SOL8 💹🧲

🚨 Seeing an uptick in stories of hacked wallets of VETERANS of this space; HOLY SHIT let’s talk common sense guys 🧵 Web3 Security Mega Thread 👨🏻‍🏫 I’m going to review common and not so common scams, as well as common sense security ~~~~~~~~~~~~~~~~ 🚨 This 👏 Is 👏 Serious 👏 Shit 🚨 Time 👏 To 👏 Wake 👏 TF 👏 Up 👀 You always think you’re not vulnerable because you’ve been around and “know better” ‼️ But this is the exact profile of the veterans who are getting drained in crazy numbers lately 🤨 THIS THREAD IS NOT COMPREHENSIVE; study security on your own, be hyper vigilant & always be skeptical ~~~~~~~~~~~~~~~~ 🛡️ Part 1/4: Intro & Common Hacks 1️⃣ Phishing Scams Fake websites or emails mimic legit platforms like MetaMask; they trick you into entering your seed phrase or private key ✅ Always double-check URLs ✅ Never share your seed phrase ✅ Use bookmarks for trusted sites 2️⃣ Malicious DApps Shady DApps can drain your wallet if you approve bad smart contracts ✅ Research DApps thoroughly ✅ Check contract audits on platforms like CertiK ✅ Revoke suspicious permissions via tools like Etherscan or Revoke .cash 3️⃣ Fake Wallet Apps Scammers upload fake wallet apps to app stores or send links via DMs ✅ Download only from official sources ✅ Verify developer names ✅ Avoid clicking random links 4️⃣ Social Engineering (Part A) 🚨 Hackers pose as support staff, friends, or big accounts on X or Discord to build trust and trick you into sharing keys or clicking links 🚨 For example, they impersonate Web3 staff via DMs, claiming an urgent account issue, then urge you to provide private keys ✅ Never trust unsolicited DMs ✅ Verify identities via official channels ✅ Assume a new DM is not coming from who it seems it’s coming from ✅ Stay suspicious always 5️⃣ Social Engineering (Part B: Fake Interviews & Jobs) 🚨 A common tactic: Hackers mimic big X accounts (ex., verified influencers or projects) and reach out for an "interview" about your favorite assets 🚨 They build rapport, then ask you to download "meeting software" (actually a trojanized app) that drains your wallet 🚨 Similar scams use fake job offers: They gain trust over days, then hit with malware via a "contract" or "ref link" requiring X account connection ✅ Question offers that seem too good ✅ Never download unverified software ✅ Some just boil it all down to this simple mantra: “Don’t click links” 6️⃣ Social Engineering (Part C: Impersonation Networks) 🚨 Bot networks impersonate trusted figures on X, posting about fake exploits like Uniswap hacks to trend and lure clicks to phishing sites 🚨 Or they pose as X support via spoofed calls or emails, threatening account locks unless you "verify" with personal info ✅ Ignore urgent threats ✅ Contact support officially 🔐 Tools like @Kerberus Sentinel3's Social Shield can auto-detect impersonators in your feed (Continued in Part 2/4 below)

🧵 How to Set Up an LP Position on @BlackholeDex + Pros, Cons, Risks 🤯 But first off, insane news: Blackhole has hit over $100M in TVL & $100M in trading volume just 2 days into the first Epoch 👀 Its ve(3,3) flywheel is living up to its name, sucking in massive amounts of liquidity 🤑 Want in? Here’s a mini guide to becoming a liquidity provider, benefits, LP staking vs. not, pros/cons, and impermanent loss risks ~~~~~~~~~~~~~~~~ 🤔 Why Provide Liquidity? 🔹Be a part of the decentralized enabling of swaps for tokens (e.g., BLACK/USDC pair) 🔹Earn rewards: Fees from trades + potential BLACK emissions if staked 🔹Benefits: Passive income, support favorite projects (deeper pools = less slippage, more volume), contribute to the ecosystem ~~~~~~~~~~~~~~~~ 👨🏻‍🏫 Step-by-Step: Establishing an LP Position 🔹Connect wallet to official Blackhole website on Avalanche C-Chain, using an EVM (Ethereum-based) wallet, go to “Liquidity” tab 🔹Choose pool type: Volatile vAMM for uncorrelated pairs (e.g., BLACK/BYTES), Stable sAMM for two pegged assets, or “Concentrated” for custom ranges (experience needed) 🔹Swap what you need to get equal value (e.g., $1500 worth of BLACK + $1500 worth of BYTES) 🔹Deposit balanced pair of tokens, get “LP tokens” in return (think of them like deposit receipts for your share of the pool) 🔹Enter amount for one token; the system auto-suggests the balanced amount for the second based on current prices 🔹Option: Stake LP in “gauge” for emissions (more below) 🔹Claim rewards anytime, or accrue ~~~~~~~~~~~~~~~~ 🆚 Staked vs. Non-Staked LP 🔹Staked (in “gauge”): LP tokens locked in pool’s voting mechanism, earns BLACK emissions (allocated via veNFT holders’ votes on that pool) + fees (go to gauge, shared with voters) 🔹Non-Staked (wallet-held): Just hold LP tokens; earns 100% swap fees in form of pool tokens (e.g., volatile pools), but no BLACK emissions ~~~~~~~~~~~~~~~~ 👇 Continued in Part 2 below