My Metamask Wallet Had Been Compromised/Hacked. What Should I Do?
If you were hacked, this would most likely be due to a few possible reasons:
· Your computer has been compromised with (malware/spyware) and you stored your private information on your computer.
· You have visited a malicious phishing website that stole your information. Avoid clicking any malicious links such as on Twitter dm, Discord, and so on.
· You gave your private key or Seed Phrase/Secret Recovery Phrase unintentionally to someone or a site.
· You unintentionally gave a web 3 site/smart contract unlimited access to your funds (check who you gave access to and revoke here):
ERC20 — https://tac.dappstar.io/#/)
BSC/BEP20 — https://bscscan.com/tokenapprovalchecker
· You installed a fake MetaMask extension that stole your funds.
Try to analyze your browser history and scan your computer to eliminate any further breach of information. If you discover any suspicious phishing websites please notify us via the Metamask Support Form so we can prevent this from happening to other users in the future. If you have any further information after your own investigation please let us know.
Note: Pentas or any platform cannot help you to refund or reverse the transaction because this is the web 3 world. Pentas or any web3 platform didn't own your asset/fund. Only a person who has the access/seed phrase can do the transactions. Even we are the person who created Pentas, we also cannot do anything. Please take note. What is web 3? Refer here.
NEXT STEPS TO DO:
1. Install MetaMask on another browser (or create another profile on your current browser of choice), or create a new account from a fresh download of the mobile app.
2. When asked, create a new seed
3. Write it down and store it someplace safe
4. Go back to the compromised account and send funds and NFT to the newly created account.
5. Discontinue using the old account as soon as possible.
6. If you are Malaysian, please study this video to have a better understanding of this. Here’s the link https://pentas-skool.io/courses/securing-blockchain-journey/.
BONUS — SIGNS OF SCAM
- Admins or support will never private message first.
- Any website that has a pop-up and ask about your seed phrase to sign in, avoid it.
- Admin will never direct you to a website where you will need to put in your seed phrase/passphrase.
4. If you are asked to send funds to get more funds in return.
5. Never fall for the SCAMS that tell you to send me 1 eth or x amount of any token and we will send you back 2x or more.
