Bitget Hack Explained: $351M Moved Without a Single Private Key Stolen
Bitget lost $351.6M when attackers spoofed transaction data inside its wallet backend. How the signing-layer attack worked, where the funds went, and what users should watch for.
On-chain Safety Education
Understand the chain.
Protect your wallet.
Onchain Diary is an independent Web3 safety education site: 104 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.
104 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01
Latest
Guides, tutorials, and deep dives.
Sep 25, 2026 Sep 25, 2026 Sep 23, 2026 Sep 21, 2026 Sep 20, 2026 Sep 19, 2026
Magic Eden Exploit Explained: A Dead Marketplace, Living Approvals, and a $5.7M Whitehat Rescue
NFTs left wallets for 0 ETH on September 25. The vulnerable contract was one Magic Eden stopped using in October 2024, but the approvals users gave it never expired.
Wallet Drained? What You Can Actually Do After a Drainer Attack
A drainer took your tokens or NFTs through a malicious signature. What still works — revocation, reporting, the recovery-scam second wave — and what does not.
Where Pig Butchering Money Actually Goes: Tracing a $73 Million Laundering Pipeline
A pig butchering 'investment platform' shows you fake gains while your money is already moving. Inside a fully documented $73 million laundering pipeline: shell company bank accounts, a Bahamian bank, conversion to USDT, and a wallet that received $341 million. What each hop looks like on-chain, where tracing dies, and the evidence chain that actually gets cases worked.
FomoPeek Malware: How a Read-Only Whale Tracker Stole iOS Private Keys
FomoPeek passed App Store review as a read-only whale tracker, then shipped an iOS kernel exploit that decrypts the Keychain. Timeline, forensics, victim steps.
zkSNARKs Auction Cleared 12,000 ZEC. Here Is What the Winners Actually Hold
Zcash's zkSNARKs identity auction drew 16,971 bids and cleared at 1.5 ZEC; the secondary floor sits near 2 ZEC on Zilkroad. But with ZSA not on mainnet, ownership lives in a database — and the market data is unverifiable by design.
§ 03
Test yourself
Reading is half. The other half is recall.
T-01
The Yellow Paper Quiz
Every question is drawn strictly from the Yellow Paper's own text. No outside knowledge required — if you've read it, you can pass it.
Take the quiz → T-02Onchain Security MBTI
Sixteen scenario questions sort you into one of sixteen security personas — hunter or prey — with a safety index and a shareable result card.
Find your type → § 04
Start learning
A few terms to get you going — the full glossary has 232+.
Don't transact blind.
Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.
Start Reading →