Security and common attacks: key words

Using human contact, such as pretending to be someone trusted, to get information or access. Source

A form of social engineering: messages or fake websites that pose as someone trusted, to get your details or get you to open harmful links. Source

A malicious smart contract or program that moves crypto and NFTs out of a victim's wallet to criminals once the victim connects or approves it. Source

Permission you give a smart contract to spend your tokens on your behalf. Source

How many of your tokens an approved spender is still allowed to withdraw. Source

An approval with no practical limit, so the spender can take all of that token in the wallet, with no expiry date. Source

A signed message, under the ERC-2612 standard, that sets an allowance without a separate approval transaction. Source

Planting a look-alike address in someone's transaction history so that they copy it and send funds to the attacker. Source

A token transfer of zero tokens that an attacker can make appear to come from your address. Source

A project whose creator collects money from investors, then suddenly abandons it and keeps the money. Source

Hyping an asset to push its price up, then selling into the rise. The price usually falls and later buyers lose. Source

A long investment scam in which the scammer builds trust over time, then steers the victim into a fake crypto platform. Source

Using a flaw in a smart contract to take funds in a way its builders did not intend. Source

A bug where a malicious contract calls back into a vulnerable contract before the first call has finished, for example to withdraw twice. Source

An independent review of a smart contract's code to find weaknesses. It won't catch every bug. Source

A transaction's unique ID, a long string of letters and numbers. The FBI asks scam victims to report it. Source