Invariant

Phishing

Phishing is a social engineering attack where malicious actors impersonate legitimate platforms, services, or individuals to deceive users into disclosing sensitive information, such as private keys, seed phrases, or login credentials. In the crypto sector, phishing is highly sophisticated; attackers often create fake websites, send fraudulent emails, or use social media bots to trick users into signing malicious transactions that drain their wallets.

Private Key

A private key is a secret, mathematically generated string of characters that grants the owner complete control over an associated cryptocurrency address. It acts as a digital signature tool, allowing users to authorize transactions and prove ownership of funds. In a decentralized network, the private key is the ultimate proof of authority; whoever possesses the private key effectively owns the assets associated with the corresponding address. It is never meant to be shared with anyone.

Smart Contract Audit

A structured review of smart-contract code and system design intended to identify vulnerabilities, logic errors, and security risks.

Sybil Attack

A Sybil attack is a security threat in decentralized networks where an attacker creates a large number of pseudonymous identities to gain a disproportionate influence over the system. By controlling the majority of nodes or participating addresses, the attacker can disrupt network consensus, censor transactions, or manipulate voting processes in governance mechanisms, thereby subverting the decentralization and integrity of the blockchain.

51% Attack

An attack where one entity or coalition controls enough consensus power to reorganize blocks, censor transactions, or attempt double spending.

Address Poisoning

A scam where attackers create lookalike address activity so victims may accidentally send funds to the wrong address.