← All films
Safety / Explained visually
When a wallet may be compromised
A calm incident-response sequence for suspicious signatures, exposed phrases, malicious approvals, and stolen funds.
Prefer to read?
The idea,
in words.
Stop using the suspect route
Stop interacting with the suspicious site. Avoid further signatures and use a trusted device to assess what happened.
Approval or exposed keys?
A harmful token approval and an exposed recovery phrase need different responses. Revoking an approval cannot make exposed keys secret again.
Use a fresh secure wallet
If keys were exposed, remaining assets may need a fresh wallet with a new backup. Automated thieves can race transfers, so seek trusted technical help.
Keep evidence. Avoid promises.
Keep transaction identifiers and messages for official reporting. Avoid anyone promising guaranteed recovery in return for an upfront fee.