The other side of DApps: How Safe are DApps?

[evichi]

(I am not sure if this topic have been discussed previously, however, this is a kind of security alert/experience)
Recently, I noticed airdrops in my BSC wallet  (BestAir.io (AIR); BSCTOKEN.IO (BSCTOKEN); Minereum BSC (MNEB) ) not exactly sure how  and when I participated in the airdrops. The values were outrageous for an airdrop, so I decided to research the tokens in question and realized that it was a scam (scamdrop). (See:  Shitcoin Detective video on YouTube; Video Titles - BestAir.io 20000 USD Airdrop! (AIR) - Free money - Claim tokens – Scamdrop ; BSCTOKEN.IO (BSCTOKEN) Airdrop - Latest scamdrop info; Minereum BSC (MNEB) is a scam ).

I have often wondered why I have to pay for gas when I am the receiver of a token. If I am sending a token from my wallet, I am the one to pay for gas fees not the receiver, but this is not the case with Dapps transactions.  This technique is now being employed to defraud people of their hard-earned cryto coins/tokens by reprogramming to higher gas fees/values.

Video Summary: If you use Pancakeswap to swap the scam tokens, the transaction will not work, if you now go to the scam website to execute the transaction, you may lose all the valuable coins in your wallet and you will not get the swapped token. 

The question is : How safe are DApps connection to our wallets? How do we know which DApps are safe  to interact with?

[WalkerIVIV]

Just try to use the reputable dapps, remember that if dapps was open for everyone. The new token can be listed on the dapps like pancake or uniswap.

There are bunch of scam tokens these days issued by the scammers to be distributed randomly to the various address. The scammers itself were also pumping the price of coin to lure people to get some information about what it is.
Basically, the scammers were need your approval to be able to steal your money from your wallet. When the owner of wallet already approved it and scammer get access to the token that owned by such address.

MNE was just a scam airdrop that forced the receiver to pay some amounts to unlock the token and this can be done for a very long time to get full amount of airdrop.

These days so many scammers have various ways to fool people.

[Ararbermas]

Hell yeah, that's very suspicious wherein how comes you need to pay for gas fees even despite you're the receiver not the sender. Lol   indeed who will gonna pay for such shitcon, and if however it has a value it's still not worth it because we all knows that the fees nowadays still high, but no, it's wrong to be honest!
If were you must rely in some trusted dapps not that that kind of dapps wherein the intention is very obvious, tho, i mean just want to get some cash in easiest way.. Just imagine the fees right now. Lol

[tsaroz]

It's scary out there. People should limit their interactions and permission with different dapps as low as possible. There are services that would let you manage permission like the one offered by beefy finance. Large APY doesn't always mean good. You should use a different wallet if you want to experiment with new defis.
And handling the wallets is another thing you should be cautious of. It is better to set and use a wallet that to hopping here and their with private keys or mnemonic phrases.

[guydin]

As I know it is not almost possible for scam projects to steal money from your wallet if you don’t confirm it. I mean that when you want to swap for example on a new site, first of all you have to click “Approve USDC '' for example, and then if you confirm that this project can spend unlimited amounts of your USDC, you can lose them.
But anyway it is better to disconnect your wallet from web-sites that you don’t really trust, or use your wallets that don’t have the whole sum of your money on such sites and in airdrops.

[evichi]

Just try to use the reputable dapps, remember that if dapps was open for everyone. The new token can be listed on the dapps like pancake or uniswap.

There are bunch of scam tokens these days issued by the scammers to be distributed randomly to the various address. The scammers itself were also pumping the price of coin to lure people to get some information about what it is.
Basically, the scammers were need your approval to be able to steal your money from your wallet. When the owner of wallet already approved it and scammer get access to the token that owned by such address.

MNE was just a scam airdrop that forced the receiver to pay some amounts to unlock the token and this can be done for a very long time to get full amount of airdrop.

These days so many scammers have various ways to fool people.

Important point: to use the reputable dapps