On-chain Safety Education

Understand the chain.
Protect your wallet.

Onchain Diary is an independent Web3 safety education site: 115 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.

115 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01

Latest

Guides, tutorials, and deep dives.

The Ledger–CryptoBilis Hack: How Buying a Trusted Reseller Became the Attack

An authorized Ledger reseller was secretly acquired, its devices implanted, and an estimated $72M–$90M drained from buyers. The full timeline of a textbook supply-chain takeover.

Fake Crypto Job Offers Explained: The $1.5B Hack That Started With One Recruiter Message

How fake crypto job offers work: the Bybit/Safe breach, malicious coding tests, and the red flags every Web3 job seeker should know.

The $86M 'Ledger Hack': What the On-Chain Evidence Actually Shows

We independently traced the 10 flagged theft addresses in the October 9 Ledger wallet-draining reports. Verifiable losses: ~$27M — and Ledger's own response now points to a tampered-device supply chain, not a firmware breach.

Abstract Chain Is Shutting Down: Bridge Out Before December 15 or Lose Access

Igloo Inc., the parent of Pudgy Penguins, is shutting down its Abstract L2 on December 15, 2026. Funds not bridged out by then become inaccessible. Official exit routes, the fake-migration scam wave, and how this differs from Blast.

Crypto Task Scams Explained: How Easy-Money Jobs Turn Your Wallet Into a Money Mule

The task scam pays you first — that is the product. How the like-and-earn funnel documented by the FBI escalates into frozen withdrawals, and how the 'merchant account' job quietly turns your wallet into a laundering pipe for other victims' money.

Fake Crypto Support Scams Explained: Why Support That Contacts You First Is Always Fake

The FBI-documented scam where 'exchange employees' call you about an account problem. How the fake-admin funnel works, the three ways it ends — phishing, a malicious signature, or remote access — and the one rule that filters all of it.

Don't transact blind.

Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.

Start Reading →