# Onchain Diary — Full Content Index

> Complete index of all Web3 glossary terms and articles on Onchain Diary.
> Total: 232 glossary terms, 129 articles.

## Featured Guide
- [Tools](/tools/) — free onchain security tools hub: BIP-39 wordlist, Anti-Scam Yellow Paper + quiz, Security Persona Test, MCP server for AI assistants (bilingual)
- [Airdrop Safety: The Complete Guide](/airdrop-safety/) — how fake airdrops work and how to claim real ones safely
- [The Ledger Supply-Chain Hack Case File](/ledger-hack/) — reported reseller ownership change, suspected German retail implants, on-chain estimates, postmortem
- [Ledger 供应链攻击全案卷宗](/zh/ledger-hack/) — 中文版：股权变更报道、疑似植入、链上估算、复盘
- [Crypto Scam Recovery Help: The Victim's Road Map](/recovery-help/) — first-24-hours emergency runbook, how to report (IC3 + exchange freeze requests), tracing stolen funds on-chain, what real recovery looks like, fake recovery services
- [币被骗了怎么办：受害者行动路线图](/zh/recovery-help/) — 中文版：黄金 24 小时止损、报案与止付、链上追踪、追回真实路径、二次收割骗局识别
- [Onchain Anti-Scam Yellow Paper 链上防骗黄皮书](/yellowpaper/) — bilingual (en/zh) systematic manual: scam taxonomy, forensics primer, layered defense (free PDF; LaTeX source: github.com/UZEN-Labs/antifraud-yellowpaper)
- [Onchain Security MBTI](/security-mbti/) — 16-scenario persona test: four axes, 16 personas, safety score (interactive, bilingual)

## Articles
- [Electrum's Server Swapped the Transaction, Then the Fee Bump Made You Sign It](/articles/electrum-server-swapped-transaction-fee-bump/) — A malicious Electrum server replaced a pending payment with one paying itself. Version 4.8.3 now verifies signatures. Upgrade and verify addresses.
- [Keystone's Breach Leaked Shipping Addresses, Not Seed Phrases. That Is Still Bad.](/articles/keystone-customer-data-breach-shipping-addresses/) — Keystone says a third party took names, addresses and order details after unauthorised access on Oct 20. No seed or card data. What to do now.
- [The Initia Hack: A Chain Halted Itself Mid-Attack as an 'Infinimint' Exploit Bridged Out $2.7M](/articles/initia-halt-mint-exploit-explained/) — Initia halted its L1 and all rollups on Oct 23 after an attacker spoofed MoveVM state, credited himself unbacked tokens and bridged ~$2.7M in WETH, AUSD0 and USDC to Ethereum. What is confirmed, what is not.
- [The NEM Token Hack: A Sell-Tracking Bug Let an Attacker Drain a PancakeSwap Pool 42 Times](/articles/nem-token-contract-exploit-explained/) — The NEM (NemTokenV2) token on BNB Chain lost $821,920 to a contract logic flaw. How the pendingLpSellRecycle accounting bug was looped 42 times against PancakeSwap.
- [The Fearless Wallet Hack: A Backdoor Hid in the Extension's Open Source for 20 Months](/articles/fearless-wallet-extension-key-leak-explained/) — The Fearless Wallet browser extension sent private keys to an attacker server for 20 months. How the TON-camouflaged backdoor worked and what victims should do.
- [The Ledger Implant Case: What Is Confirmed, What Is Estimated, What Is Still Open](/articles/ledger-cryptobilis-hack-final-recap/) — Bitquery's October 16 estimate: $102M from 335 wallets on six chains, unconfirmed by Ledger. The device, the money trail, and what to check now.
- [A Sui Bridge Claim Bot Just Paid the Cetus Hacker — 17 Months After the Freeze](/articles/sui-bridge-claim-bot-cetus-hacker/) — A rescue bot finalized the Cetus hacker's 17-month-old bridge claims and paid out $392K. Why dormant bridge claims are live liabilities for every chain.
- [Best Ways to Verify Token Addresses: 6 Checks That Hold Up Against Real Scams](/articles/best-ways-to-verify-token-addresses/) — Six ways to verify a token address before you buy: official-source cross-checks, explorer verification, scam scanners, and how scammers fake each signal.
- [Fake Crypto Exchange Scams: Why the Balance Grows but the Withdrawal Never Comes](/articles/fake-crypto-exchange-withdrawal-scam/) — The dashboard shows profit, the withdrawal is frozen, and support wants a fee. How fake crypto exchanges work, the deposit-address test that exposes them, and what to do now.
- [The Task Scammer Who Lost 60 BTC to a Tampered Ledger Wallet](/articles/ledger-task-scammer-loses-60-btc/) — A task-scam operator kept 60 BTC of stolen proceeds in tampered Ledger wallets — drained in a single morning. A rare look at scammers getting scammed.
- [Denmark CPR Breach: 8.8M Identities Sat Behind a '123456' Password](/articles/denmark-cpr-breach-123456/) — Millions of citizen records with trivially weak passwords — and crypto accounts in the blast radius. What the breach exposed and what to do now.
- [A German Buyer Reported Implants in Two MediaMarkt Ledger Devices](/articles/ledger-mediamarkt-implant-europe/) — A German customer reported suspected implants in two MediaMarkt purchases. Ledger had not examined them, and its German stock checks found no tampering.
- [Bitcoin Blackmail Emails Explained: The Password Is Real, the Video Is Not](/articles/bitcoin-blackmail-email-scam/) — Got an email with your real password demanding Bitcoin? The webcam video is fake. Here's how the scam works and what to do in the first hour.
- [FMMR Mining Scam: A Fake Pool Farmed 151 Wallets for Over 1.5M USDC — and the Permits Are Still Live Until 2030](/articles/fmmr-fake-mining-pool-scam/) — FMMR Mining is a fake pool that farmed 151 wallets for 1.5M USDC. Victims signed permits valid until 2030 — if you connected a wallet, revoke now.
- [CryptoBilis and the Ledger Tampering: A Reported Ownership Change](/articles/ledger-cryptobilis-supply-chain-hack/) — Ledger said the October 9 cases it verified involved CryptoBilis-sold devices; a former co-founder reported an ownership change. What the evidence does not show.
- [Fake Crypto Job Offers Explained: The $1.5B Hack That Started With One Recruiter Message](/articles/fake-crypto-job-offer-scams/) — Recruiters offering crypto jobs with salary in USDT — then the 'work platform' takes your deposit. How fake job offers drain applicants, step by step.
- [The Early '$86M Ledger Hack' Estimate: What On-Chain Tracing Shows](/articles/ledger-drain-address-poisoning/) — Multiple Ledger users were drained in October 2026. Early estimates used different methods and totals. What the on-chain tracing does, and does not, establish.
- [Abstract Chain Is Shutting Down: Bridge Out Before December 15 or Lose Access](/articles/abstract-chain-shutdown-migration-guide/) — Abstract Chain shuts down December 15, 2026 — assets left behind become permanently inaccessible. Official bridges, deadlines, and migration steps.
- [Crypto Task Scams Explained: How Easy-Money Jobs Turn Your Wallet Into a Money Mule](/articles/crypto-task-scam-money-mule/) — Like-and-earn job offers turn your wallet into a mule pipeline for stolen funds. How task scams groom, pay small, then trap — and the exit signs.
- [Fake Crypto Support Scams Explained: Why Support That Contacts You First Is Always Fake](/articles/fake-customer-support-scams/) — A comment replies 'DM for support' under your post — the account is a scammer. How fake support works and why real teams never ask for what they ask.
- [MetaMask Infrastructure Incident Explained: Why Your Wallet Was Never at Risk](/articles/metamask-infrastructure-incident-explained/) — Validators began exiting after a disclosed incident — but wallets were never exposed. The key-splitting architecture that protected user funds.
- [Blast L2 Is Shutting Down: How to Withdraw Safely Before October 26](/articles/blast-l2-shutdown-withdrawal-guide/) — Blast is shutting down its chain. What happens to assets left on it, which bridges still work, and the withdrawal steps to take before the window closes.
- [NEAR Intents Hack Explained: How a Signed-Note Bug Drained $3.87M](/articles/near-intents-hack-explained/) — A signed-note bug let an attacker withdraw $3.87M without any user signature. Full timeline, where the money went, and why users couldn't have stopped it.
- [ClickFix Scam Explained: How a Fake CAPTCHA Drains Crypto Wallets](/articles/clickfix-fake-captcha-scam-explained/) — A fake 'verify you are human' page tells you to press Win+R and paste a command. That command installs malware that drains wallets. How the trap works.
- [GIWA Fake RPC Scam: Full Forensics of a 771-ETH Fake Bridge Built From Verified Code](/articles/giwa-fake-rpc-bridge-scam-explained/) — A verified-code proxy, a fake RPC, a mainnet that doesn't exist. How the GIWA fake bridge drained depositors — and the check that catches copies.
- [Bitget Hack Explained: $387M Moved Without a Single Private Key Stolen](/articles/bitget-hot-wallet-hack-explained/) — Bitget lost $387M when attackers fed spoofed data into its wallet backend — no private keys were stolen. How it worked and what users should watch.
- [Magic Eden Exploit Explained: A Dead Marketplace, Living Approvals, and a $5.7M Whitehat Rescue](/articles/magic-eden-payment-processor-exploit/) — NFTs left wallets for 0 ETH via a contract Magic Eden stopped using — the approvals never expired. How the exploit worked and the whitehat rescue.
- [Wallet Drained? What You Can Actually Do After a Drainer Attack](/articles/after-wallet-drainer-what-now/) — A malicious signature took your tokens or NFTs. What still works — revocation, reporting, the recovery-scam second wave — and what doesn't.
- [Where Pig Butchering Money Actually Goes: Tracing a $73 Million Laundering Pipeline](/articles/pig-butchering-crypto-tracing/) — Fake platforms show gains while deposits move through shells and USDT. Inside a documented $73M laundering pipeline — each hop as seen on-chain.
- [FomoPeek Malware: How a Read-Only Whale Tracker Stole iOS Private Keys](/articles/fomopeek-app-malware-explained/) — An iOS app passed review, then shipped kernel-level wallet theft. How the FomoPeek attack worked, who it hit, and what to check before any airdrop app.
- [zkSNARKs Auction Cleared 12,000 ZEC. Here Is What the Winners Actually Hold](/articles/zksnarks-auction-what-bidders-bought/) — Zcash's zkSNARKs identity auction cleared 12,000 ZEC. But ZSA isn't on mainnet — what winners actually hold, and why the data is unverifiable.
- [Zcash Cold Storage: How to Store ZEC Offline in 2026](/articles/zcash-cold-storage-guide/) — Transparent addresses work anywhere; shielded mostly don't. What Trezor and Ledger actually support, three working setups, and the scams to dodge.
- [BNB Chain Token Safety: How to Avoid Scams on Binance's Chain](/articles/bnb-chain-token-safety/) — Scam tokens follow BNB Chain's cheap fees everywhere. Check contract, owner powers, holders, and liquidity before you buy — the free 5-step check.
- [Polygon Token Safety: How to Avoid Scams on the MATIC Chain](/articles/polygon-token-safety/) — Every Ethereum scam pattern follows cheap fees onto Polygon. Check contract, owner powers, holders, and liquidity — the free 5-step check.
- [Zcash Whitelist Season: One Takes Your ZEC, One Takes Your Identity Map](/articles/zcash-whitelist-what-you-hand-over/) — One project charged for a testnet NFT; another collects identity-to-address maps for free. What each whitelist model actually takes from you.
- [Arc Mainnet Day-One Risks: Copycat Tokens and Fake Airdrops in the First Hours](/articles/arc-mainnet-day-one-risks/) — Circle's stablecoin L1 went live and copycats appeared within hours — duplicate tickers, pump spikes, fake drops. A field guide from day-one data.
- [Hormuz Strait Crypto Toll Scams: Fake 'Safe Passage' Messages, Explained](/articles/hormuz-strait-crypto-scam/) — Ship operators get messages demanding crypto for transit — some impersonate real tolls, some are pure extortion. What's real, what's fake, how to verify.
- [Khabib's Crypto Deals, Explained: Gyms, NFTs, and the "Regulated Tokenization" Pitch](/articles/khabib-crypto-deals-explained/) — Hashrate-backed NFTs, a papakha drop, a $10B tokenized-gym pitch — we separate what's documented from what's promised in Khabib's crypto deals.
- [The Telegram Crypto Pitch, Read Back to the Scammer: A Real Chat, Dissected Line by Line](/articles/telegram-crypto-pitch-script/) — A stranger pitches a token 'launching tonight on Base.' We annotate every beat of the real script — and what happened when we pitched it back at him.
- [How to Report a Crypto Scam: IC3, Exchange Freeze Requests, and What Actually Happens After You File](/articles/how-to-report-crypto-scam/) — Assemble the evidence, file the IC3 complaint field by field, send exchange freeze requests that get read — and what to expect after you submit.
- [Public Key vs Private Key vs Wallet Address: The Difference Scammers Hope You Never Learn](/articles/public-key-private-key-wallet-address/) — Every wallet scam relies on you not knowing which string is which. The difference between the three — and what each one can cost you if leaked.
- [Unbacked Mint Attacks: How Fake Receipts Drained Liquid Network and Symbiosis](/articles/unbacked-mint-attacks-explained/) — Mint wrapped assets against deposit receipts that never happened. How Liquid Network and Symbiosis lost real BTC to the same trick in one week.
- [Why You Should Never Generate a Seed Phrase Online](/articles/seed-phrase-generator-risk/) — Online generators either log the phrase or trust the browser with randomness. How real wallets create seed phrases — and the fix if you already used one.
- [How to Store a Seed Phrase: Steel, Paper, Copies, and Inheritance](/articles/seed-phrase-storage/) — A backup survives only what it can survive — fire, flood, theft, your own memory. Paper done right, when steel earns its price, and copies that don't leak.
- [Where Stolen Crypto Goes Dark: Privacy Pools and What Tracing Can Still Do](/articles/stolen-crypto-privacy-pools/) — The trail usually ends in a shielded pool or mixer. How privacy layers change fund tracing — and what victims can still realistically do after that.
- [When 'Encrypted' Is Just a Word: A 3-Step Reality Check for Crypto Privacy Claims](/articles/encrypted-claims-reality-check/) — A generative-art project claimed zk-powered locks; the data sat in plain HTML. How we checked — a method you can reuse on any 'zero-knowledge' mint.
- [Infostealer Malware Explained: How Stolen Sessions Drain Crypto Accounts](/articles/infostealer-malware-crypto-attacks/) — One infected download grabs session cookies, saved passwords, and wallet vaults. The full crypto kill chain — and the defenses that actually work.
- [Crypto Stolen? The First 24 Hours: A Step-by-Step Emergency Runbook](/articles/stolen-crypto-first-24-hours/) — Triage the intrusion, secure what's left in the right order, build evidence, fire freeze requests before the mixer. The emergency runbook, in order.
- [Airdrop Snapshot Scams: Why 'Verify Your Wallet Before the Deadline' Is Always Phishing](/articles/airdrop-snapshot-verification-scams/) — Real snapshots need no action from you, ever. How snapshot scams use countdown pressure and why eligibility can always be checked without a wallet.
- [Hardware Wallet Scams Explained: Fake Devices, Phishing Letters, and the Setup Traps](/articles/hardware-wallet-scams-explained/) — The purchase itself can be the attack — tampered devices, fake letters, pre-filled recovery sheets. Six scam patterns and a buy-side checklist.
- [Fake Crypto Wallet Apps: How Scam Wallets in App Stores Steal Funds](/articles/fake-crypto-wallet-apps/) — Cloned wallet apps sit in official stores, waiting to swallow your seed phrase. How fakes get listed, how they phish, and the install checks that filter them.
- [Crypto Scams on X, Telegram, and Email: The Full Attack Chain Explained](/articles/social-media-crypto-scam-playbook/) — Fake moderator DMs that drop malware, honeypot 'friends,' airdrop emails from lookalike domains — how the social-engineering playbook works, step by step.
- [How to Read a Smart Contract Audit Report: A Practical Guide](/articles/how-to-read-a-smart-contract-audit-report/) — An audit badge alone tells you almost nothing. How to read scope, severity, and fix status in an audit report — and spot projects that only look audited.
- [Telegram Airdrop Bot Scams: How Tap-to-Earn Games Drain Real Wallets](/articles/telegram-airdrop-bot-scams/) — Tap-to-earn onboarded millions — and industrialized fake bots. The five scam patterns inside Telegram airdrop games and the checks that expose them.
- [SIM Swap Attacks Explained: How Phone Number Theft Drains Crypto Accounts](/articles/sim-swap-attacks-explained/) — Take the phone number, reset the exchange login, drain the account. The full SIM-swap attack chain, real cases, and the defenses that actually stop it.
- [Clipboard Hijacking Malware Explained: When Copy-Paste Steals Your Crypto](/articles/clipboard-hijacking-malware-explained/) — Malware swaps the address you copied the moment you paste. How clipboard hijackers work, where they come from, and how to make pasted addresses safe.
- [Pig Butchering Scams Explained: The On-Chain Anatomy of Romance Investment Fraud](/articles/pig-butchering-scams-explained/) — Grooming, fake trading platforms, on-chain money trails — why pig butchering tops the FBI's loss charts, and how the funnel works at every stage.
- [How to Detect NFT Wash Trading: A Practical On-Chain Workflow](/articles/how-to-detect-nft-wash-trading/) — Recycled token IDs, circular funding, round-trip cost math — the on-chain workflow that separates real NFT volume from wash-traded bait before you buy.
- [Anatomy of the Biggest Airdrop Scams: How Fake Claim Sites Actually Work](/articles/biggest-airdrop-scams-anatomy/) — Anatomy of the fake-claim playbook: lookalike domains, wallet-connect harvesting, signature traps. How the biggest airdrop scams actually worked.
- [How Stolen Crypto Is Actually Recovered: The Real Process Behind the Headlines](/articles/how-stolen-crypto-is-recovered/) — Chain-hopping leaves traces, exchanges freeze on request, seizures do happen. How recovery actually works — and what victims should do in the first 48 hours.
- [How to Claim an Airdrop Safely: The Burner Wallet Workflow](/articles/how-to-claim-airdrops-safely/) — Verify the source independently, pick the URL before the frenzy, claim from a dedicated wallet, revoke after. The safe-claim workflow, in leverage order.
- [The Airdrop Safety Checklist: 12 Checks Before You Connect a Wallet](/articles/airdrop-safety-checklist/) — Twelve checks in one list: source verification, URL discipline, contract inspection, signature reading. Run top to bottom — any failed check is a stop.
- [EIP-7702 Airdrop Phishing: One Signature, Total Wallet Control](/articles/eip-7702-airdrop-phishing/) — EIP-7702 lets a single approval touch every token you own. How scammers abuse the new signature flow — and the prompt you should never, ever sign.
- [Testnet Airdrop Safety: How to Farm Testnets Without Getting Drained](/articles/testnet-airdrop-safety/) — Fake testnet sites, seed harvesters, mainnet bait-and-switch — which testnet risks are real, and the workflow that keeps every season safe.
- [Airdrop Scam Checker: Verify Any Airdrop On-Chain in 5 Steps](/articles/airdrop-scam-checker/) — Before you connect a wallet to claim an airdrop, run the 5-step on-chain check: contract age, deployer, holders, approvals, domain — free tools only.
- [Airdrop Signature Scams: Why the Claim Button Is the Dangerous Part](/articles/airdrop-signature-scams/) — Fake airdrop pages don't want your seed phrase — they want a signature. The four signature types a claim site can request and what each lets attackers do.
- [Airdrop Eligibility Checker Phishing: How Fake Checkers Harvest Wallets](/articles/airdrop-eligibility-checker-phishing/) — 'Check your eligibility' sites spawn every season — most harvest wallets. How fake checkers work and how to verify eligibility without connecting anything.
- [How to Audit Your Own Wallet: A Step-by-Step On-Chain Security Review](/articles/how-to-audit-your-wallet-activity/) — Your history lists every approval and signature you've ever given. How to audit your own wallet with free tools — and clean up what shouldn't still be open.
- [Token Taxes Explained: How Buy/Sell Fees Work and When They Become a Trap](/articles/token-taxes-explained/) — Buy and sell fees can fund a treasury — or hide a honeypot exit. How token taxes work and how to check the rate before you're the one paying it.
- [Unsolicited Airdrop Tokens in Your Wallet: The Claim Trap Explained](/articles/unsolicited-airdrop-tokens/) — Tokens you never signed up for are bait — fake claim sites, import tricks, address dusting. What happens if you interact, and the only correct response.
- [How Fake Airdrops Reach You: Hijacked Accounts, Discord Bots, and Compromised News Sites](/articles/fake-airdrop-distribution-channels/) — Hijacked accounts, Discord bots, compromised news sites — the distribution layer that puts scam drops in front of you. How each channel works.
- [Crypto Recovery Scams Explained: How Fake Recovery Services Target Scam Victims](/articles/crypto-recovery-scams-explained/) — Stolen once, then targeted again — recovery firms that charge upfront and deliver nothing. How the second-wave scam works and the verification that matters.
- [Arbitrum Token Safety: How to Avoid Scams on Arbitrum](/articles/arbitrum-token-safety/) — Cheap fees made Arbitrum a scam-token hotspot. Verify contract, owner powers, holders, and liquidity before you buy — free 5-step on-chain check.
- [Solana Token Safety: How to Avoid Scams on Solana](/articles/solana-token-safety/) — A new Solana token looks like a 100x. Check mint authority, holders, and liquidity before you connect a wallet — the free 5-step on-chain check.
- [Base Chain Token Safety: How to Avoid Scams on Coinbase's Layer 2](/articles/base-chain-token-safety/) — Base's low fees drew a wave of scam tokens. Check contract source, owner powers, holders, and liquidity before you buy — the free 5-step check.
- [How to Check if Liquidity Is Locked: A Step-by-Step Guide for Token Buyers](/articles/how-to-check-liquidity-locked/) — Unlocked liquidity means devs can pull the pool anytime. Here's how to verify a lock on the explorer before you buy — 5 checks, free tools only.
- [Crypto Dusting Attacks Explained: How Tiny Transactions Expose Your Identity](/articles/crypto-dusting-attacks-explained/) — Tiny token amounts appear from nowhere — that's dusting, and it's not a gift. What dusting tries to learn and when those fractions become a trap.
- [Blind Signing Explained: The Hidden Risk in Every Hardware Wallet Transaction](/articles/blind-signing-explained/) — Blind signing makes your wallet display hashes instead of readable terms — so you approve what you can't verify. How it works and when to refuse.
- [ETH sign Phishing Explained: The Deprecated Method Still Draining Wallets](/articles/eth-sign-phishing-explained/) — eth_sign lets a site move any asset from your wallet. It was deprecated years ago and still drains victims — how the prompt looks and how to refuse.
- [How to Prevent Wallet Drainer Attacks: A Complete Defense Framework](/articles/how-to-prevent-wallet-drainers/) — Spotting drainers isn't enough — segregate wallets, cap approvals, monitor in real time. The defense stack that stops attacks before they land.
- [Infinite Approval Explained: Why Unlimited Token Approvals Are a Ticking Time Bomb](/articles/infinite-approval-explained/) — An unlimited approval lets a hacked contract drain your wallet months after you signed. Check your open approvals and revoke the ones you don't use.
- [Permit2 Phishing Explained: How One Free Signature Can Drain an Entire Wallet](/articles/permit2-exploit-explained/) — Uniswap's universal router lets one free signature cover every token. How scammers weaponize Permit2 — and why it's riskier than ERC-20 approvals.
- [Crypto Signature Scams: How One Signature Can Drain Your Wallet](/articles/signature-scam-explained/) — The prompt looks harmless; the payload moves your tokens. Every signature-scam variant explained — and how to verify what you are actually signing.
- [Wash Trading Detection: How to Spot Fake Volume on DEXs and NFT Markets](/articles/wash-trading-detection-explained/) — Paired wallets, impossible volume-to-liquidity ratios, clockwork timing — how to detect wash trading on DEXs and NFT markets with on-chain data.
- [Crypto Airdrop Scams Explained: How to Spot and Avoid Fake Airdrops](/articles/crypto-airdrop-scams-explained/) — Fake drops arrive by DM, hijacked accounts, and lookalike domains. How airdrop scams bait a wallet connect — and the checks that expose them fast.
- [Token Unlocks Explained: How Vesting Schedules Move Markets and How to Track Them](/articles/token-unlocks-explained/) — Locked supply releases on a schedule, and prices feel it. How vesting works, why unlocks create sell pressure, and how to track what's coming.
- [DeFi Yield Farming Risks: How to Evaluate Opportunities Safely](/articles/defi-yield-farming-risks/) — Sky-high APYs price in risks you can't see — contract bugs, rug pulls, impermanent loss. How to weigh a farm before you deposit a single token.
- [ERC-20 Token Security Check: A Developer's Guide to Auditing Any Token Contract](/articles/erc20-token-security-check/) — Source verification, owner powers, holder spread, taxes, honeypot traps. The six checks that catch most malicious ERC-20 tokens — free tools included.
- [Is This Token a Scam? How to Check Any Crypto Token Before Buying](/articles/is-this-token-a-scam/) — Source verification, hidden mints, holder spread, taxes, honeypot traps. Six free on-chain checks that answer the question before your money does.
- [How to Track Stolen Crypto: A Guide to Blockchain Forensics](/articles/how-to-track-stolen-crypto/) — Blockchains are public ledgers — theft leaves a trail. How investigators trace stolen funds, how thieves hide, and what victims should do first.
- [AI-Powered Crypto Scams in 2026: How Artificial Intelligence Became the Top Attack Weapon](/articles/ai-powered-crypto-scams-2026/) — AI now writes the phishing, clones the site, and fakes the video calls. How AI-powered crypto scams work and the defenses that still hold.
- [DeFi Liquidation Cascades Explained: How Cascading Liquidations Trigger Market Crashes](/articles/defi-liquidation-cascades-explained/) — One liquidation forces the next, and prices gap through everyone's stops. How cascades form, on-chain signs of buildup, and defenses that hold in a crash.
- [Kelp DAO Hack Explained: How a 1-of-1 DVN Configuration Let Attackers Forge $292M in Fake rsETH](/articles/kelp-dao-hack-explained/) — A 1-of-1 bridge validator config let attackers forge $292M in unbacked rsETH in under an hour. How the largest DeFi hack of 2026 worked.
- [NPM Supply Chain Attacks: How Compromised Packages Are Stealing Crypto Wallets in 2026](/articles/npm-supply-chain-attacks-2026/) — Compromised packages — from Axios to the Injective SDK — ship wallet-stealing malware straight into builds. How npm supply chain attacks work and how to defend.
- [Slippage Attacks Explained: How MEV Bots Exploit Price Movement During Transaction Execution](/articles/slippage-attacks-explained/) — Between submit and execution, MEV bots move the price against you. How slippage attacks work, why tolerance settings matter, and safer fills.
- [Proxy Contract Upgrade Attacks Explained: How Upgrade Patterns Became Attack Vectors](/articles/proxy-upgrade-attacks-explained/) — Control the upgrade function and you can swap trusted logic for a drain. How Parity, Wormhole, and Uranium-grade bugs worked — and the pattern to fear.
- [Integer Overflow and Underflow Attacks Explained: How Math Bugs Broke Smart Contracts](/articles/integer-overflow-attacks-explained/) — Numbers that wrap past their limits minted quadrillions of tokens and bypassed balance checks. How overflow attacks worked — and what Solidity 0.8 changed.
- [Bridge Attacks Explained: How Cross-Chain Bridges Became Crypto's Biggest Vulnerability](/articles/bridge-attacks-explained/) — Bridges hold pooled funds and verify cross-chain messages — both get attacked. How the biggest bridge hacks worked and what to check before crossing.
- [Sybil Attacks Explained: How Fake Identities Undermine Decentralized Systems](/articles/sybil-attacks-explained/) — One operator, a thousand wallets, airdrop farming at industrial scale. How Sybil attacks distort voting and rewards — and how networks fight back now.
- [Access Control Attacks Explained: How Broken Permissions Let Attackers Drain Smart Contracts](/articles/access-control-attacks-explained/) — Broken permission checks let anyone mint tokens or seize a contract. How access control attacks work and the red flags to check before you deposit.
- [Front-Running Attacks Explained: How Predatory Traders Profit from Your Pending Transactions](/articles/front-running-attacks-explained/) — Your pending transaction is an announcement — bots trade ahead of it. How front-running works, what it costs you, and settings that reduce exposure.
- [Governance Attacks Explained: How Attackers Exploit DAO Voting to Steal Millions](/articles/governance-attacks-explained/) — Flash-loan votes, hijacked delegations, smuggled proposals. How governance attacks seize DAO treasuries — and the signals of a manipulable system.
- [Reentrancy Attacks Explained: The Smart Contract Vulnerability That Started It All](/articles/reentrancy-attacks-explained/) — Call back in before the balance updates, and you drain the vault on loop. How reentrancy worked from the DAO era to today — and the fixes that hold.
- [Rug Pulls Explained: How Liquidity Pulls and Hidden Mint Functions Drain Your Wallet](/articles/rug-pulls-explained/) — Liquidity unlocks, mint authority, holder concentration — rug pulls telegraph themselves on-chain. The red flags to check before you buy any new token.
- [Flash Loan Attacks Explained: How Borrowed Billions Exploit DeFi](/articles/flash-loan-attacks-explained/) — Borrow, attack, repay — all in one transaction with zero capital. How flash loan attacks warp prices and drain protocols, with real case anatomy.
- [Sandwich Attacks Explained: How MEV Bots Front-Run and Back-Run Your Trades](/articles/sandwich-attacks-explained/) — Your trade sits in the mempool; bots front-run and back-run it. How sandwich attacks work mechanically and the slippage settings that blunt them.
- [Oracle Manipulation Attacks in DeFi: How Price Feeds Get Exploited](/articles/oracle-manipulation-defi/) — Flash loans bend a price feed for one block; protocols trusting it get drained. How oracle attacks work and what to check before you deposit.
- [DeFi Protocol Red Flags: How to Spot Risky Protocols Before You Deposit](/articles/defi-protocol-red-flags/) — Anonymous teams, unaudited upgrades, giant emission taps. The red flags that show up before a protocol fails — and how to check each one on-chain.
- [How to Avoid Crypto Phishing Scams: A Complete Defense Guide](/articles/how-to-avoid-crypto-phishing-scams/) — Phishing sites and malicious approvals have stolen over $1 billion. How the attacks lure a signature — and the habits that protect any wallet.
- [Address Poisoning Attacks: How They Work and How to Avoid Them](/articles/address-poisoning-attacks-explained/) — Scammers seed your history with lookalike addresses, hoping you paste the wrong one. How address poisoning works and the one habit that stops it.
- [How to Spot Wallet Drainers: A Field Guide to Malicious dApps](/articles/how-to-spot-wallet-drainers/) — Drainer sites look like legitimate dApps until the signature prompt. How to identify them, how they lure, and the habits that keep assets safe.
- [Cross-Chain Bridge Security: Understanding and Analyzing Bridge Risks](/articles/bridge-security-explained/) — Lockups, validators, message verification — bridge designs fail differently. The risk model to apply before you trust any cross-chain bridge with funds.
- [Token Approval Safety: How to Audit and Revoke Smart Contract Permissions](/articles/token-approval-safety/) — Every approval is a standing permission to move your tokens. How to audit what you've signed — and revoke everything that shouldn't still be open.
- [Address Risk Scoring: How to Read the Signs of a Dangerous Wallet](/articles/address-risk-scoring-explained/) — Phishing links, sanctions, laundering hops — a wallet's history tells you if it's dangerous. How risk scoring works and how to check any wallet free.
- [How to Verify a Token Before Buying: A Complete On-Chain Safety Checklist](/articles/how-to-verify-a-token-before-buying/) — Source, liquidity lock, holders, mint functions, taxes, honeypot traps. The on-chain checklist to run before buying any token — free tools included.
- [How to Spot Rug Pulls and Honeypots On-Chain Before You Lose Money](/articles/spotting-rug-pulls-and-honeypots/) — Liquidity locks, contract permissions, supply concentration — the on-chain flags that expose rugs and honeypots before you invest a single cent.
- [MEV Explained: Maximal Extractable Value and How It Affects Your Transactions](/articles/mev-explained/) — Bots reorder, front-run, and sandwich your transactions for profit. How MEV extraction works, who profits from it, and settings that cut what you pay.
- [Building Your On-Chain Analysis Workflow: A Complete Tool Stack Guide](/articles/on-chain-analysis-workflow/) — From explorer basics to alerts and daily routines — a step-by-step workflow that turns raw blockchain data into decisions. Beginner to practitioner.
- [Stablecoin Depegging: What It Means and How to Spot the Signs On-Chain](/articles/stablecoin-depegging/) — When a stablecoin's peg breaks, minutes decide losses. How depegging happens, the early on-chain warning signs, and a dip versus a death spiral.
- [How to Analyze Token Distribution: Concentration, Whales, and Risk](/articles/analyzing-token-distribution/) — Token distribution tells you who holds the power. How to check concentration, spot whale risk, and judge whether a supply is healthy before you buy.
- [Reading Smart Contract Events and Logs: A Practical Guide](/articles/reading-smart-contract-events/) — Event logs are a contract's public diary of transfers, mints, and approvals. How to read them on any explorer for free — and what they reveal.
- [Token Flow Analysis: Following the Money Trail on the Blockchain](/articles/token-flow-analysis/) — Funds tell the story — wallets, exchanges, protocols, timing. The methodology and patterns that show what's really happening behind a token's moves.
- [Exchange Inflows & Outflows: What They Tell You About Market Sentiment](/articles/exchange-inflows-and-outflows/) — Coins flowing into exchanges often precede selling; big withdrawals can mean accumulation. How to read flow data — and what it can't tell you either way.
- [How to Track Whale Wallets: Free Tools and Methodology](/articles/how-to-track-whale-wallets/) — Whale wallets move markets. How to find, label, and follow large holders with free tools — plus the alerting setup that fires the moment they act.
- [On-Chain Indicators That Matter: MVRV, NVT, SOPR & More Explained](/articles/on-chain-indicators/) — MVRV, NVT, SOPR, Puell — what each metric measures, what it says about valuation, and how to read them together instead of in isolation.
- [Wallet Labels: How to Identify Who Owns What on the Blockchain](/articles/wallet-labels/) — Exchange hot wallets, contracts, whales, team treasuries — labels turn hex addresses into actors. How to read and use them in on-chain analysis.
- [How to Read a Blockchain Explorer: Etherscan Step by Step](/articles/how-to-read-a-blockchain-explorer/) — Addresses, transactions, contract tabs, event logs — the explorer is your primary window on-chain. Learn to read it, step by step, from zero.
- [What Is On-Chain Analysis? A Complete Beginner's Guide](/articles/what-is-on-chain-analysis/) — Reading blockchain data to follow money and spot risk — the practice, the free tools, and where to start if you've never opened an explorer.
- [Understanding Gas Fees: Why Transactions Cost What They Cost](/articles/understanding-gas-fees/) — Base fee, priority fee, L2 pricing — what you actually pay for every transaction. How gas fees work on Ethereum and the levers that cut your costs.

## Glossary — Complete Index

### Consensus
- [Byzantine Fault Tolerance](/glossary/bft/) — A property of distributed systems that can continue operating correctly even when up to one-third of participants act maliciously or fail arbitrarily.
- [Finality](/glossary/finality/) — The point at which a blockchain transaction becomes irreversible, guaranteeing it will not be reversed or altered by future blocks.
- [Proof of Stake (PoS)](/glossary/proof-of-stake/) — A consensus mechanism where validators are chosen to produce blocks based on the amount of cryptocurrency they have staked.
- [Proof of Work (PoW)](/glossary/proof-of-work/) — A consensus mechanism where miners compete to solve cryptographic puzzles to validate blocks, securing the network through computational energy.
- [Slashing](/glossary/slashing/) — The punishment mechanism in proof-of-stake where validators lose staked funds for proven misbehavior or attacks.
- [Validator](/glossary/validator/) — A network participant in proof-of-stake blockchains who proposes and attests blocks in exchange for rewards.

### DeFi
- [Algorithmic Stablecoin](/glossary/algorithmic-stablecoin/) — A stablecoin that maintains its peg through algorithmic mint/burn and incentive mechanics rather than fiat or crypto collateral.
- [AMM (Automated Market Maker)](/glossary/amm/) — A protocol that prices assets algorithmically using a liquidity pool, replacing traditional order books.
- [APR (Annual Percentage Rate)](/glossary/apr/) — The yearly interest rate earned or paid on crypto assets, expressed as a simple (non-compounding) percentage.
- [APY (Annual Percentage Yield)](/glossary/apy/) — The effective annual rate of return on an investment, accounting for compounding interest.
- [Block Builder](/glossary/block-builder/) — A specialized entity in Ethereum's PBS system that constructs optimized blocks from MEV searcher bundles and competes to have their block selected by validators.
- [Bridge](/glossary/bridge/) — A protocol that enables assets and data to move between different blockchain networks.
- [Collateral Factor](/glossary/collateral-factor/) — The percentage of an asset's value a lending protocol lets you borrow against — for example, 75% means $100 of collateral backs up to $75 of borrowing.
- [Cross-Chain Bridge](/glossary/cross-chain-bridge/) — A protocol that transfers assets and messages between independent blockchains, typically by locking assets on one chain and minting representations on another.
- [DeFi (Decentralized Finance)](/glossary/defi/) — Financial services built on blockchain smart contracts that operate without intermediaries, including lending, borrowing, trading, and yield generation.
- [DEX (Decentralized Exchange)](/glossary/dex/) — A peer-to-peer marketplace for trading cryptocurrencies without intermediaries, using smart contracts instead of order books.
- [EigenLayer (Restaking)](/glossary/eigenlayer/) — The leading Ethereum restaking protocol that lets staked ETH be reused to secure additional services (AVSs) for extra yield and extra risk.
- [Flash Loan](/glossary/flash-loan/) — An uncollateralized loan that must be borrowed and repaid within a single blockchain transaction.
- [Flashbots](/glossary/flashbots/) — A research and development organization that created a private transaction relay system to reduce MEV's negative impact on Ethereum users.
- [Impermanent Loss](/glossary/impermanent-loss/) — The temporary loss liquidity providers face when token prices diverge from their deposit ratio.
- [Interest Rate Model](/glossary/interest-rate-model/) — The algorithmic function a lending protocol uses to set borrow and supply rates based on how much of the pool's liquidity is currently borrowed.
- [Lending Protocol](/glossary/lending-protocol/) — A DeFi platform where users can lend crypto to earn interest or borrow against crypto collateral.
- [Liquid Staking](/glossary/liquid-staking/) — Staking ETH through a protocol that issues a liquid token (LST) representing your staked position, enabling DeFi use without unbonding.
- [Liquidation](/glossary/liquidation/) — The forced sale of collateral when a borrower's loan position falls below the required collateralization ratio.
- [Liquidity Mining](/glossary/liquidity-mining/) — A DeFi incentive program that distributes protocol tokens to users who supply liquidity or use a protocol, rewarding early participation.
- [Liquidity Pool](/glossary/liquidity-pool/) — A smart contract holding token reserves that enables decentralized trading without an order book.
- [Liquidity Provider](/glossary/liquidity-provider/) — A user who deposits tokens into a liquidity pool in exchange for trading fees and LP tokens.
- [Maximal Extractable Value (MEV)](/glossary/mev/) — The profit extractable by reordering, including, or excluding transactions within a block.
- [MEV Bot](/glossary/mev-bot/) — Automated software that monitors the blockchain mempool for profitable trading opportunities, executing arbitrage, liquidation, and sandwich attacks within milliseconds.
- [Oracle](/glossary/oracle/) — A service that delivers off-chain real-world data (prices, weather, sports results) to on-chain smart contracts.
- [Overcollateralization](/glossary/overcollateralization/) — The practice of pledging collateral worth more than the borrowed amount, required by DeFi lending protocols to secure loans.
- [Price Impact](/glossary/price-impact/) — The percentage change in an asset's market price caused by a single trade's size relative to the available liquidity in an automated market maker pool.
- [Real-World Assets (RWA)](/glossary/rwa/) — Physical or traditional financial assets tokenized on a blockchain, bringing off-chain value (real estate, treasuries, commodities) on-chain.
- [Reserve Factor](/glossary/reserve-factor/) — The share of interest paid by borrowers that a lending protocol redirects to its own reserve treasury rather than to suppliers.
- [Restaking](/glossary/restaking/) — Restaking ETH to secure additional protocols beyond Ethereum consensus, earning extra rewards but taking on additional slashing risk.
- [Searcher (MEV)](/glossary/searcher/) — An automated bot or operator that monitors the blockchain for MEV opportunities and submits optimized transaction bundles to block builders.
- [Slippage](/glossary/slippage/) — The difference between the expected price of a trade and the actual executed price.
- [Stablecoin Reserve](/glossary/stablecoin-reserve/) — The assets backing a stablecoin's value, held by the issuer as collateral to guarantee redemption at the pegged price.
- [Staking](/glossary/staking/) — Locking cryptocurrency to secure a proof-of-stake network and earn rewards in return.
- [Staking Pool](/glossary/staking-pool/) — A service that combines many users' stake into a single validator set, letting small holders participate in proof-of-stake rewards without the minimum 32 ETH.
- [Total Value Locked (TVL)](/glossary/tvl/) — The total amount of assets deposited in a DeFi protocol, the key metric for measuring adoption.
- [TWAP (Time-Weighted Average Price)](/glossary/twap/) — A pricing method that averages an asset's price over a specified time period, used to reduce slippage in large trades and resist oracle manipulation.
- [Wrapped BTC (WBTC)](/glossary/wrapped-btc/) — An ERC-20 token representing Bitcoin on Ethereum, backed 1:1 by BTC held by a centralized custodian under a merchant-custodian model.
- [Wrapped ETH (WETH)](/glossary/wrapped-eth/) — An ERC-20 token representing native ETH 1:1, enabling ETH to interact with smart contracts and DeFi protocols that require the ERC-20 standard.
- [Wrapped Token](/glossary/wrapped-token/) — A tokenized version of a cryptocurrency on a different blockchain, backed 1:1 by the original asset held in reserve.
- [Yield Aggregator](/glossary/yield-aggregator/) — A DeFi protocol that automatically moves deposited funds across yield sources and compounds rewards to maximize returns for users.
- [Yield Farming](/glossary/yield-farming/) — Strategically providing liquidity to DeFi protocols in exchange for token rewards, interest, and trading fees.

### General
- [Airdrop](/glossary/airdrop/) — The distribution of free cryptocurrency tokens to wallet addresses, used to bootstrap adoption, reward early users, or decentralize governance.
- [Arbitrage](/glossary/arbitrage/) — The practice of profiting from price differences of the same asset across different markets or exchanges, a core mechanic in crypto trading and MEV.
- [Base Fee](/glossary/base-fee/) — The protocol-determined minimum gas price on Ethereum post-EIP-1559, which automatically adjusts based on network demand and is permanently burned.
- [Blob (EIP-4844)](/glossary/blob/) — A new data storage type on Ethereum introduced by EIP-4844 (Proto-Danksharding) that provides cheaper storage for Layer 2 rollup data.
- [Block](/glossary/block/) — A container holding a batch of verified transactions, linked to previous blocks to form a chain.
- [Block Confirmation](/glossary/block-confirmation/) — The number of blocks added to a chain after your transaction's block, reducing the probability of reversal.
- [Block Explorer](/glossary/block-explorer/) — A web-based search engine for blockchain data, allowing anyone to look up transactions, addresses, blocks, and smart contract interactions.
- [Burn Address](/glossary/burn-address/) — A cryptographic address with no known private key, used to permanently destroy cryptocurrency tokens by making them unspendable.
- [CBDC (Central Bank Digital Currency)](/glossary/cbdc/) — A digital form of sovereign currency issued and controlled directly by a central bank.
- [CEX (Centralized Exchange)](/glossary/cex/) — A cryptocurrency trading platform operated by a central entity that holds custody of user funds, such as Binance, Coinbase, or Kraken.
- [Cliff (Vesting)](/glossary/cliff/) — A lockup period at the start of a vesting schedule during which no tokens are released, ensuring long-term commitment from team and investors.
- [Consensus Mechanism](/glossary/consensus-mechanism/) — The algorithm that enables distributed nodes in a blockchain network to agree on the state of the ledger without trusting each other.
- [Copy Trading](/glossary/copy-trading/) — A feature that automatically replicates another trader's positions in your account, popular on both CEXs and DEXs for following successful or 'smart money' wallets.
- [Decentralized Application (DApp)](/glossary/dapp/) — An application whose backend runs on a decentralized blockchain network instead of centralized servers.
- [Difficulty Adjustment](/glossary/difficulty-adjustment/) — The protocol mechanism that automatically recalibrates how hard it is to mine a new block, keeping block production rate stable.
- [EIP-1559](/glossary/eip-1559/) — An Ethereum improvement proposal that reformed gas fee pricing by introducing a base fee that is burned, making ETH potentially deflationary.
- [Epoch](/glossary/epoch/) — A unit of time in Ethereum's Proof of Stake system consisting of 32 slots (6.4 minutes), used for validator committee assignments and finality checkpoints.
- [Fork](/glossary/fork/) — A change to a blockchain's protocol rules that creates a divergence in the network, either resulting in two separate chains or a unified upgrade.
- [Fraud Proof](/glossary/fraud-proof/) — A cryptographic guarantee used in optimistic rollups where anyone can challenge an invalid state transition by submitting evidence of fraud.
- [Gas Fee](/glossary/gas-fee/) — The cost of executing a transaction on a blockchain, paid to validators or miners.
- [Gas Limit](/glossary/gas-limit/) — The maximum amount of gas units a user is willing to spend on a single transaction, acting as a safety cap against runaway computation costs.
- [Gas War](/glossary/gas-war/) — A situation where users compete for limited block space by bidding increasingly higher gas prices, often during popular NFT mints or token launches.
- [Hash](/glossary/hash/) — A fixed-length digital fingerprint produced by a one-way mathematical function, fundamental to blockchain security and integrity.
- [Hash Rate](/glossary/hash-rate/) — A measure of computational power securing a Proof-of-Work blockchain, typically expressed in trillions of hashes per second (TH/s).
- [ICO (Initial Coin Offering)](/glossary/ico/) — A fundraising method where a project sells new cryptocurrency tokens to early investors, similar to an IPO but largely unregulated in its early years.
- [IDO (Initial DEX Offering)](/glossary/ido/) — A token sale conducted on a decentralized exchange, allowing projects to raise funds and distribute tokens without a centralized intermediary.
- [Intent-Based Architecture](/glossary/intent-based-architecture/) — A paradigm where users express what they want ('intents') rather than how to execute, letting solvers compete to find the best path.
- [KYC (Know Your Customer)](/glossary/kyc/) — The identity verification process required by regulated crypto platforms to comply with anti-money laundering laws, involving document submission and sometimes biometric checks.
- [Launchpad](/glossary/launchpad/) — A platform that curates, hosts, and facilitates token sales for new crypto projects, providing vetting and distribution infrastructure.
- [LayerZero](/glossary/layerzero/) — An omnichain interoperability protocol enabling cross-chain messaging and token transfers, compromised in the $292M Kelp DAO exploit via a forged message.
- [Light Client](/glossary/light-client/) — A lightweight blockchain node that verifies only block headers and specific transactions, enabling wallets and mobile apps to interact without downloading the full chain.
- [Mainnet](/glossary/mainnet/) — The production blockchain network where transactions involve real economic value, as opposed to a testnet where tokens have no value.
- [Merkle Tree](/glossary/merkle-tree/) — A hierarchical data structure that efficiently organizes and verifies large sets of transactions using cryptographic hashes.
- [Mining](/glossary/mining/) — The process of using computational power to validate transactions and create new blocks on a Proof-of-Work blockchain.
- [Nakamoto Coefficient](/glossary/nakamoto-coefficient/) — The minimum number of independent entities that would need to collude to attack a blockchain network, measuring its decentralization.
- [Node](/glossary/node/) — A computer running blockchain client software that participates in the network by validating, storing, and propagating transactions and blocks.
- [Nonce](/glossary/nonce/) — A sequential number assigned to each transaction from an Ethereum account, ensuring transactions execute in order and preventing replay.
- [Pending Transaction](/glossary/pending-transaction/) — A transaction that has been broadcast to the network but not yet included in a block, typically waiting in the mempool for confirmation.
- [Priority Fee](/glossary/priority-fee/) — An optional user-set tip paid to validators to prioritize transaction inclusion, layered on top of EIP-1559's protocol-set base fee.
- [Relayer](/glossary/relayer/) — An entity or service that forwards transactions or messages between different blockchain networks or from users to block builders, enabling cross-chain communication.
- [RPC](/glossary/rpc/) — Remote Procedure Call — the communication protocol that allows dApps and wallets to read from and write to a blockchain.
- [Slot](/glossary/slot/) — A fixed 12-second time interval in Ethereum's Proof of Stake system during which one validator is chosen to propose a block.
- [Snapshot (Governance)](/glossary/snapshot/) — An off-chain voting platform used by DAOs to conduct gasless governance votes, and the process of recording on-chain state at a specific block height.
- [Stablecoin](/glossary/stablecoin/) — A cryptocurrency pegged to a stable asset (usually the US dollar), combining blockchain benefits with price stability.
- [Testnet](/glossary/testnet/) — A replica of a blockchain network used by developers for testing smart contracts, protocol upgrades, and application functionality without risking real funds.
- [Token Airdrop](/glossary/token-airdrop/) — A distribution method where projects send free tokens to wallet addresses, typically to bootstrap adoption, reward early users, or decentralize token ownership.
- [Token Generation Event (TGE)](/glossary/token-generation-event/) — The moment a cryptocurrency token is officially created and distributed, marking the start of vesting schedules and secondary market trading.
- [Tokenization](/glossary/tokenization/) — The process of representing real-world or digital assets as blockchain tokens, enabling fractional ownership and programmable transfer.
- [Transaction](/glossary/transaction/) — A cryptographically signed instruction submitted to a blockchain to transfer value, interact with smart contracts, or deploy code.
- [UTXO (Unspent Transaction Output)](/glossary/utxo/) — The fundamental accounting model used by Bitcoin where each transaction consumes previous outputs and creates new ones, rather than using account balances.
- [Validity Proof](/glossary/validity-proof/) — A cryptographic proof that validates every state transition in a ZK-rollup, ensuring only correct transactions are accepted without relying on challenge windows.
- [Vesting](/glossary/vesting/) — A mechanism that gradually releases tokens to team members and early investors over time, preventing immediate sell-offs and aligning long-term incentives.
- [Web3](/glossary/web3/) — The vision of a decentralized internet built on blockchain, where users own their data, identity, and assets.
- [Wei](/glossary/wei/) — The smallest unit of Ether (ETH), where 10^18 wei equals 1 ETH. Gwei is the most commonly used subdivision for gas pricing.
- [Whale](/glossary/whale/) — An individual or entity that holds a large enough amount of a cryptocurrency to potentially influence market prices through their trading activity.
- [x402](/glossary/x402/) — An open protocol that repurposes HTTP's 402 Payment Required status code for native web payments, enabling pay-per-request APIs without API keys or accounts.
- [zk-SNARK](/glossary/zk-snark/) — A cryptographic proof system that allows one party to prove knowledge of information without revealing it, with Succinct, Non-interactive, verifiable proofs.

### Governance
- [Decentralized Autonomous Organization (DAO)](/glossary/dao/) — A member-owned organization governed by smart contracts and token-based voting, without centralized leadership.
- [Governance Token](/glossary/governance-token/) — A cryptocurrency that grants holders voting rights in a protocol's governance, allowing them to propose and vote on changes.

### Layer 1
- [Celestia](/glossary/celestia/) — A modular blockchain built specifically for data availability, enabling rollups to publish data cheaply without running their own consensus.
- [Layer 1](/glossary/layer-1/) — A base-layer blockchain that settles transactions and provides security, serving as the foundation for applications and Layer 2 networks.
- [Mempool](/glossary/mempool/) — The pending transaction pool on a blockchain where submitted transactions wait to be included in a block by validators or miners.
- [Modular Blockchain](/glossary/modular-blockchain/) — A blockchain architecture that separates core functions—execution, consensus, settlement, and data availability—into specialized, interchangeable layers.
- [Sharding](/glossary/sharding/) — A scaling technique that splits a blockchain's state and transaction processing across multiple parallel segments called shards.

### Layer 2
- [Blob-Carrying Transaction (EIP-4844)](/glossary/blob-carrying-transaction/) — A new Ethereum transaction type that carries large 'blob' data payloads for rollups, slashing L2 data costs by routing them out of the expensive call-data gas market.
- [Danksharding](/glossary/danksharding/) — Ethereum's full scalability roadmap that uses data availability sampling to enable 100,000+ transactions per second via L2 rollups.
- [Data Availability](/glossary/data-availability/) — The guarantee that transaction data published by a rollup or block producer is actually accessible to all network participants for verification.
- [EIP-4844 (Proto-Danksharding)](/glossary/eip-4844/) — An Ethereum upgrade introducing 'blob' data storage for L2 rollups, reducing transaction costs by 10-100x.
- [Layer 2](/glossary/layer-2/) — A scaling solution built on top of a Layer 1 blockchain that processes transactions off-chain while inheriting the base layer's security.
- [Optimistic Rollup](/glossary/optimistic-rollup/) — A Layer 2 scaling solution that assumes transactions are valid and uses fraud proofs to challenge invalid batches.
- [Plasma](/glossary/plasma/) — A family of Layer 2 scaling designs that use Merkle trees and fraud proofs to secure off-chain computation, proposed by Joseph Poon and Vitalik Buterin in 2017 and largely superseded by rollups.
- [Rollup](/glossary/rollup/) — A Layer 2 scaling solution that executes transactions off-chain and posts compressed transaction data to a Layer 1 for security and settlement.
- [Sequencer](/glossary/sequencer/) — The node or service responsible for ordering transactions, executing them, and publishing state updates in a Layer 2 rollup.
- [Sidechain](/glossary/sidechain/) — An independent blockchain that runs parallel to a main chain, connected via a two-way bridge for asset transfers.
- [StarkNet](/glossary/starknet/) — A ZK-rollup for Ethereum by StarkWare that uses the Cairo programming language for high-throughput computation.
- [State Channel](/glossary/state-channel/) — A two-party off-chain payment channel that enables instant, gasless transactions settled on-chain only at open and close.
- [ZK-Rollup](/glossary/zk-rollup/) — A Layer 2 scaling solution that uses zero-knowledge proofs to verify transaction batches with mathematical certainty.
- [zkSync](/glossary/zksync/) — A zero-knowledge rollup for Ethereum by Matter Labs, offering high-throughput, low-cost transactions with EVM compatibility.

### NFT
- [Floor Price](/glossary/floor-price/) — The lowest listing price for any item in an NFT collection, used as the primary market valuation metric.
- [Metadata](/glossary/metadata/) — The JSON-structured data that describes an NFT's attributes, image, name, and traits, typically stored off-chain and referenced by the token's on-chain tokenURI.
- [Minting](/glossary/minting/) — The process of creating a new NFT or token and registering it on a blockchain.
- [NFT (Non-Fungible Token)](/glossary/nft/) — A unique digital asset whose ownership and authenticity are verified on a blockchain.
- [NFT Collection](/glossary/nft-collection/) — A set of unique digital assets (NFTs) sharing a common theme, art style, and smart contract, typically ranging from 1,000 to 10,000 items.
- [PFP (Profile Picture)](/glossary/pfp/) — NFT collections designed primarily for use as social media profile pictures, characterized by generative trait combinations, rarity rankings, and strong community identity.
- [Royalty](/glossary/royalty/) — A percentage of secondary sale proceeds paid to the original NFT creator on every resale.

### Security
- [51% Attack](/glossary/51-percent-attack/) — An attack where a single entity controls more than 50% of a blockchain's mining hash rate, enabling double-spending and chain reorganization.
- [Address Poisoning](/glossary/address-poisoning/) — A scam where attackers send fake transactions from addresses that look almost identical to a victim's frequent contacts, tricking them into sending funds to the wrong address.
- [BGP Routing Attack](/glossary/routing-attack/) — An attack that hijacks internet routing (BGP) to intercept, isolate, or censor blockchain node traffic at the network layer.
- [Blacklist](/glossary/blacklist/) — A list of blockchain addresses flagged as malicious, fraudulent, or sanctioned, used by exchanges, wallets, and compliance tools to block transactions.
- [Brain Wallet](/glossary/brain-wallet/) — A cryptocurrency wallet whose private key is derived from a memorized passphrase. Convenient but catastrophically insecure against brute-force attacks.
- [Bug Bounty](/glossary/bug-bounty/) — A reward program that pays security researchers for finding and responsibly disclosing vulnerabilities in smart contracts, protocols, or platforms.
- [Censorship Resistance](/glossary/censorship-resistance/) — A blockchain's ability to process any valid transaction regardless of who sends it, with no party able to block or freeze it.
- [Clipboard Hijacking](/glossary/clipboard-hijacking/) — Malware that monitors the clipboard for cryptocurrency addresses and silently replaces them with the attacker's address, redirecting transfers.
- [Contract Audit](/glossary/contract-audit/) — A systematic security review of smart contract source code that combines automated analysis tools with expert manual review to identify vulnerabilities before deployment.
- [DDoS Attack (Blockchain)](/glossary/ddos-attack/) — A Distributed Denial of Service attack that overwhelms a blockchain network, exchange, or dApp with excessive transactions or requests, causing slowdowns or outages.
- [Dusting Attack](/glossary/dusting-attack/) — A privacy attack where tiny amounts of cryptocurrency are sent to many wallet addresses to trace transactions and de-anonymize users.
- [Eclipse Attack](/glossary/eclipse-attack/) — A network-level attack where a victim node is surrounded by attacker-controlled peers so it sees a fake, isolated view of the blockchain.
- [Entropy](/glossary/entropy/) — The true randomness that secures a crypto wallet. Measured in bits — 128 bits (a 12-word seed phrase) is already more than every computer on Earth could brute-force.
- [Exit Scam](/glossary/exit-scam/) — A fraud where project operators abruptly shut down and disappear with user funds after building trust over weeks or months.
- [Fake Token](/glossary/fake-token/) — A counterfeit cryptocurrency designed to impersonate a legitimate token, often airdropped to wallets or listed on DEXs to trick users into trading or interacting with it.
- [Finney Attack](/glossary/finney-attack/) — A Bitcoin double-spend where a miner pre-mines a block paying themselves, then tricks a merchant before broadcasting it.
- [Flash Crash](/glossary/flash-crash/) — A sudden, severe price drop in an asset that occurs within minutes, often followed by a partial recovery.
- [Flash Loan Attack](/glossary/flash-loan-attack/) — An exploit using uncollateralized flash loans to manipulate prices, drain liquidity, or exploit oracle vulnerabilities.
- [Front-Running](/glossary/front-running/) — The practice of exploiting advance knowledge of pending transactions to profit from the price impact.
- [Gnosis Safe (Safe)](/glossary/gnosis-safe/) — The most widely used smart contract multisig wallet in Ethereum, now rebranded as Safe, requiring multiple signatures to authorize transactions.
- [Honeypot](/glossary/honeypot/) — A malicious smart contract designed to look profitable but traps users' funds by blocking sales or withdrawals.
- [Maximal Extractable Value (MEV)](/glossary/max-extractable-value/) — The maximum value that can be extracted by reordering, including, or excluding transactions inside a block — originally called Miner Extractable Value.
- [Mint Authority](/glossary/mint-authority/) — The power to create new tokens from a smart contract. If misused or centralized, it allows the token creator to dilute holders or crash the price.
- [Mixer](/glossary/mixer/) — A service or protocol that blends cryptocurrency from multiple users to obscure the transaction trail between sender and recipient.
- [Nullifier](/glossary/nullifier/) — A unique on-chain marker published when a shielded note is spent, preventing double-spending without revealing which note was spent — the reason shielded pools break the public spending graph.
- [Oracle Manipulation](/glossary/oracle-manipulation/) — The deliberate manipulation of price feeds to exploit DeFi protocols that depend on external data.
- [Permit Signature Phishing](/glossary/permit-sign-phishing/) — An attack where scammers trick users into signing off-chain EIP-2612 permit messages that grant token spend approvals without an on-chain transaction, draining wallets instantly.
- [Phishing Attack](/glossary/phishing-attack/) — Social engineering attacks that trick crypto users into signing malicious transactions, approving token spend, or revealing seed phrases—resulting in theft of wallet assets.
- [Proof of Reserves (PoR)](/glossary/proof-of-reserves/) — A cryptographic audit proving that a custodian holds the assets it claims, without revealing sensitive user data.
- [Pump and Dump](/glossary/pump-and-dump/) — A market manipulation scheme where organizers artificially inflate a token's price through coordinated buying and hype, then sell their holdings at the peak, leaving other investors with worthless assets.
- [Reorg (Reorganization)](/glossary/reorg/) — A blockchain event where previously confirmed blocks are replaced by alternative blocks, potentially reversing transactions that users believed were final.
- [Replay Attack](/glossary/replay-attack/) — An attack where a valid signed transaction from one chain is fraudulently re-broadcast and executed on another chain.
- [Rug Pull](/glossary/rug-pull/) — A crypto exit scam where project developers drain liquidity or abandon a project after attracting investor funds.
- [Sanctions](/glossary/sanctions/) — Government-imposed restrictions that prohibit transactions with specific individuals, entities, or addresses, enforced by agencies like OFAC.
- [Sandwich Attack](/glossary/sandwich-attack/) — An MEV exploit where a bot front-runs and back-runs your transaction to profit from the price impact.
- [Self-Custody](/glossary/self-custody/) — The practice of holding and managing your own cryptocurrency private keys directly, without relying on a third party like an exchange or bank.
- [Shielded Address](/glossary/shielded-address/) — A Zcash address type that hides sender, receiver, and amount using zero-knowledge proofs, with value held in shielded pools rather than the transparent Bitcoin-style ledger.
- [Signature Replay](/glossary/signature-replay/) — Reusing a valid cryptographic signature more than once — or on a different chain — because a smart contract failed to mark it as consumed.
- [Social Engineering](/glossary/social-engineering/) — Manipulating people into revealing secrets or performing actions that compromise security — now the leading attack vector in Web3, responsible for billions in losses.
- [Supply Chain Attack](/glossary/supply-chain-attack/) — An attack where a dependency, package, or tool in a software supply chain is compromised to distribute malware to downstream users — a growing threat in Web3.
- [Sybil Attack](/glossary/sybil-attack/) — Creating multiple fake identities to manipulate a system, common in airdrop farming, governance, and network consensus.
- [Timejacking Attack](/glossary/timejacking/) — A Bitcoin attack where false node timestamps skew a victim's network-adjusted time to slow or speed up difficulty adjustment.
- [Timelock](/glossary/timelock/) — A smart contract mechanism that delays the execution of privileged operations, giving users time to react before changes take effect.
- [Tornado Cash](/glossary/tornado-cash/) — A decentralized crypto mixer protocol that breaks the link between sender and recipient addresses, sanctioned by OFAC in 2022 for facilitating money laundering.
- [Transaction Malleability](/glossary/transaction-malleability/) — A property that lets a transaction's signature/hash be altered before confirmation, changing its ID without invalidating it.
- [Vanity Address](/glossary/vanity-address/) — A custom wallet address containing specific characters or patterns (e.g., starting with specific prefixes), generated by trying millions of key pairs.
- [Viewing Key](/glossary/viewing-key/) — A Zcash key that grants read-only visibility of a holder's shielded transactions to a third party, without surrendering spending control — the mechanism behind provable, selectively disclosable privacy.
- [Wallet Drainer](/glossary/wallet-drainer/) — Malicious software embedded in fake dApp websites that tricks users into signing transactions that drain all tokens and NFTs from their wallet.
- [Wash Trading](/glossary/wash-trading/) — A market manipulation technique where a trader simultaneously buys and sells the same asset to create fake trading volume and mislead other investors about demand.
- [Wrench Attack](/glossary/wrench-attack/) — A physical attack where criminals coerce a crypto holder into surrendering funds in person — the offline endgame of online data leaks. Named after the xkcd comic where a $5 wrench beats millions in encryption.
- [Zero-Knowledge Proof (ZKP)](/glossary/zkp/) — A cryptographic method to prove you know something without revealing the actual information.

### Smart Contract
- [Bundler](/glossary/bundler/) — An ERC-4337 participant that collects UserOperations, validates them, and packages them into a single on-chain transaction for execution.
- [ERC-1155](/glossary/erc-1155/) — A smart contract concept in the Web3 and blockchain ecosystem.
- [ERC-20](/glossary/erc-20/) — The standard for fungible tokens on Ethereum — defines the interface every interchangeable token must implement.
- [ERC-4337 (Account Abstraction)](/glossary/erc-4337/) — An Ethereum standard implementing account abstraction via a separate transaction layer, enabling smart-contract wallets with gasless txs, batching, and social recovery.
- [ERC-721](/glossary/erc-721/) — The Ethereum token standard for non-fungible tokens (NFTs), where each token is unique and non-interchangeable.
- [Event Log](/glossary/event-log/) — Immutable records stored on the blockchain by smart contracts, providing auditable logs of on-chain activities and data for off-chain indexing.
- [EVM (Ethereum Virtual Machine)](/glossary/evm/) — The runtime environment that executes smart contract code on Ethereum and all EVM-compatible blockchains.
- [Gas Optimization](/glossary/gas-optimization/) — Techniques and best practices for reducing the computational cost of smart contract operations on Ethereum and other EVM chains.
- [Paymaster](/glossary/paymaster/) — An Account Abstraction component that sponsors gas fees for smart accounts, enabling gasless transactions and flexible payment models.
- [Permit2](/glossary/permit2/) — Permit2 is a universal approval router developed by Uniswap Labs that extends ERC-2612 permit functionality to any token with advanced security features.
- [Proxy Pattern](/glossary/proxy-pattern/) — A smart contract architecture enabling upgradeability by separating logic and state through delegate calls between proxy and implementation contracts.
- [Reentrancy Attack](/glossary/reentrancy-attack/) — A smart contract exploit where an attacker recursively calls a vulnerable function to drain funds before the contract updates its state.
- [Smart Contract](/glossary/smart-contract/) — Self-executing code deployed on a blockchain that automatically enforces agreements when conditions are met.
- [Solidity](/glossary/solidity/) — The primary programming language for writing smart contracts on Ethereum and EVM-compatible blockchains.
- [Upgradeable Contract](/glossary/upgradeable-contract/) — A smart contract whose logic can be modified after deployment using a proxy pattern, allowing bug fixes and feature updates — but also creating centralization risk.

### Tokenomics
- [Bonding Curve](/glossary/bonding-curve/) — A mathematical curve that defines the relationship between a token's price and its supply, enabling continuous minting and burning.
- [Circulating Supply](/glossary/circulating-supply/) — The number of tokens currently in public circulation and available for trading, excluding locked, reserved, or burned tokens.
- [Deflationary Token](/glossary/deflationary-token/) — A crypto whose supply shrinks over time via token burns. What deflation actually does to price — and the red flags in burn-heavy token marketing.
- [Depeg](/glossary/depeg/) — When a stablecoin or pegged asset loses its target price (e.g., a 'dollar stablecoin' trading below $1), signaling a loss of market confidence.
- [FDV (Fully Diluted Valuation)](/glossary/fdv/) — The theoretical total market cap if every token that will ever exist was in circulation at the current price.
- [Inflationary Token](/glossary/inflationary-token/) — A cryptocurrency whose supply increases over time through block rewards, staking, or other emission mechanisms.
- [Market Cap](/glossary/market-cap/) — The total dollar value of a cryptocurrency's circulating supply, calculated as current price multiplied by circulating supply.
- [Max Supply](/glossary/max-supply/) — The maximum number of tokens that will ever exist for a given cryptocurrency, set by protocol rules and enforceable only through consensus.
- [Soulbound Token (SBT)](/glossary/soulbound-token/) — A non-transferable token that represents identity, credentials, or commitments within a Web3 ecosystem.
- [Token Allocation](/glossary/token-allocation/) — The distribution plan for a project's total token supply across team, investors, community, and treasury.
- [Token Burn](/glossary/token-burn/) — The permanent removal of tokens from circulation, reducing total supply to increase scarcity and potentially support price.
- [Token Vesting](/glossary/token-vesting/) — A schedule that gradually releases locked tokens to team members and investors over time, preventing immediate selling.
- [Tokenomics](/glossary/tokenomics/) — The economic design of a cryptocurrency token — its supply, distribution, utility, and incentive mechanisms.
- [veToken](/glossary/ve-token/) — A vote-escrowed token model where users lock tokens for a period to gain voting power and yield boosts, pioneered by Curve Finance.

### Wallet
- [Account Abstraction (ERC-4337)](/glossary/account-abstraction/) — An Ethereum standard enabling smart-contract wallets with gasless transactions, social recovery, and multi-sig security without changing the protocol.
- [BIP-39](/glossary/bip-39/) — The 2013 standard that converts wallet entropy into 12-24 readable backup words — the seed phrase. Defines the 2,048-word list, the checksum, and the word-to-bits mapping every major wallet uses.
- [Burner Wallet](/glossary/burner-wallet/) — A disposable low-value wallet used for risky interactions — minting, airdrop claims, unfamiliar dapps — so a compromise costs pocket change instead of your savings.
- [Cold Wallet](/glossary/cold-wallet/) — A cryptocurrency wallet that is not connected to the internet, providing maximum security for long-term storage of digital assets.
- [Custodial Wallet](/glossary/custodial-wallet/) — A cryptocurrency wallet where a third-party service holds and manages the user's private keys, similar to a traditional bank account.
- [Derivation Path](/glossary/derivation-path/) — The address of a key inside an HD wallet's tree — e.g. m/44'/60'/0'/0/0. Tells a wallet which branch of your seed phrase to read; mismatched paths make funds 'disappear'.
- [EOA (Externally Owned Account)](/glossary/eoa/) — An Ethereum account controlled by a private key (a user's wallet), as opposed to a smart contract account controlled by code.
- [Hardware Wallet](/glossary/hardware-wallet/) — A physical device that securely stores private keys offline, protecting crypto assets from digital theft.
- [HD Wallet](/glossary/hd-wallet/) — Hierarchical Deterministic wallet — one seed phrase deterministically generates a whole tree of private keys and addresses, which is why backing up 12 words backs up everything.
- [Hot Wallet](/glossary/hot-wallet/) — A cryptocurrency wallet connected to the internet, offering convenience for frequent transactions at the cost of reduced security.
- [Multi-Sig Wallet](/glossary/multi-sig-wallet/) — A wallet requiring multiple signatures from different key holders to authorize a transaction, adding security through distributed approval.
- [Non-Custodial Wallet](/glossary/non-custodial-wallet/) — A cryptocurrency wallet where the user holds and controls their own private keys, maintaining full ownership of their assets.
- [Private Key](/glossary/private-key/) — A secret cryptographic number that proves ownership of cryptocurrency assets and authorizes transactions.
- [Public Key](/glossary/public-key/) — The public half of a cryptographic key pair, derived from the private key and used to verify signatures without ever revealing the key that created them.
- [Seed Phrase](/glossary/seed-phrase/) — A human-readable list of 12-24 words that generates and recovers all private keys in a cryptocurrency wallet.
- [Social Recovery](/glossary/social-recovery/) — A wallet recovery method where trusted contacts (guardians) co-sign to restore access, eliminating the need for seed phrases.
- [Wallet](/glossary/wallet/) — A software program or physical device that stores cryptocurrency private keys and enables users to send, receive, and manage digital assets.
- [Wallet Address](/glossary/wallet-address/) — The public account identifier others use to send you crypto — safe to share, derived from your public key, and useless for spending without the private key.
- [Wallet Connect](/glossary/wallet-connect/) — An open protocol connecting wallets to DApps through a secure pairing process, widely used but exploited by phishing drainers.
- [Wallet Passphrase](/glossary/wallet-passphrase/) — An optional secret word (the BIP-39 '25th word') added to a seed phrase — it opens a completely different hidden wallet, enabling plausible deniability at the price of unforgivable loss if forgotten.

## Agent access
Streamable HTTP MCP server exposing full-text search and read access to every article and glossary term:
- Endpoint: https://theonchaindiary.com/api/mcp
- Tools: search / read_article / read_glossary / list_content
- Discovery: https://theonchaindiary.com/.well-known/mcp.json
- Structured JSON catalog: https://theonchaindiary.com/mcp/manifest.json
- RSS: https://theonchaindiary.com/rss.xml (zh: /zh/rss.xml)
- Setup guide & verify prompts: https://theonchaindiary.com/agent/