OUTBREAK TRANSMISSION · SECURITY DOSSIER 002
Wallet Security: Five Red Flags Before You Sign
In the outbreak, the most dangerous prompt may look routine. Pause before connecting a wallet, claiming a reward or approving a transaction you did not expect.
Red flag 01 · Someone asks for your seed phrase
Stop immediately. A seed phrase or private key gives control over the wallet. Do not type it into a website, send it in a message, or share it with a person claiming to recover funds or verify eligibility.
Red flag 02 · The URL is almost—but not exactly—right
Scam pages can imitate project names, layouts and social posts. Open a site from a saved official bookmark or the project’s known official channel, then inspect the domain before connecting. Be suspicious of sponsored search results or direct messages that redirect you to an unfamiliar claim page.
Red flag 03 · A surprise transaction appears
Do not approve a transaction you cannot explain. Read wallet prompts, inspect the requested action and amount, and reject unexpected signatures. If the prompt is unclear, close it and verify the application independently.
Red flag 04 · You must act now to unlock a reward
Urgency is a common social-engineering tactic. Be cautious of “claim now,” “send a small fee to release funds,” guaranteed returns, fake support accounts and unsolicited messages. Verify announcements through official project channels, not a reply or direct message alone.
Red flag 05 · Your everyday wallet is being used to test an unknown app
Where practical, keep a separate wallet with limited funds for unfamiliar applications. Maintain secure backups offline and understand that a separate wallet limits exposure but does not make a malicious transaction safe.
Pre-sign pause: five questions
- Did I navigate to the genuine website?
- Did I initiate this connection or transaction?
- Do I understand what the wallet is asking me to approve?
- Is any person or page asking for my seed phrase or private key?
- Can I stop and verify this request through a known official channel?
If something feels wrong
Reject the request, disconnect from the suspicious site, and do not send more funds to “recover” assets. If you believe a wallet is compromised, use a clean device and trusted wallet guidance to move any remaining assets to a newly created secure wallet; never enter the old seed phrase into a recovery site. Consider contacting the wallet provider through its official website.
This is a general safety checklist, not a guarantee against every attack. Keep software updated, verify every transaction and treat unsolicited requests as untrusted until independently confirmed.
Continue with the Solana token research checklist, explore the Outbreak Transmission archive, or visit the ZombieCash community ↗.
- Check token identity, liquidity and holders before swapping.
- Review the rug-pull warning signs if a token or launch page creates pressure to act quickly.
- Learn how to spot fake token websites and impersonation attempts.
Official references: Solana documentation and Google Safe Browsing phishing report. Never share a seed phrase or private key with a website, bot, moderator or support agent.
THE 10-SECOND SIGNING PAUSE
Before approving a wallet request, stop and answer all four questions.
If any answer is “no” or “I don't know,” reject the request and verify independently. No legitimate moderator needs your seed phrase.