Safety Academy · The joke is on the scammer.
Good people.
Bad intentions.
Meet the tricks before they meet your money.
14 stories · For wallet owners
Protect your wallet
Fake tokens
Free tokens. Expensive gift.
Penny gets a surprise worth “$2,000”. Someone is already packing for a holiday.

Address poisoning
Right name. Wrong address.
Penny owes her coffee supplier 500 USDC. A lookalike in her history wants the job.

Ghost events
A transfer from nowhere. A bill for nothing.
Cleo sees 500 USDC leave in an explorer entry. Her real balance tells a different story.

Dust & privacy
Small change. Long shadow.
An unexpected Bitcoin payment is tiny. The privacy question is bigger.

Old spending permissions
Disconnected. Still invited.
Vera closes a swap site. Its spending permission did not close with it.

Fake exchange & drainer
Familiar logo. Unfamiliar landlord.
A fake Uniswap migration turns a 50 USDC swap into a request for 600.

Honeypot tokens
Easy to buy. Hard to leave.
HONEY is climbing. Cleo checks whether the exit opens.

Liquidity rug pulls
Real exchange. Removable floor.
ROCKET has a pool on Uniswap. Ken asks who can empty it.

Fake support & recovery phrases
Excellent service. Terrible helper.
A failed swap attracts someone very keen to repair Penny’s wallet.

Fake profits & withdrawal fees
Wonderful profits. Unavailable money.
A dashboard turns 100 USDC into 460. Withdrawing costs another 80.

Recovery scams
Lost money. Found another scam.
Someone promises to recover Penny’s loss, for one small advance fee.

Clipboard & QR substitution
Copied correctly. Pasted elsewhere.
Cleo has the right supplier address. The final screen has other plans.

Fake wallet apps & updates
Same icon. Extra owner.
An urgent wallet update wants Vera’s recovery words.

Fake hardware wallets
Brand-new box. Second-hand secret.
Penny’s new hardware wallet comes suspiciously ready to use.

End of wallet stories
Back to contents ↑7 stories · For software builders
Build safer software
Look-alike npm packages
Two letters. Too much access.
A misspelled software package nearly joins Ken’s payment demo.

Poisoned dependency updates
Trusted package. Untrusted Tuesday.
A routine patch release brings something the release note forgot to mention.

Weak key generation
Looks random. Isn’t enough.
Penny’s demo produces impressive-looking keys from the wrong source.

Broken signing libraries
Signature valid. Secret at risk.
The demo signs successfully. That is only the first question.

Leaked keys & credentials
Line deleted. Key still works.
Cleo cleans a bug report. An older copy keeps the secret.

Malicious developer tools
Dream job. Nightmare homework.
A coding exercise wants to run beside Ken’s work credentials.

Unsafe encrypted backups
It decrypts. It still fails.
A backup tool hides the text but misses a changed file.

End of software stories
Back to contents ↑