Learn how to set up and back up a hardware wallet to keep your cryptocurrency private key offline and safe
Recognize and avoid phishing attacks, fake DeFi signing requests, and Discord or Telegram scams targeting crypto users
Follow a step-by-step incident response plan if your wallet is compromised to stop further losses and preserve evidence
Audit your operating system, browser, email, and SIM card security as part of protecting your crypto holdings
This is a written guide, not a piece of software. The SlowMist security team put it together to help anyone holding or considering cryptocurrency protect themselves from theft and scams. The title refers to the idea that the crypto world is a "dark forest" full of predators, and the handbook is a survival manual for navigating it without losing your funds. The guide is organized around the three main things a crypto user does: creating a wallet, backing up a wallet, and using a wallet. A wallet in this context is software or hardware that holds your private key, which is a long string of characters that proves ownership of your cryptocurrency. If someone else gets that key, they can take everything. The handbook explains different wallet types, including hardware wallets (physical devices kept offline), browser extension wallets, and mobile wallets, and helps the reader decide which is appropriate for what purpose. Beyond wallets, the guide covers a wide range of risks that come from everyday online habits. There are sections on protecting your operating system, browser, email, and SIM card. It addresses scams specific to crypto platforms like phishing attacks dressed up as official communications, deceptive signing requests in decentralized finance apps, and manipulation through Telegram and Discord. The handbook frames all of this around two core principles: zero trust (stay skeptical of everything) and continuous validation (actively verify anything you decide to trust). There are also sections on what to do after things go wrong: steps to take if your computer is infected with malware, how to stop further losses if your wallet is hacked, how to preserve evidence, and how to trace what happened. The final chapters address common misconceptions that lead people to false confidence, such as assuming that "code is law" means smart contracts are safe, or that cryptographic technology alone is enough to protect your money. The handbook is available in Chinese, Japanese, Korean, Arabic, and Indonesian in addition to English. There is no code to run or install. It is a reference document intended to be read and applied in practice. The full README is longer than what was shown.
← slowmist on gitmyhub — every repo by this author, as a profile.
Verify against the repo before relying on details.