On-chain Safety Education

Understand the chain.
Protect your wallet.

Onchain Diary is an independent Web3 safety education site: 77 deep-dive articles and a 220-term glossary on crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.

81 Articles
220 Glossary Terms
0 Sign-ups Required
§ 01

Latest

Guides, tutorials, and deep dives.

Airdrop Snapshot Scams: Why 'Verify Your Wallet Before the Deadline' Is Always Phishing

Real airdrop snapshots record on-chain state at a block height — no action from you, ever. Scam campaigns invert that mechanic with countdown timers and 'verify your wallet' pages riding real project announcements. How snapshots actually work, the deadline-pressure playbook, zombie campaigns that outlive their projects, and the rule that eligibility can always be checked without connecting a wallet.

Hardware Wallet Scams Explained: Fake Devices, Phishing Letters, and the Setup Traps

Hardware wallets are sold as the safest way to store crypto — until the purchase itself becomes the attack. Here are the six scam patterns, real cases, and a buy-side checklist.

Fake Crypto Wallet Apps: How Scam Wallets in App Stores Steal Funds

Fake wallet apps and malicious browser extensions pass app store review, carry five-star reviews, and harvest seed phrases from the first 'import' screen. How the distribution works, the four theft mechanisms hidden inside fake wallets, why store presence proves nothing, and the verification steps before trusting any wallet with funds.

Crypto Scams on X, Telegram, and Email: The Full Attack Chain Explained

Fake moderator DMs that install Windows malware, Telegram friends who slowly sell you a honeypot, airdrop emails from lookalike domains — how the social engineering playbook works at each step.

How to Read a Smart Contract Audit Report: A Practical Guide

An audit badge tells you almost nothing on its own. Learn how to read scope, severity levels, and fix statuses in a smart contract audit report — and spot the projects that only look audited.

Telegram Airdrop Bot Scams: How Tap-to-Earn Games Drain Real Wallets

Tap-to-earn games like Notcoin, DOGS, and Hamster Kombat onboarded tens of millions of Telegram users to crypto airdrops — and scammers industrialized fake bots and mini-apps to hunt them. The five scam patterns inside Telegram airdrop bots, how legitimate campaigns actually work, and the checks that separate a real bot from a wallet drainer.

Don't transact blind.

Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.

Start Reading →