Original author:@NiqisLucky
Original author:
What follows is a lesson in blood and tears as I recall every painful detail. (The end of the article is my heartfelt words)
TL；DR
first level title
DM links 1000% don't trust
Don't bother to put cold wallet
After being stolen, contact Opensea to lock the mark in time, reduce the value of the item, and then negotiate to get it back (threat to the police or buy it back below the market price)
Remove the mnemonic leak. Theft is most likely to occur in Mint and in the middle of a transaction. Usually also have daily protection.For Mint: New projects use very wallets to interact.
If you have a hobby of rushing NFT dogs, be more careful. There are many ways of deceiving people, such as asking you to verify the blue-chip white list, and actually transfer it away directly. Hackers can construct phishing contracts targeting your valuable NFTs. (Multiple monkeys were stolen as a result)
If the official is a trustworthy project, the contract is also safe and cannot be taken lightly. The server is hacked, and someone pretends to be a relevant person's private message link (Steal Mint / Giveaway) may also directly get you recruited. (However, this kind of money is generally cheating mint, not stealing NFT)Remember to close DM, do not link wallet and authorization unless necessary.
【The sky will never drop the pie casually】For transactions: High-value NFTs often require private transactions in order to avoid high handling fees. There is a key point:
Do not use the other party's links and recommended tools.
The best situation is to initiate by yourself. For example, in NFTTrader, you can directly check and select the NFT or money in the other party's wallet, and then initiate the transaction. Let the other party check whether they have received the transaction request on the official website. No link required at all.
example:
Most of the DM's OTC transaction links are phishing links constructed for your assets, directly transferring your precious NFT.
If you don't understand OTC transactions at all, then simply don't bother and spend some handling fees to keep yourself safe.
Be emotionally stable, and don't just follow the other party to operate. Many people will easily misuse when they are unconscious. It is recommended not to make important transactions in the early morning and let the bullets fly for a while.
For everyday protection:For the three caves of the cunning rabbit, I recommend placing them in wallets according to the value of the NFT.
Be sure to have a hardware wallet cold wallet (if your NFT assets exceed 10Eth).
There are many hardware wallets on Baidu. Ledger or Onekey are recommended. Those with blue chips should not be reluctant to set up a safe position with hundreds or thousands.
If unfortunately stolen (NFT arrives in the other party's wallet):
If you realized it just after it happened, immediately see if the transaction can be canceled with full Gas, this is your last chance.
If it's a done deal, then you have to be prepared for tossing.
The first time it was stolen:
① Take a screenshot of the chat history immediately (delete the evidence after the scammer succeeds)
② Send the situation to Openbsea’s only help email address antifraud@openseahelp.zendesk.com in English, with the content as follows:
1 My XX NFT was stolen (link), please help me to freeze the mark as stolen immediately; 2 Stolen chat records, phishing links, stolen Transation transfer links.
③ Immediately tweet (in English), shout out that it was stolen, and attach the content just now. Then @opensea@opensea_support and KOLs you can think of, let the entire NFT community see you and let Opensea notice; send it to the community immediately, let the community where your NFT is located know your situation, and see if it can help;
④ Be careful of fraud, don’t trust the person who says you are Opensea, or asks you to give the private key, only look at the official;
⑤ At the same time, the scammers will immediately sell the stolen goods on Opensea, and start placing orders or accepting offers. Even if Opensea is locked, he will go to Looksrare and X2Y2 to sell the stolen goods.
⑥ Try to find a way to Dox the liar and clear the evidence chain. If you are lucky and the stupid liar did not do a good job of identity isolation, you can use the evidence chain to report to the police in the country where he is located. (It should also be possible to file a case at home and abroad) and then threaten him to return the stolen money or NFT.
But now scammers are generally well-anonymized, using tornado to mix coins, it is difficult to track.
⑦Based on past experience, they are usually bought out. So if the price is right, it is best to get it back as soon as possible, and negotiate the price with the liar. Be careful not to be deceived again. (I will find a way to call the police overseas later)
If it is bought, then you can only negotiate the price with the buyer, usually not lower than the cost price of his purchase (some people do this kind of dirty business). At this time, it may be more troublesome than buying directly.
⑧ If your NFTs are relatively expensive, such as monkeys, such as various 1/1 Top100, generally buyers will check whether the OS is abnormal when they see the price is cheap before buying. (The meaning of locking Os is here, let a part of the value be locked in your hands, and other platforms don’t care about u1s1)
Therefore, it is generally impossible to sell very expensive, and it will be lower than the market price. When negotiating, emphasize that only you can unlock your items.
⑨ Finally, most people's NFTs are bought back. Generally, as long as they are locked, they can be lower than the market price. You must be prepared for this.
It is worth noting that Opensea's locks are temporary now, and you need to provide a notary office file for long-term locks. After getting it back, it needs to be notarized again before it can be unlocked.
So don't miss the official reply, so as not to be marked and locked by Opensea.
Some heartfelt words:
Many precious things are only realized when they are lost, and they will regret why they did not take precautions in the first place.
If you haven't been stolen yet, don't rejoice, be vigilant. I saw a lot of stolen cases before, and I just muttered a few words in my heart, but I never got to the bottom of it. It turned out to be bad luck soon. Unfortunately, in this unregulated world, there are always more scams than good things.
If you've been robbed, accept it, tidy up, and take the next step. Although it is easy to say, when I was first stolen, I felt that the sky was falling, so I tried my best to get comfort and help from my friends. After the experience, maybe you will cherish this web3 community even more.
My big thanks to @Jerry_ZZQ, my @Luckycotfriends collector.
When the accident happened, he made a two-hour phone call to help me deal with the matter, and provided assistance in various aspects including mobility and psychological construction. I also thank all the friends who helped me. I couldn’t help crying when I opened Twitter Space that night (very immature), and then many old drivers even exposed their old scars to comfort me.Seriously, thanks to the Crypto community, the people here must be the most real and coolest in the industry. In March last year, I was just an ordinary junior who wanted to sell 3D works, promoting my works on WeChat and Twitter all day long. Never thought about DAO, Build, collection, etc.
But the speed at which I have grown and changed over the past year has surprised me. It definitely surpasses Tongji's education for me.
Thanks for having you and love coming.
