I was robbed, and the severe setback made me rethink a problem

[qzl9199]

Yesterday, my NFT was stolen. The NFT that I spent all my money to buy, the NFT that can give me a bright future, was stolen. This isn't the first time I've been robbed.

So this made me take another look at WEB3. This time the theft was due to the leak of the private key.

Yes, in the blockchain world, private keys are everything. It is the highest authority, and the only thing that can reduce its importance is multisig.

But for ordinary users, multi-signing is a high threshold and difficult to complete. So, is there a tool that can "lock" your wallet?

This "lock" does not review incoming assets, but only reviews assets when they flow out. It can be a secondary password, or a fingerprint verification. This "lock" must follow the address, not a single wallet. As you can imagine, even if the thief logs in to the wallet with the private key from another place, the "lock" existing in the address is still in effect. It may be able to steal your private key, but it cannot steal your secondary password or physical characteristics.

Is this "lock" technically difficult to implement?

[bluebit25]

So this made me take another look at WEB3. This time the theft was due to the leak of the private key...

The problem is you, I know similar cases and it is also collected a lot in some tech sharing groups, when the market price increases, users join a large number of outright attackers. can take advantage of your ignorance of connection to take over your usage rights. I have seen them share more than 50,000 wallet addresses of the victim daily. However, some services are currently upgrading to protect users more with warnings when participating in the web3 space, be careful not to connect to services with potentially suspicious behavior, as well as the important thing is the "key" that only you know.

[MIner1448]

I want to say that neglect of safety always leads to such cases, unfortunately. It seems to me that everyone stumbled on this, and many, of course, at the beginning of their journey, but even now many experienced ones are losing their money. So you should always take additional protective measures.

[peter0425]

Yesterday, my NFT was stolen. The NFT that I spent all my money to buy, the NFT that can give me a bright future, was stolen. This isn't the first time I've been robbed.

so this is not the first time you have been robbed , I think this is already on you because being robbed for the first time is tolerable
but when this happened again then you should understand what is the problem with your security mate.
try not to be confident enough in everything you entered mate and specially in your crypto holdings that you must be securing and
may be taken from you if not making what you must act on.

[cryptoaddictchie]

So this made me take another look at WEB3. This time the theft was due to the leak of the private key.

So possibly that you click some phising links. Theres no way that he can view your private key at all. Most got scammed or hacked exposed to some malicious links. Avoid using social media or click some links underneath legit project cause chances that the second one is fake unless you check the profile first and verify that this is the real one.

[mk4]

Though multisig is great, you don't even need to go as far as using multisig.

1. Trezor/Ledger hardware wallet
2. 24-word backup only stored physically(not digitally on your computer/phone)
3. Don't get scammed or phished

That's it. No need for overcomplication.

[btc78]

Private keys can be acquired if your device was infiltrated and you said that this was not your first being robbed it is truly unfortunate but there are not that many technologies to prevent malware from getting into your system yes it could detect some suspicious activities but at the root of it we, ourselves, have to be extra careful and cautious about the links we click, the websites we open or the ads we check out

[o48o]

Yesterday, my NFT was stolen. The NFT that I spent all my money to buy, the NFT that can give me a bright future, was stolen. This isn't the first time I've been robbed.

So this made me take another look at WEB3. This time the theft was due to the leak of the private key.

Yes, in the blockchain world, private keys are everything. It is the highest authority, and the only thing that can reduce its importance is multisig.

But for ordinary users, multi-signing is a high threshold and difficult to complete. So, is there a tool that can "lock" your wallet?

This "lock" does not review incoming assets, but only reviews assets when they flow out. It can be a secondary password, or a fingerprint verification. This "lock" must follow the address, not a single wallet. As you can imagine, even if the thief logs in to the wallet with the private key from another place, the "lock" existing in the address is still in effect. It may be able to steal your private key, but it cannot steal your secondary password or physical characteristics.

Is this "lock" technically difficult to implement?

Basically only solution that comes into mind is making new kind of protocol, but that is also making the user experience even harder, it would be most likely highly centralized compared to current system, and collecting biometrics or such data would create problems with EU:s privacy rules. Because users would need to have a possibility to opt out afterwards, and with blockchain tech, it would need a whole new structure i guess.

Other one would be that the issuer who makes the contract has a possibility to freeze assets and with new kind of tech, even reverse transactions. And that's harder puzzle to solve without going full centralized systems and permissionless transactions and immutability would be thrown out of the window as well. And to be clear, those are the very things that make blockchain tech valuable in the fisrt place.

[Victorik]

Well, from the look of things it is obvious that you were being careless with you key phrase. So, don't blame anyone but yourself for this theft. This isn't a case of a wallet being hacked.
So I would suggest that you become more careful with how you handle your key phrase and be mindful of whom you reveal them to.
Anyways, sorry for your loss.

[MFahad]

Yesterday, my NFT was stolen. The NFT that I spent all my money to buy, the NFT that can give me a bright future, was stolen. This isn't the first time I've been robbed.

So this made me take another look at WEB3. This time the theft was due to the leak of the private key.

Yes, in the blockchain world, private keys are everything. It is the highest authority, and the only thing that can reduce its importance is multisig.

But for ordinary users, multi-signing is a high threshold and difficult to complete. So, is there a tool that can "lock" your wallet?

This "lock" does not review incoming assets, but only reviews assets when they flow out. It can be a secondary password, or a fingerprint verification. This "lock" must follow the address, not a single wallet. As you can imagine, even if the thief logs in to the wallet with the private key from another place, the "lock" existing in the address is still in effect. It may be able to steal your private key, but it cannot steal your secondary password or physical characteristics.

Is this "lock" technically difficult to implement?

sorry to hear  that you lost Your NFTs not once but twice. it is really unfortunate to see that so many people are loosing their NFTs and funds because of these security breaches and KYC leaks.
But How did your KYC got leaked this time? and what was the reason of your previous NFT theft?
I don't think Multisign is something regular/common crypto users can implement specially for daily and small transactions etc. Multisig is good for big projects and for people who deal with large sum of money.
For us the best thing is to protect our KYC and seed phrase as much as possible. don't interect with scammy apps and never trust anyone in crypto space.

[yazher]

I want to say that neglect of safety always leads to such cases, unfortunately. It seems to me that everyone stumbled on this, and many, of course, at the beginning of their journey, but even now many experienced ones are losing their money. So you should always take additional protective measures.

When it comes to any investment in the crypto industry, you always need to follow the instructions and some helpful tips to protect your crypto assets because this is crucial when it comes to preserving them. You need to know that there are people who are interested in stealing it from you and they are after it using the best way possible using every trick in the book to get it from you either by force or by following you with their sugar-coated words. lots of people have become victims of this kind of scenario where they don't pay much attention to knowledge rather they just want to follow any influencer's idea on what to invest and how to keep their crypto assets safe without considering other working methods to keep it safe.

[Wexnident]

Whatever "lock" you want to implement to your wallet is only difficult to the extent you actually want it to be. After all, it isn't a lie that crypto encourages you to be your own bank, and that includes the security part. So implementing security measures naturally comes as a part of it and it only ever becomes difficult if you don't even start taking note of it in the first place. In the first place it's not THAT hard to keep your keys safe, keep it away from being stored in any devices you use to access the internet such as having it writtin in a book in your place. Or hardware wallets.

Other ideas outside of those would be biometrics, 2FA and the like which requires creating a new structure around the wallets themselves, which isn't really needed with the methods we already have.

[Husires]

Is this "lock" technically difficult to implement?

This lock already exists and comes under the name Passphrase, and it is sometimes called hidden wallets, 13/25 word, or second password.

If you lose your seeds or someone knows them, you will be able to access your main account, which may contain zero dollars, but still needs a Passphrase to access your other account, which contains your main balance. You can create more than one Passphrase, and therefore for the same seed you can have more than one account, each account containing a different balance.
It is useful as a second layer of protection, but you need to keep it in a separate place, but it will not be useful if hackers gain access to admin privileges in your account, where they can record the screen or access the clipboard and copy Passphrase.

[batang_bitcoin]

If you think that you need multisig why didn't you do it earlier? You said that you're into NFTs and this isn't the first time that happened so basically, you have some things that you've done that made you leak your private key. I guess that you're into airdrops as well or those projects that requires you sign up and you neglect the importance of keeping your private key. When it's come to those, you don't have to sign up using your private keys. Sorry with your loss, that's saddens me but you should have learned with your first lesson.

[Samlucky O]

I want to say that neglect of safety always leads to such cases, unfortunately. It seems to me that everyone stumbled on this, and many, of course, at the beginning of their journey, but even now many experienced ones are losing their money. So you should always take additional protective measures.

That was exactly what I was thinking. Whenever we neglect safety the price is lossing something precious to us. And private key is one of them. Inasmuch as we preach about Bitcoin investment, I think we should also bear it mind that it also important to protect our key otherwise we would always complain about one thing or the other. Which would have been resolved earlier. The issues of privacy has always been the talk of the day and anyone who chose not to hacken to the advice will always be a victim.

[Gozie51]

This is just a lesson that you have to learn maybe in the hard way because it has happened to you twice now, don't allow the third to happen because that will mean you are not serious with your assets. The bull run is approaching and scammers likewise hodlers are preparing for it. Therefore, don't lose your coins carelessly by allowing your private key to be exposed. If you see a link, be careful not to click and imput your keys there. It is unfortunate that you lost that coin and hopefully you will learn alot from that experience.

[Tipstar]

There are several ways the private keys can be leaked so the best thing to do is to use mnemonic and stop using copy paste. I have switched to writing down mnemonics in paper. If my value are great enough, I might make a copy of my mnemonic notebook to cope with risk of disaster. Probably placing it on a bank locker far from where I live.
Defi are the present and future of crypto and it's where money is being made but it's also risky and insecure depending on how you use it and one mistake might make you lose it all.

[Sophokles]

Yesterday, my NFT was stolen. The NFT that I spent all my money to buy, the NFT that can give me a bright future, was stolen. This isn't the first time I've been robbed.

So this made me take another look at WEB3. This time the theft was due to the leak of the private key.

Yes, in the blockchain world, private keys are everything. It is the highest authority, and the only thing that can reduce its importance is multisig.

But for ordinary users, multi-signing is a high threshold and difficult to complete. So, is there a tool that can "lock" your wallet?

This "lock" does not review incoming assets, but only reviews assets when they flow out. It can be a secondary password, or a fingerprint verification. This "lock" must follow the address, not a single wallet. As you can imagine, even if the thief logs in to the wallet with the private key from another place, the "lock" existing in the address is still in effect. It may be able to steal your private key, but it cannot steal your secondary password or physical characteristics.

Is this "lock" technically difficult to implement?

You should not call it robbed; its more like a online scam. There are multiple ways to overcome an incident like this, and you were too lazy to explore any of it. If your entire portfolio was in that NFT then why were you using that same wallet to interact with other smart contracts? You should have used a new wallet that you will use only to hold your funds and will not connect with any smart contract and use another wallet that you will use to use any crypto services or app.

[kentrolla]

I think you need to reconsider the way you are taking internet casually because as far as I have knowledge no one can view your private key unless you share if somewhere, sorry for your loss but that's not the end of the world mate. Just ensure you don't click on any malicious links like some random airdrops or the links from telegram group which says you have won like $500 or such and asks you to link your wallet by sharing the private key.

I am sure you will be able to earn what you have lost but be more cautious and don't click any link which you don't have any affiliation and moreover check the URLs carefully as a friend of mine was looted via fake Binance URL.

[GxSTxV]

The issue here is not with your wallet or gadgets you are using, But it’s with the way you are using them and giving access and authority for hackers to access your private keys. You can use a simple wallet such as Trustwallet or Metamask extension for Ethereum web3 API injection. All you need to do instead of searching for a very secure wallet is learning about crypto and especially web3 securities.
When you mentioned NFTs, I understand that you are giving access to some websites to drain your wallet without even having your private keys, instead you are the one who is giving them access when you allow the infected smart contracts to steal your NFTs.

My only advice for you is to know and learn how you got hacked all these previous times, you can still use your old wallets if your private keys are not leaked. Just disconnect all the Dapps which are infected and make sure when you give access to any Dapp verify if the smart contracts are audited.