Wallet security checklist
Most wallet drains trace back to a handful of avoidable habits, not exotic hacks. Here are 10 concrete habits, grouped by what they protect.
Scan your wallet: free Watch 24/7 on Telegram
Public address only. No wallet connection. Nothing to sign.
Keep custody boundaries clean
1) Use a hardware wallet for anything beyond pocket money, it keeps your private key off any internet-connected device. 2) Split hot and cold: keep a hot wallet for daily use with only what you can afford to lose, and cold storage for the rest. 3) Never type your seed phrase into a website, a wallet-connect prompt, or a 'support agent', no legitimate wallet or dapp will ever ask for it.
Control what you've already approved
4) Revoke approvals you're not actively using, especially unlimited allowances to dapps you tried once and forgot. 5) Treat every open approval as a live liability, not a record of the past, it stays exploitable until you remove it, whether you used the dapp yesterday or two years ago.
Slow down at the signature
6) Read every wallet prompt for a Permit/Permit2 domain, an EIP-7702 authorization, or an unfamiliar spender before signing, these are the signatures drainers rely on most. 7) Use transaction simulation when your wallet offers it, so you see what a signature actually does before you approve it. 8) Verify the domain matches exactly, letter for letter, before connecting a wallet, lookalike domains are the most common delivery method for fake mint and claim pages.
Watch continuously, not once
9) Bookmark the official sites you use instead of searching for them each time, since search ads and typo-squats routinely outrank the real thing. 10) A one-time cleanup goes stale the moment you sign your next approval, monitor your address so you're alerted the instant a new risky approval appears or a contract you already approved gets flagged malicious.
FAQ
Do I need all 10 habits, or just a few?
The custody habits (hardware wallet, hot/cold split, never share your seed) matter most since they prevent the worst outcomes outright. The rest compound: each one closes a door a drainer would otherwise use.
What's the fastest way to check where I stand today?
Scan your public address for a free read of every current approval and how risky each one is, then install the Guardian browser extension so the next risky signature gets caught before you sign it, not after.