On-chain Safety Education
Onchain Diary is an independent Web3 safety education site: 117 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.
Guides, tutorials, and deep dives.
An email shows an old password you actually used, claims malware recorded you through your webcam, and gives a Bitcoin address with a 48-hour countdown. Here is what on-chain research and FBI guidance say about these campaigns, the 2026 named-crew upgrade that adds real breach data, and exactly what to do in the first hour.
A victim in China was groomed on Bilibili by a 'medical aesthetics professional' persona and led into a fake mining pool called Onchain at fmmrvip.click. His first 300 USDC deposit withdrew fine. Then three harvests in three weeks. On-chain forensics match his story line by line — including the cruelest detail: the 2,513 USDC his 'friend' chipped in was wired from the scam's own treasury three minutes before it reached him.
An authorized Ledger reseller was secretly acquired, its devices implanted, and an estimated $72M–$90M drained from buyers. The full timeline of a textbook supply-chain takeover.
How fake crypto job offers work: the Bybit/Safe breach, malicious coding tests, and the red flags every Web3 job seeker should know.
We independently traced the 10 flagged theft addresses in the October 9 Ledger wallet-draining reports. Verifiable losses: ~$27M — and Ledger's own response now points to a tampered-device supply chain, not a firmware breach.
Igloo Inc., the parent of Pudgy Penguins, is shutting down its Abstract L2 on December 15, 2026. Funds not bridged out by then become inaccessible. Official exit routes, the fake-migration scam wave, and how this differs from Blast.
Reading is half. The other half is recall.
Every question is drawn strictly from the Yellow Paper's own text. No outside knowledge required — if you've read it, you can pass it.
Take the quiz → T-02Sixteen scenario questions sort you into one of sixteen security personas — hunter or prey — with a safety index and a shareable result card.
Find your type →A few terms to get you going — the full glossary has 232+.
Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.
Start Reading →