Infostealer Malware Explained: How Stolen Sessions Drain Crypto Accounts
Infostealers grab browser cookies, saved passwords, and wallet vaults in seconds. The full crypto kill chain, the 2025 takedowns, and the defenses that work.
On-chain Safety Education
Understand the chain.
Protect your wallet.
Onchain Diary is an independent Web3 safety education site: 77 deep-dive articles and a 220-term glossary on crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.
83 Articles
220 Glossary Terms
0 Sign-ups Required
§ 01
Latest
Guides, tutorials, and deep dives.
Sep 7, 2026 Sep 7, 2026 Sep 2, 2026 Aug 31, 2026 Aug 30, 2026 Aug 29, 2026
Crypto Stolen? The First 24 Hours: A Step-by-Step Emergency Runbook
Your wallet was drained or your exchange account emptied. What you do in the next 24 hours decides whether the theft is survivable: triage the intrusion type, secure remaining assets in the right order, build the evidence package, and get freeze requests out before funds reach a mixer.
Airdrop Snapshot Scams: Why 'Verify Your Wallet Before the Deadline' Is Always Phishing
Real airdrop snapshots record on-chain state at a block height — no action from you, ever. Scam campaigns invert that mechanic with countdown timers and 'verify your wallet' pages riding real project announcements. How snapshots actually work, the deadline-pressure playbook, zombie campaigns that outlive their projects, and the rule that eligibility can always be checked without connecting a wallet.
Hardware Wallet Scams Explained: Fake Devices, Phishing Letters, and the Setup Traps
Hardware wallets are sold as the safest way to store crypto — until the purchase itself becomes the attack. Here are the six scam patterns, real cases, and a buy-side checklist.
Fake Crypto Wallet Apps: How Scam Wallets in App Stores Steal Funds
Fake wallet apps and malicious browser extensions pass app store review, carry five-star reviews, and harvest seed phrases from the first 'import' screen. How the distribution works, the four theft mechanisms hidden inside fake wallets, why store presence proves nothing, and the verification steps before trusting any wallet with funds.
Crypto Scams on X, Telegram, and Email: The Full Attack Chain Explained
Fake moderator DMs that install Windows malware, Telegram friends who slowly sell you a honeypot, airdrop emails from lookalike domains — how the social engineering playbook works at each step.
§ 03
Test yourself
Reading is half. The other half is recall.
T-01
The Yellow Paper Quiz
Every question is drawn strictly from the Yellow Paper's own text. No outside knowledge required — if you've read it, you can pass it.
Take the quiz → T-02Onchain Security MBTI
Sixteen scenario questions sort you into one of sixteen security personas — hunter or prey — with a safety index and a shareable result card.
Find your type → § 04
Start learning
A few terms to get you going — the full glossary has 220+.
Algorithmic Stablecoin DeFi Blob-Carrying Transaction (EIP-4844) Layer 2 Bonding Curve Tokenomics Bundler Smart Contract Censorship Resistance Security Collateral Factor DeFi Cross-Chain Bridge DeFi Eclipse Attack Security EigenLayer (Restaking) DeFi ERC-4337 (Account Abstraction) Smart Contract Finney Attack Security Interest Rate Model DeFi
Don't transact blind.
Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.
Start Reading →