Search the complete library or follow a topic from first principles to advanced operational security.
30 articles
Need a definition? Open the glossary
A crypto scam is a fraud that manipulates a person into authorising the loss of their own cryptocurrency, whether by sending funds to a criminal, revealing a seed phrase or login code, or signing a transaction that hands over spending power. Scams attack judgement rather than cryptography, which is why the defences are habits rather than software.
The October 2025 liquidation cascade was a self-reinforcing deleveraging event in which a macro announcement triggered forced selling across a record-leveraged crypto derivatives market, and a venue-specific failure in collateral pricing converted an orderly decline into the largest liquidation in crypto history.
A crypto glossary explains the terms used to describe digital assets, blockchains, wallets, transactions, markets and on-chain applications. The most important distinction is between a record on a network and the authority to change it: the ledger records the asset, while keys, contracts or custodians determine who can act.
Chainalysis identified at least 14 billion US dollars of 2025 on-chain inflows to addresses classified as scams or fraud according to on-chain analysis, with the full total projected to exceed 17 billion as more illicit addresses are identified.
A crypto transaction is confirmed when it is included in a valid block on the chain a node currently considers canonical. One Bitcoin confirmation means inclusion in one block; further blocks add depth and reduce reorganisation risk. Ethereum also exposes explicit safe and finalised states.
Cryptocurrency works by combining cryptographic authorisation with a replicated ledger. A wallet builds an exact transaction and a private key, smart-account policy or signing quorum authorises it. Independent nodes check the transaction, block producers order valid transactions, and consensus rules select a canonical history.
Wallet recovery is the set of mechanisms that restore signing authority after loss: a device failing, a phrase burning, an owner forgetting, or an owner dying.
To buy cryptocurrency more safely, first set a strict loss limit, verify the exact legal entity in an official regulator register, secure both your exchange and email accounts with phishing-resistant authentication, compare the full cost before placing a small order, keep records, and withdraw only after checking the asset, network, destination and any required memo or tag.
Keeping crypto safe means controlling who can move your assets and making sure that someone is always you. In practice it is five disciplines working together: securing the accounts around your crypto with strong authentication, choosing custody so no single secret or company can lose everything, verifying what you sign before you sign it, limiting what strangers can learn abo…
Crypto incident response is the sequence of actions that limits damage after assets or access are compromised: diagnose the type of breach, evacuate remaining funds from a clean device, revoke or freeze what the attacker can still use, secure surrounding accounts, report to platforms and law enforcement, and rebuild in a safer structure.
A wallet drainer is criminal infrastructure, typically rented as a service, that steals through usable authority: a new authorisation the owner is deceived into signing, a signature made with an already-stolen key, or a permission granted long ago to a spender that later turns hostile.
Institutional crypto custody is a security and governance system that safeguards digital asset keys for organisations. It combines hardware isolation, distributed signing through MPC or multisignature, tiered storage, policy engines enforcing approvals and limits, independent audits and insurance, designed so that no single person, device or event should be able to lose or mov…
On-chain privacy is the degree to which blockchain activity can be linked to a real-world identity. Transparent blockchains publish every transaction, amount, address and timestamp forever, so privacy rests entirely on unlinkability: keeping addresses unconnected to each other and to a name.
A wrench attack is a physical attack on a crypto holder that replaces hacking with force: robbery, home invasion, kidnapping or extortion aimed at making the victim hand over keys or authorise transfers. The name comes from a security comic's observation that a five-dollar wrench beats expensive cryptography by hitting the person instead of the maths.
A private key is secret signing material that can authorise actions under a blockchain account or spending policy. A public key is mathematically derived from it and lets the network verify signatures without learning the secret. A wallet address is a network-specific identifier derived from a key, script, contract or program rule.
Proof of work and proof of stake are mainly Sybil-resistance and block-proposer mechanisms inside larger consensus systems. Bitcoin links block production to computational work and selects the valid chain with the most accumulated work. Ethereum links proposal and voting weight to bonded ETH, uses LMD-GHOST fork choice and finalises checkpoints with Casper FFG.
A smart contract audit is a structured expert review of contract code that hunts for known vulnerability classes, deviations from specification and dangerous patterns before deployment. It is a point-in-time assessment of one code version under stated assumptions.
The Crypto Loss Report is a periodically updated taxonomy of the ways crypto holders actually lose assets, ordered by evidence rather than by fear.
The State of Crypto Self-Custody is a periodically updated research report that measures how crypto holders custody their assets: the share of value held in holders' own keys versus exchanges, custodians and funds, the number of people involved, the events that move them between models, and the technology they use.
Threshold cryptography distributes a cryptographic operation across several parties so no single party can act alone. In a t-of-n threshold signature, any authorised set of at least t participants can jointly produce one ordinary signature under one group public key, while fewer than t should not recover the signing key.
Two-factor authentication is an account security method that requires two independent proofs of identity before granting access: typically something you know, such as a password, plus something you have, such as a phone, an authenticator app or a hardware key. It protects an account even when the password leaks.
Crypto risk is the set of ways a blockchain system can cause loss despite its cryptography working correctly. It spans code (smart-contract bugs and upgrade keys), inputs (oracle and dependency manipulation), infrastructure (bridge validator sets and operator signing), and markets (leverage, liquidity and reflexive liquidation cascades).
A key storage model is the arrangement that decides where a wallet's signing authority lives and what must be compromised, lost or coerced for assets to move. Software wallets hold keys on a connected device, trading safety for convenience. Hardware wallets isolate keys in a dedicated device designed to sign internally and keep key material inside.
A blockchain is a distributed ledger that records ordered transactions or state changes in blocks. Each block normally references its predecessor and contains cryptographic commitments to its data. Nodes independently validate proposed blocks and use consensus and fork-choice rules to decide which history to accept.
A seed phrase, also called a recovery phrase, is a sequence of words, twelve to twenty-four under the BIP39 standard, that encodes the entropy from which a wallet mathematically derives its private keys.
Bitcoin is a peer-to-peer electronic cash and settlement system launched in 2009. It records ownership on a public blockchain and uses proof of work plus independently validating nodes to prevent double-spending without a bank. Its native asset, bitcoin (BTC), is issued on a declining schedule that approaches 21 million units.
Cryptocurrency is a class of digital assets whose ownership and transfer are recorded on a cryptographically secured distributed ledger. A wallet or custodian uses private keys to authorise transactions, while network participants validate and order them under shared rules.
A multisignature wallet is a custody arrangement that requires a threshold of independent keys, m of n, to authorise any transaction, enforced by the blockchain itself through a script or smart contract.
A custody model is the arrangement that decides who controls the key able to move your crypto. Custodial services hold keys on your behalf, so you rely on the company. Single-key self-custody puts one key, and its seed phrase backup, entirely in your hands.
A cross-chain bridge is an interoperability system that moves value or messages between blockchains that cannot read each other. Typical designs lock assets in a contract on the source chain and mint a representation on the destination, with a verification layer, validators, a multisig, a light client or a proof system, attesting that the lock really happened.
No articles match this search yet.