Recently, Binance Alpha is really making money!!
Airdrops 🎁 one after another. Basically, 500 U per person!
But there are thousands of airdrop projects. You are staring at its airdrops, and it is staring at your principal. How to safely get airdrops? Teach you how to identify!
Common fraud methods:
1. Phishing link trap
Disguised as Binance official website, malicious authorization pops up automatically after inducing wallet connection
Detection code
Identification: There is no small lock icon or certificate expiration warning in the address bar
2. Fake customer service
The blue-labeled "official customer service" in the Telegram group will chat with you privately
Word: "It is detected that you have airdrop qualifications, please provide mnemonic verification"
Identification: Real customer service never takes the initiative to send private messages, let alone mnemonics
3. Paid activation pig killing
Pay 0.1ETH to activate airdrop, return within 24 hours
The payment address often shows a large number of small transfer records
Identification: Vacuum drop never requires payment first
4. Contract bomb
Unlimited token authorization is required when receiving, contract code Contains hidden transfer functions
Identification: Use RevokeCash to check for abnormal authorization records
5. Shadow clone attack
Twitter high imitation account, the number of reposts suddenly increased, but the comments were all robots
Identification: Verify the unique ID of the certified account on the official website
6. Audit sleight of hand
Fake SlowMist/CertiK audit report, the color of the company logo in the PDF file is distorted
Identification: Check the project whitelist on the official website of the audit company
II. Anti-fraud protection, basic verification
Link letter by letter
Cross-verify the airdrop announcement in the official APP
Google search "project name + scam" to see the exposure post
Etherscan check the contract: whether the creator is a multi-signature wallet
Dune Analytics to see the claim data: Normal projects will have KOL addresses participating
Token liquidity> 1 million US dollars, otherwise it may be paper currency
Prepare a dedicated airdrop wallet (up to 0.05 ETH)
Use RevokeCash to revoke authorization immediately after claiming
The main wallet and airdrop wallet will never transfer
III. Review of real attack and defense cases
Analysis of a Layer2 airdrop phishing incident:
1. Forged Discord announcement leads to the cloned website
2. Fake Metamask pop-up window requires mnemonic input
3. Immediately cross-chain assets to Mixer after success
Identification: The real announcement is in the second-level directory of the official website, and no mnemonic input is required
Airdrop rule: All airdrops that urge you "how many places are left" will be treated as fraud by default!Real projects are never afraid of you taking your time to study. Holding on to your wallet means holding on to your ticket to the bull market!
