Safety Academy · The joke is on the scammer.

Good people.
Bad intentions.

Meet the tricks before they meet your money.

14 stories · For wallet owners

Protect your wallet

Fake tokens

Free tokens. Expensive gift.

Penny gets a surprise worth “$2,000”. Someone is already packing for a holiday.

Read the story →
Penny imagines a holiday after a surprise on her phone

Address poisoning

Right name. Wrong address.

Penny owes her coffee supplier 500 USDC. A lookalike in her history wants the job.

Read the story →
Penny checks her coffee supplier invoice before paying

Ghost events

A transfer from nowhere. A bill for nothing.

Cleo sees 500 USDC leave in an explorer entry. Her real balance tells a different story.

Read the story →
Cleo sees a transfer she never made.

Dust & privacy

Small change. Long shadow.

An unexpected Bitcoin payment is tiny. The privacy question is bigger.

Read the story →
A tiny Bitcoin payment arrives uninvited.

Old spending permissions

Disconnected. Still invited.

Vera closes a swap site. Its spending permission did not close with it.

Read the story →
Vera tries a swap with 25 USDC.

Fake exchange & drainer

Familiar logo. Unfamiliar landlord.

A fake Uniswap migration turns a 50 USDC swap into a request for 600.

Read the story →
A familiar community account shares a swap link.

Honeypot tokens

Easy to buy. Hard to leave.

HONEY is climbing. Cleo checks whether the exit opens.

Read the story →
Cleo notices a token climbing fast.

Liquidity rug pulls

Real exchange. Removable floor.

ROCKET has a pool on Uniswap. Ken asks who can empty it.

Read the story →
A new token has a pool on Uniswap.

Fake support & recovery phrases

Excellent service. Terrible helper.

A failed swap attracts someone very keen to repair Penny’s wallet.

Read the story →
Penny posts about a failed swap.

Fake profits & withdrawal fees

Wonderful profits. Unavailable money.

A dashboard turns 100 USDC into 460. Withdrawing costs another 80.

Read the story →
An online friend recommends a trading platform.

Recovery scams

Lost money. Found another scam.

Someone promises to recover Penny’s loss, for one small advance fee.

Read the story →
Penny looks for help after losing 100 USDC.

Clipboard & QR substitution

Copied correctly. Pasted elsewhere.

Cleo has the right supplier address. The final screen has other plans.

Read the story →
Cleo copies a verified payment address.

Fake wallet apps & updates

Same icon. Extra owner.

An urgent wallet update wants Vera’s recovery words.

Read the story →
A search result offers a wallet update.

Fake hardware wallets

Brand-new box. Second-hand secret.

Penny’s new hardware wallet comes suspiciously ready to use.

Read the story →
Penny receives a discounted hardware wallet.

End of wallet stories

Back to contents ↑

7 stories · For software builders

Build safer software

Look-alike npm packages

Two letters. Too much access.

A misspelled software package nearly joins Ken’s payment demo.

Read the story →
Ken adds a payment helper to a demo.

Poisoned dependency updates

Trusted package. Untrusted Tuesday.

A routine patch release brings something the release note forgot to mention.

Read the story →
A familiar package releases a small update.

Weak key generation

Looks random. Isn’t enough.

Penny’s demo produces impressive-looking keys from the wrong source.

Read the story →
The demo generates a fresh-looking key.

Broken signing libraries

Signature valid. Secret at risk.

The demo signs successfully. That is only the first question.

Read the story →
The team’s signing shortcut passes a demo.

Leaked keys & credentials

Line deleted. Key still works.

Cleo cleans a bug report. An older copy keeps the secret.

Read the story →
Cleo prepares a helpful bug report.

Malicious developer tools

Dream job. Nightmare homework.

A coding exercise wants to run beside Ken’s work credentials.

Read the story →
A recruiter sends Ken a small coding exercise.

Unsafe encrypted backups

It decrypts. It still fails.

A backup tool hides the text but misses a changed file.

Read the story →
The demo can encrypt and restore a backup.

End of software stories

Back to contents ↑