Security page

[ryancreatescopy]

Is your feature request related to a problem? Please describe.

We want to add a page that lists some security tips for staying safe and keeping your funds secure when:

• using a wallet – e.g. never share your private key ever
• using a dapp – e.g. always check the URL bar, scammers buy up fake domains like cwrve.fi
• staking – e.g. double check the contract address before depositing
• interacting with crypto social media/community platforms (e.g. how to avoid scams/ what to look out for) – e.g. Vitalik will never endorse giveaways, no one will ever send you 3 ETH in exchange for 1.

Describe the solution you'd like

I think the way we want to structure this is like different checklists – something that provides simple steps to follow or things to check dependent on what you're doing.

I'd like contributions to this issue to be in the form of the content of the specific tips that we should add to the page. What are the best security tips you'd tell your friends getting into crypto?

Feel free to think outside the categories listed above, maybe we want to talk about general best-practice security like using a 2FA and password manager etc.

Rough sketch

[wackerow]

Would love to help out with this if you want to assign. Were you thinking about this living in the Learn section as a page-conditional?

[wackerow]

...and just read closer again, looks like you're more looking for help with the content, in which case I'll get back to ya.
But lemme know if you want a hand with putting this together, started a draft.

[github-actions]

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days

[wackerow]

(unstale)

[qbzzt]

You may find this list of crypto failure modes (from https://github.com/qbzzt/etherdocs/blob/master/paper_wallet.md) useful for wallet security:

Here is a partial list of failure modes.

• Lost mnemomic. Those twelve words are the only way to transfer funds out of the account. If you lose them, you can still gaze longingly upon the balance in your account, but you will not be able to get the funds.

• Disclosed mnemonic. This is the mirror image of the previous failure mode. Anybody with the mnemonic can get your funds. If you think it may have been disclosed, it is best to create a new one and address and immediately transfer everything.

• Forced disclosure. For example, if you try to use this to avoid paying income taxes, the tax authorities can prosecute you for tax evasion and throw you in jail until you pay them what they think you owe. Remember that the people who pay you know your address, and that anybody with that knowledge can go to https://etherscan.io/address/ <address> and see the balance it holds.

• Malware disclosure. It is recommended to reboot the device to clear the RAM after you use the calculators. However, if the device has malware, that malware might record your keystrokes or screen to disk and then send it to whoever controls it when an Internet connection is available. In theory, it would be better to destroy the device instead of using it after a reboot. However, in most cases that the cost is too high compared to the risk to justify this wanton destruction.

• Stealth disclosure. Even a computer that isn't connected to any network sends off radio frequency signals. If somebody receives those signals, they can decode what you see on your screen when you generate the mnemonic and address. If you are tring to keep a secret from the NSA, you probably need to get a special computer.

[wackerow]

@qbzzt This is great... definitely some stuff worth utilizing. This has taken the back burner recently, but definitely appreciate you dropping this here. Something I am still eager to spread the word on.

[IliadisVictor]

Is help still needed for this ?