Partnered With:

Learn about common NFT scams and five tips to help you cast NFT safely

Read this article in 8 Minutes

Frequent asset theft. Be aware of NFT security risks.

Title: "Tips for Safely Minting NFTs"

原文作者： William M. Peaster

Overnight porridge, Babbitt

Hackers are exploring NFT Discord to find weaknesses, and we saw a tragic example this week when CreatureToadz's Discord was temporarily attacked.

During the incident, hackers use the opportunity to issued a false "invisible drop" link, the link seems to point to an a NFT casting interface, then the victim spent ETH (they thought themselves in casting NFT), but in fact all the money directly to the address of the attacker, without casting any NFT.

"It was hurtful, Discord was down for about 45 minutes, we just regained control of it and anyone who bought NFT from this scammer will be compensated. It's 2am and they attacked us while we were asleep. As a community, we will be stronger."

Fortunately, the CreatureToadz team regained control of Discord and will reimburse affected participants. However, this incident is a reminder that we, as NFT minters, must remain vigilant and that we are, in fact, increasingly targeted by hackers.

For today's post, I've collected some tips for safely casting NFT. All in all, these techniques can help you avoid or minimize the safety issues faced by NFT casting.

First of all, I don't think this is a comprehensive "best practice" for safe casting NFT, as I may have missed some ideas. But at the very least, these tips can help.

Learn about common NFT scams

"Know the enemy, know yourself, and fight a hundred battles without danger of defeat." Sun Tzu, Art of War

In general, the first step in implementing NFT security is to become familiar with the major scams that NFT users are currently facing. Current and future scams may evolve from these types of tricks.

As MyCrypto points out in its helpful Guide to Common NFT Scams, the medium of attack can include artist or brand impersonation, fake storefronts, and so on.

Tip 1: Use a special foundry wallet

Assuming you use a primary wallet, you'll store your best crypto art in it, publish your Mirror blog, and handle most of your DeFi activities.

In some cases, miscreants may abuse or break the permissions granted to these projects to steal funds.

"In fact, some sites are created with the intent of stealing money /NFT after the user grants them access to their wallet, so be careful which Dapp/ website you connect to......"

Thus, isolating the risk around minting new collectibles into a secondary wallet where you store only a small portion of your crypto assets is an easy way to improve NFT security.

Tip 2: Clean up your token licenses regularly

When it comes to permissions, it's a good idea to clean up on a regular basis, and again, users typically grant spending approval to NFT projects in order to interact with them. In the worst case, these spending approvals are unlimited and can therefore be exploited by attackers.

Good news? You can now use Etherscan's simple Token Checker tool to clear up risky authorization Approvals, and there are other tools like them.

Tip 3: Note "Sending ETH"

If you try Mint's new project NFT and see "Sending ETH" on your MetaMask interface, please leave, it's a scam!

That's what happened to the CreatureToadz project earlier this week. A hacker sabotaged Discord, then posted a fake bot announcement and surreptitiously collected ETH from the victim (who thought he had created CreatureToadz).

Tip 4: Seek out official information

Don't trust Discord bot announcements. Look for communications from project leaders, administrators, moderators, etc., and verify casting announcements and other important information across multiple channels (e.g., Discord, Twitter, community discussions, etc.). If a random person messes you about an "upcoming NFT release," just ignore it.

Tip five: after casting, please pay attention to fakes

Let's say a highly anticipated NFT project just sold out and you missed the casting. If you want to collect this series of NFT, you'll rush to secondary markets like OpenSea to participate in the trade.

Scammers will take advantage of this dynamic by launching fake pirated NFT collections.

OpenSea does a great job of cleaning up these lists quickly, but you have to be vigilant in these early Windows of opportunity.

conclusion

We are pioneers in the NFT frontier, where there is a lot of excitement but also a lot of risk. Following the tips above and checking things like urls and contract addresses multiple times will go a long way toward ensuring that your NFT bookkeeping process remains secure.