Update by evilcos, for DarkHandBook.io

Blockchain dark forest selfguard handbook
Master these, master the security of your cryptocurrency.

🔥Website: https://darkhandbook.io/
🇨🇳中文版：《区块链黑暗森林自救手册》

这里会列一些我个人总结的、围绕黑手册的扩展阅读，基本都会是 Twitter Thread 形式。

闪电网络通道科普一例：
https://twitter.com/evilcos/status/1628945985811660800

如果你的 Discord token 被钓了，但被你及时发现，以下哪个做法并不能阻止黑客使用你的 Discord token 权限？
https://twitter.com/evilcos/status/1628018317893181440

被钓鱼网站钓走钱包签名后，相关资产被盗了，这个钱包还安全吗？
https://twitter.com/evilcos/status/1625387330117992449

Twitter 链接预览 User-Agent 欺骗钓鱼：
https://twitter.com/evilcos/status/1624268782993821696

闪电网络地址等有关科普：
https://twitter.com/evilcos/status/1621380824867430400

NFT 钓鱼 Apetainz 的 UI 伪装欺骗
https://twitter.com/evilcos/status/1619504230586535936

删除 MetaMask 扩展时，私钥/助记词文件会如何？
https://twitter.com/evilcos/status/1615540204441591814

当你电脑中相关木马后，木马是如何黑掉你的 MetaMask 的
https://twitter.com/evilcos/status/1615931120457220100

为什么 WETH 一个签名就被钓走
https://twitter.com/evilcos/status/1615220059299000324

Web3 Cybersecurity Academy - Enhancing user asset security Lesson 1
https://twitter.com/1nf0s3cpt/status/1614612129671438343

Telegram 盗号导致盗币
https://twitter.com/evilcos/status/1611541986120732672

APTOS 钓鱼
https://twitter.com/evilcos/status/1610910301934989313

讨论钱包的一个关键安全点
https://twitter.com/evilcos/status/1607721007837769728

Solana 钓鱼
https://twitter.com/evilcos/status/1607558572921217027

警惕密码管理器永久删除风险
https://twitter.com/evilcos/status/1606889696436813825

关于 LastPass 被黑
https://twitter.com/evilcos/status/1606615478277132289

一个有趣的“被盗”案例
https://twitter.com/evilcos/status/1605826949850374144

NFT 零元购技术解析
https://twitter.com/evilcos/status/1604067276265000960

Discord token 废弃方式，三选一：

1. 主动登出账号，不是关闭页面；
2. 修改密码；
3. 添加 2FA 或修改 2FA。

MetaMask CLAIM REWARDS 欺骗
https://twitter.com/evilcos/status/1600356939845640193

看去像乱码的签名是否有风险
https://twitter.com/evilcos/status/1599258003798396929

零转载骗局
https://twitter.com/evilcos/status/1598245354951974913

钓鱼网页模仿 MetaMask 弹框
https://twitter.com/evilcos/status/1597813536323170304

波场(Tron)多重签名骗局
https://twitter.com/evilcos/status/1596374505751924736

突破钓鱼网页反调试
https://twitter.com/evilcos/status/1594514681401835520

MetaMask Security Update 欺骗
https://twitter.com/evilcos/status/1593588745353060352

当 Connect 一个钓鱼网站，会有安全风险吗？
https://twitter.com/evilcos/status/1593579289726709760

钱包「签名」和「授权」的区别
https://twitter.com/evilcos/status/1592888608364511233

Uniswap swapExactTokensForTokens 钓鱼
https://twitter.com/evilcos/status/1591783549505511426

假币安 App 钓鱼
https://twitter.com/evilcos/status/1589921365393805312

OpenSea 签名认证请求
https://twitter.com/evilcos/status/1588722701669404672

signTypedData 用成“盲签”的感觉
https://twitter.com/evilcos/status/1588522243285716994

双因素认证(2FA)安全的话题
https://twitter.com/evilcos/status/1587674436710584321

OpenSea upgradeTo 钓鱼
https://twitter.com/evilcos/status/1585909695990022145

DAI/USDC 等的 permit 签名钓鱼
https://twitter.com/evilcos/status/1581215108910309377

eth_sign 盲签钓鱼
https://twitter.com/evilcos/status/1579449487302725647

几种签名钓鱼区别：eth_sign/personal_sign/signTypedData
https://twitter.com/evilcos/status/1578988023945269248

OpenSea 空投假 Offer 骗局
https://twitter.com/evilcos/status/1576747276684259328

Punycode 字符欺骗钓鱼
https://twitter.com/evilcos/status/1563739097893462016

BGP 劫持案例与科普
https://twitter.com/evilcos/status/1560881728910426113

DNS Hijacking(劫持)案例与科普
https://twitter.com/evilcos/status/1557222249958350848

授权钓鱼识别技巧：0xa22cb465 即 setApprovalForAll
https://twitter.com/evilcos/status/1548581215648694273

被盗了怎么办？
https://twitter.com/evilcos/status/1533288715065634817