On-chain Safety Education

Understand the chain.
Protect your wallet.

Onchain Diary is an independent Web3 safety education site: 118 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.

118 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01

Latest

Guides, tutorials, and deep dives.

Ledger Implants Reach European Retail: Two MediaMarkt Devices, One 'Eurasian Version' Antenna

A buyer found hardware implants in two Ledger Nano X wallets bought at different MediaMarkt stores in Europe. Mark Karpelès identified the devices as carrying an earlier implant design — with an antenna labeled 'Eurasian version.' Within 48 hours, MediaMarktSaturn delisted Ledger group-wide, Ledger asked Southeast Asia and Hong Kong resellers to halt sales, and Bitquery's tally reached $102 million. Here is what is verified and what isn't.

Bitcoin Blackmail Emails Explained: The Password Is Real, the Video Is Not

An email shows an old password you actually used, claims malware recorded you through your webcam, and gives a Bitcoin address with a 48-hour countdown. Here is what on-chain research and FBI guidance say about these campaigns, the 2026 named-crew upgrade that adds real breach data, and exactly what to do in the first hour.

FMMR Mining Scam: A Fake Pool Farmed 151 Wallets for Over 1.5M USDC — and the Permits Are Still Live Until 2030

A victim in China was groomed on Bilibili by a 'medical aesthetics professional' persona and led into a fake mining pool called Onchain at fmmrvip.click. His first 300 USDC deposit withdrew fine. Then three harvests in three weeks. On-chain forensics match his story line by line — including the cruelest detail: the 2,513 USDC his 'friend' chipped in was wired from the scam's own treasury three minutes before it reached him.

The Ledger–CryptoBilis Hack: How Buying a Trusted Reseller Became the Attack

An authorized Ledger reseller was secretly acquired, its devices implanted, and an estimated $72M–$90M drained from buyers. The full timeline of a textbook supply-chain takeover.

Fake Crypto Job Offers Explained: The $1.5B Hack That Started With One Recruiter Message

How fake crypto job offers work: the Bybit/Safe breach, malicious coding tests, and the red flags every Web3 job seeker should know.

The $86M 'Ledger Hack': What the On-Chain Evidence Actually Shows

We independently traced the 10 flagged theft addresses in the October 9 Ledger wallet-draining reports. Verifiable losses: ~$27M — and Ledger's own response now points to a tampered-device supply chain, not a firmware breach.

Don't transact blind.

Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.

Start Reading →