ClickFix Scam Explained: How a Fake CAPTCHA Drains Crypto Wallets
ClickFix shows you a fake CAPTCHA, then talks you into pasting one command into Run or Terminal. Here is the full chain, the on-chain dead drop, and what it does to wallets.
On-chain Safety Education
Understand the chain.
Protect your wallet.
Onchain Diary is an independent Web3 safety education site: 106 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.
106 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01
Latest
Guides, tutorials, and deep dives.
Sep 27, 2026 Sep 27, 2026 Sep 25, 2026 Sep 25, 2026 Sep 23, 2026 Sep 21, 2026
GIWA Fake RPC Scam: Full Forensics of a 771-ETH Fake Bridge Built From Verified Code
1331 depositors, 771 ETH, 14 hours. How a proxy pointing at verified OptimismPortal2 source, a fake RPC, and a coordinated distribution push drained users bridging to a mainnet that doesn't exist.
Bitget Hack Explained: $351M Moved Without a Single Private Key Stolen
Bitget lost $351.6M when attackers spoofed transaction data inside its wallet backend. How the signing-layer attack worked, where the funds went, and what users should watch for.
Magic Eden Exploit Explained: A Dead Marketplace, Living Approvals, and a $5.7M Whitehat Rescue
NFTs left wallets for 0 ETH on September 25. The vulnerable contract was one Magic Eden stopped using in October 2024, but the approvals users gave it never expired.
Wallet Drained? What You Can Actually Do After a Drainer Attack
A drainer took your tokens or NFTs through a malicious signature. What still works — revocation, reporting, the recovery-scam second wave — and what does not.
Where Pig Butchering Money Actually Goes: Tracing a $73 Million Laundering Pipeline
A pig butchering 'investment platform' shows you fake gains while your money is already moving. Inside a fully documented $73 million laundering pipeline: shell company bank accounts, a Bahamian bank, conversion to USDT, and a wallet that received $341 million. What each hop looks like on-chain, where tracing dies, and the evidence chain that actually gets cases worked.
§ 03
Test yourself
Reading is half. The other half is recall.
T-01
The Yellow Paper Quiz
Every question is drawn strictly from the Yellow Paper's own text. No outside knowledge required — if you've read it, you can pass it.
Take the quiz → T-02Onchain Security MBTI
Sixteen scenario questions sort you into one of sixteen security personas — hunter or prey — with a safety index and a shareable result card.
Find your type → § 04
Start learning
A few terms to get you going — the full glossary has 232+.
Don't transact blind.
Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.
Start Reading →