Home Creators Posts Import Register Favorites Logout
haven't archived this post yet. have a subscription? use the importer!

Content

A hard lesson and an important reminder. Kudos to this member for wanting to share this painful story.

Unfortunately, a valued member of our community was hacked and lost everything. The likely cause? A single misplaced click — a phishing link that compromised their machine, granting full access to their wallet. In minutes, it was drained.

This wasn’t a beginner. This was someone extremely tech-savvy — the kind of person who uses Bitwarden, YubiKey, 2FA, and takes security seriously. It’s a stark reminder: even the most prepared can still fall victim.

It’s heartbreaking, but true — it can take a lifetime to build and just one second to lose it all.

Please, be vigilant. Learn from this. Below are critical rules I can’t stress enough.

It’s also a key reason I lean heavily toward trading equity options over storage and avoid crypto exchanges like the plague. This was KRAKEN by the way and NOBODY is available to answer the call - meanwhile Coinbase calls and texts me every single day (yeah Coinbase will never call u - they are scammers)

MY HACK PREVENTION RULES

1. Use a Dedicated Computer for Crypto

  • Never use your crypto device for browsing, email, or social media.

  • Disable Bluetooth, auto-updates, and USB autorun.

2. Never Click Links — Ever

  • No clicking links in emails, Discord, Telegram, Twitter, etc.

  • Always type the URL manually or use a trusted bookmark.

3. Cold Storage Is Far Better than Centralized Exchanges

  • Store the majority of funds on a hardware wallet (eg Trezor)

  • Never leave meaningful funds in hot wallets, mobile apps, or exchanges.

  • PS if you are also afraid of COLD STORAGE like me - use ETFs or put your Crypto with a custody - see my FIdelity case from Q&A last week.

4. Separate Wallets for Different Functions

  • Use different wallets for:

    • Long-term cold storage

    • Yield farming or DeFi

    • Perp Trading

    • Day-to-day spending

    This limits risk exposure if one wallet gets compromised.

5. Secure Seed Phrases Like Your Life Depends on It

  • Never store seed phrases digitally (cloud, photos, screenshots, notes app = NO).

  • Use metal backups like Billfodl, Cryptosteel, or Seedplate.

  • Store backups in multiple geographically secure locations (but not easily guessable ones).

FInal note from a member... SYNC

Files

Previews only

Comments

FOS Holder

How much is considered a significant amount on a cold wallet ?

Tommy Nakamoto

Create the wallet using cold storage. Hammer the seed phrase into a metal plate. Recover it to a different cold wallet to test the seed phrase. Smash up both the cold wallets with the hammer you used for the seed phrase. When you need access, just recover it using the seed to a new hardware wallet.

InternetExploder

I keep telling people, you can buy a dedicated stick PC to use with existing monitor or TV and keyboard, mouse. It's cheap and minimal for wallet management.

Keme Zuofa

Clicked the wrong url but the message came from the official SMS of Mecx

Fairplay

If he had Authy etc how did they bypass that . It sounds like he gave them complete control of his laptop . How then did they get his passwords ?? To move stuff .

Lisa Tamati

whats your take though on Jeff Booths approach that anything but cold storage is weakening the network and ETF's and co are not good for the bitcoin network as. a whole.

Andrew Johnson

Same happened to me on Trezor. Lost the whole wallet. They allow URL inside their suite that are spam. They look legit and mirror match their ux. Trezor is worse than cinbase imo

GloMa

Yea.. Booth says it has to be adopted as a currency in order to last.

GloMa

Mayb he had th acct already open on his computer?🫤🧐

GloMa

Fascinating. If u add a 25th seed .. it wouldn’t b accessible to anyone even if they found th metal plate.

Keme Zuofa

MEXC is a crypto trading platform, just like Binance, Coinbase etc

Ian Johnson

Cold Card Q - cold wallet 👌🏼👍👌🏼👍👌🏼

JMiddz Gaming

I’ve been thinking about this since this post was released. Dedicated machine. Preferably laptop or desktop? Also I hear dedicated email (secure). Anyone have any experience with most secure email options?