On-chain Safety Education

Understand the chain.
Protect your wallet.

Onchain Diary is an independent Web3 safety education site: 93 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.

93 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01

Latest

Guides, tutorials, and deep dives.

Hormuz Strait Crypto Toll Scams: Fake 'Safe Passage' Messages, Explained

As the Strait of Hormuz crisis drags on, shipping companies are receiving messages that promise safe transit in exchange for Bitcoin or USDT — sent by people impersonating Iranian officials. This is the rare crypto scam aimed at shipmasters and charterers rather than retail investors, and it works because Iran really is charging crypto tolls. How the extortion messages work, what's real and what's fake in the maritime payment landscape, how firms like TRM Labs trace the flows, and the verification checklist for anyone in logistics receiving a crypto transit demand.

Khabib's Crypto Deals, Explained: Gyms, NFTs, and the "Regulated Tokenization" Pitch

Searches for 'Khabib crypto scam' are spiking — but the honest answer is more interesting than a yes or no. Khabib Nurmagomedov's crypto history runs from GoMining's 'hashrate-backed' NFTs (2023) to a papakha NFT drop that drew backlash, to a Dubai deal with MultiBank Group promising a $10B 'regulated tokenized sports ecosystem' of 30+ gyms on the Mavryk blockchain. This guide separates what's documented from what's debated, explains what 'regulated tokenization' actually promises, and gives you the seven-question checklist for evaluating any celebrity token deal — the same one that would have flagged every celebrity coin that imploded.

The Telegram Crypto Pitch, Read Back to the Scammer: A Real Chat, Dissected Line by Line

A real Telegram solicitation captured this week: a stranger pitching a token 'launching tonight at 19:00 on Sushi, Base.' We annotate every beat of the script — and what happened when we pitched the same script back at him.

How to Report a Crypto Scam: IC3, Exchange Freeze Requests, and What Actually Happens After You File

A field guide to reporting stolen crypto: how to assemble the evidence package, file the FBI IC3 complaint field by field, send exchange freeze requests that get read, and what to realistically expect after you hit submit.

Public Key vs Private Key vs Wallet Address: The Difference Scammers Hope You Never Learn

Every wallet scam that has ever worked relies on one thing: the victim not knowing which of the three wallet strings does what. The one-way chain from seed phrase to private key to public key to address, what leaking each one actually costs you, and the four attack patterns — fake verification, seed-phrase phishing, blind signing, and address poisoning — that exist only because people blur these boundaries.

Unbacked Mint Attacks: How Fake Receipts Drained Liquid Network and Symbiosis

In one week of September 2026, two protocols lost real Bitcoin to the same trick: minting unbacked wrapped assets with fake deposit receipts. A field dissection of the Liquid Network and Symbiosis exploits.

Don't transact blind.

Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.

Start Reading →