Wallet Defense for Airdrop Hunters: 10 Rules and a Breach Playbook

Airdrop hunters are priority targets​: fake claim pages, malicious token approvals, DM''d "airdrop" links. These ten rules structurally block the large majority of attacks.

Item	Detail
Time	~30 min for the full setup
Cost	$0 (hardware wallet optional, ~$80–150)
Effect	Blocks most phishing/approval attacks

Rules 1–3: Seed phrase

1. Paper, stored physically. No screenshots, cloud, or notes apps
2. Never type it anywhere. "Required to claim/sync" is always a scam; the only legitimate use is restoring your own wallet
3. Decide an inheritance/handover plan with one trusted person

Rules 4–6: Wallet separation

Run at least two wallets.

Wallet	Use	Holds
Vault	storage only, no dApp connections	most of your assets
Hot/burner	airdrops, mints, new dApps	only what you can lose

4. New farms and mints touch the burner only
5. Sweep windfalls to the vault promptly
6. Hardware wallet for the vault if you can (keys never leave the device)

Rules 7–8: Approval hygiene

Old token approvals are permanent backdoors​.

7. Never grant unlimited amounts — edit to the needed sum
8. Monthly, revoke stale approvals at Revoke.cash

Rules 9–10: Phishing avoidance

9. Claims/mints only via links from official X/Discord — never search ads, DMs, or replies
10. Read signature prompts. Abort on "SetApprovalForAll" or approvals to unknown contracts

If you get hit

1. Evacuate remaining funds to a fresh wallet immediately — seconds matter
2. Revoke the malicious approval
3. Retire the wallet; a leaked seed is unrecoverable — never reuse it

Bottom line

Do one thing today: create a burner wallet and route all dApp connections through it. Thirty minutes of setup insures every future farm.

⚠️ General security guidance; no method guarantees complete protection.