We encourage you to adopt the following list of safe measures and best practices to secure your crypto wallet.
When possible, use your web3 wallet in a browser solely dedicated to connecting to Sovryn. At a minimum, use a single browser for connecting to known trusted crypto protocols, and use a different browser for all other web surfing/browsing.
Conclusion: Do not use the same browser that includes your web3 wallet for regular internet surfing/browsing.
Avoid opening additional tabs in the browser while you're wallet is connected and/or unlocked. It is possible a website you visit might gain access to your public key and balances.
Conclusion: Do not use additional tabs to search or visit unknown/untrusted sites. Best practice is to use a single tab when your wallet is unlocked and connecting to a trusted protocol.
Be sure to disconnect and lock your wallet when not in use. Get in the habit of disconnecting and locking your wallet after each session. Some wallets, like Metamask, allow you to set a maximum time interval for active sessions, after which time the wallet locks.
Conclusion: Disconnect and lock your wallet after each session.
Revoke unlimited spending. While this functionality is not currently available on RSK, it is worth considering on chains where available. Revoking requires a gas fee. That said, revoking spending can get expensive, so if the revocation is too costly, it may be better to simply setup a new wallet.
Choose/verify the amount you wish to spend in the transaction settings/options when the wallet asks for confirmation.
Conclusion: Always double check the transaction amount, and gas fee before confirming transactions.
Use a hardware wallet (cold storage). Hot wallets (browser/software wallets) store your password, private keys, and seed phrase on your device. A hardware wallet is the safest type of wallet. Once disconnected from your device it cannot be accessed.
Conclusion: Hardware wallets offer the highest level of security.
Never share your password or seed phrase with anyone. Legitimate crypto protocols, like Sovryn, will never ask for your wallet password or seed phrase. Our community managers and technical support team do not require this information in any circumstance. If you are contacted by what appears to be a member of the Sovryn team, and you are asked to provide this information, refuse and report them immediately! - They are likely a scammer posing as a member of our team.
You are the only one that can assure the security of your funds. You are in control.
Sovryn's top priority is security. Sovryn's smart contracts are audited.
Conclusion: Never share your wallet password or seed phrase/private keys with anyone.
As part of our commitment to keeping Sovryn safe, we encourage you to report any suspected scams to us directly using the following link:
Report Scams Here: https://discord.gg/8sgA8AgAJF