On-chain Safety Education

Understand the chain.
Protect your wallet.

Onchain Diary is an independent Web3 safety education site: 108 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.

108 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01

Latest

Guides, tutorials, and deep dives.

Blast L2 Is Shutting Down: How to Withdraw Safely Before October 26

Blast announced on October 2, 2026 that it is winding down its Ethereum L2. Users have until October 26 to withdraw through the normal interface. Full timeline, the L1 bridge-contract path after the deadline, and the scam wave every shutdown attracts.

NEAR Intents Hack Explained: How a Signed-Note Bug Drained $3.87M

NEAR Intents lost $3.87 million on October 1, 2026 when a bug in its Omni deposit-and-withdrawal system let an attacker withdraw funds with valid signed notes. Full timeline, where the money went, and why no user signature could have prevented it.

ClickFix Scam Explained: How a Fake CAPTCHA Drains Crypto Wallets

ClickFix shows you a fake CAPTCHA, then talks you into pasting one command into Run or Terminal. Here is the full chain, the on-chain dead drop, and what it does to wallets.

GIWA Fake RPC Scam: Full Forensics of a 771-ETH Fake Bridge Built From Verified Code

1331 depositors, 771 ETH, 14 hours. How a proxy pointing at verified OptimismPortal2 source, a fake RPC, and a coordinated distribution push drained users bridging to a mainnet that doesn't exist.

Bitget Hack Explained: $351M Moved Without a Single Private Key Stolen

Bitget lost $351.6M when attackers spoofed transaction data inside its wallet backend. How the signing-layer attack worked, where the funds went, and what users should watch for.

Magic Eden Exploit Explained: A Dead Marketplace, Living Approvals, and a $5.7M Whitehat Rescue

NFTs left wallets for 0 ETH on September 25. The vulnerable contract was one Magic Eden stopped using in October 2024, but the approvals users gave it never expired.

Don't transact blind.

Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.

Start Reading →