#WalletConnect Diaries - Episode 3
Powered by @WalletConnect and $BNB
Hey you'll #BinanceSquareFamily ,
Last month, Mercy — a campus crypto club rep in Helsinki, got a late-night call from a friend panicking over a “stuck” NFT mint. The friend had clicked a mint link from Twitter, connected their wallet, but nothing was happening. Like the good friend she is, Mercy offered to check it out.
She clicked the same link on her laptop, hoping to walk her friend through it. The site looked clean. It asked to connect via @WalletConnect . Out of habit, she scanned the code with her mobile wallet — and immediately, the session preview raised red flags.
Instead of the usual single-approval prompt, it asked for unlimited approvals on multiple tokens, including ones she wasn’t even trying to use.
She declined the session, ran a quick check on the site domain — it was off by one letter. A classic spoof. Her friend had already approved it. Tokens were gone.
At @WalletConnect , we have established adequate digital security chains and systems to protect your data and resources, however, we still ask our customers to do due diligence, and double-check every URL.
