet, never asks you to sign anything, and never sends a transaction.
• This site will never ask for your seed phrase, private key or wallet password. It will not DM you, and there is no "site support" account.
• This site never asks you to send a transfer. There is no membership fee and nothing to pay: every feature is free once you register and sign in, with no wallet connection and no transaction hash to send anyone.
• So anyone asking you in this site's name to transfer, pay, "open a membership", "top up a difference" or "verify your wallet" is a scammer. Never trust a receiving address from a DM, a group chat or a screenshot.
• Every visit records your IP address, device and the pages you open, kept for 90 days. If you register, your notes, groups, tracked addresses, saved address and recent lookups are stored on this site's server, and every sign-in records your IP address and device. When you are not signed in, your saved address lives only in a cookie in your browser, sent with each request so the site can show its data; the site keeps no copy. Never put a private key, seed phrase or any password in a note.
• This is not the official AWAKE HELIX Protocol website. To transfer, approve or take part in the protocol, use the official dApp.

Know the official domains

• Bookmark both official dApps and only open them from those bookmarks. Do not reach them through search ads, group chat links or DMs. The official HELIX dApp went live on 2026-09-28; the official dApp's code points to awakehelix.io.
• Phishing sites use lookalike domains: one extra or missing letter, a different ending, or the real name buried inside a longer address. Check the domain in the address bar character by character.
• A page that looks identical proves nothing; interfaces are easy to copy. Only the domain tells you who you are talking to.

Spot fake support

• Legitimate teams and group admins do not DM you first, and never ask for a seed phrase or private key, or ask you to "verify", "sync" or "unlock" your wallet.
• "Send a small amount to verify", "pay a fee before you can withdraw" and "we can recover your assets" are all scams.
• If someone DMs you claiming to be an admin, check their identity back in the group instead of continuing in private.
• Refuse any request for remote access, screen sharing, or installing an unknown app or browser extension.

Understand approvals

Using a token in DeFi usually starts with an approval: you allow a contract to spend up to a certain amount of one token from your wallet. The approval is itself an on-chain transaction that your wallet asks you to confirm. Before you confirm, check three things:

1. Who is being approved

   The wallet prompt shows the approved address (the spender). It should be the official contract you are using. If in doubt, paste the address into Anubis Explorer and look it up: is it a contract, which address created it, does it have a normal transaction history?

2. How much

   Many dApps request an unlimited amount by default. An unlimited approval lets that contract spend your entire balance of the token in the future. If your wallet allows it, approving only what you need this time is safer.

3. Which token

   Make sure the token name and contract address are the ones you expect, not a lookalike token with the same name.

An approval does not expire when you close the page. For contracts you no longer use, you can revoke it by setting the allowance to 0; revoking is also a transaction and costs a fee.

Be careful with signature requests

Besides transactions, a site can ask you to sign a message. Signing costs nothing and looks harmless, but some signatures can also authorize someone to spend your tokens. If you cannot understand what you are signing, do not sign. This site never requests any signature.

Guard your seed phrase

• Write it on paper only and keep it offline. No screenshots, photos or cloud storage, and never send it to anyone, including people claiming to be family, friends or technicians.
• Never type it into a web page. Only your wallet app or extension needs it, and only when restoring a wallet.
• Consider keeping larger holdings in a separate wallet and using a smaller one for day-to-day actions.

If you think your wallet is compromised

1. Move to a new wallet now

   Create a new wallet (with a new seed phrase) and move whatever is left in the old one over as quickly as you can. Stop using the old wallet.

2. Revoke the old wallet's approvals

   If tokens that cannot be moved remain in the old wallet, set their allowances for unfamiliar contracts to 0.

3. Ignore recovery services

   People who offer to recover stolen funds are, in the vast majority of cases, the second round of the scam.

Finally

Be especially wary of anything promising guaranteed or risk-free returns. Crypto asset prices are highly volatile and you can lose all of your principal. Make your own decisions and take responsibility for your own risk.

To learn how to check on-chain numbers yourself, see Verify any number on the explorer.