> For the complete documentation index, see [llms.txt](https://docs.odin.tools/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.odin.tools/thor-trading-bot/thor-telegram-bot/security-tips.md).

# Security tips

### ⚡ Thor Safety Tip

The blockchain battlefield is a dark forest — fight smart, stay alert.\
Two golden rules for every warrior:

**1️⃣ Zero Trust**\
Never hand your keys to anyone or anything. Every “admin,” “bot,” or “plugin” asking for your private key is a trap.

**2️⃣ Validate Everything**\
Check twice before signing once. Make security a habit.

***

#### 🧠 Common Scams

**⚔️ Fake Admins in TG**\
No Thor or Odin admin will ever DM you first.\
Scammers mimic usernames and bios — always verify from the official channels.

**⚔️ Fake Groups**\
Never join random Telegram groups.\
Turn on:\
`Settings → Privacy & Security → Groups & Channels → “Nobody can add me.”`

**⚔️ Phishing Links & “Verification” Pages**\
Ignore any site asking for your wallet, phone, or password.\
If you didn’t request it — it’s bait.

**⚔️ Web3 Signature Traps**\
What you see = what you sign.\
Regularly check wallet approvals and revoke unknown permissions.\
Airdropped NFTs or “claim” sites can drain your SOL — avoid them.

***

### ⚠️ **Airdrop Scam Detection**

Thor helps you identify suspicious tokens that appear in your wallet but were not actually purchased.

Tokens flagged as potential scams will show:

* An **Airdrop Scam** warning label
* No PnL data
* No average entry price
* No market capitalization information

***

### 🔒 Shield Up: Protect Your Wallets

**Telegram**

* Enable 2-Step Verification
* Hide your phone number
* Use official apps only

**Wallet**

* Cancel unknown approvals
* Enable auto-lock
* Don’t install random browser extensions or apps

***

### 🧩 Device Safety

* Don’t click unknown links or install shady files
* Keep system updates current
* Separate wallets: one for testing, one for storing
* For important wallets: less is more — avoid unnecessary updates

***

### 🚨 If You’re Hacked

1. **Act fast** – Move remaining funds to a clean wallet
2. **Stay calm** – Disconnect the device, preserve evidence
3. **Trace it** – Identify the hacker’s address, fill [SlowMist recovery form](https://aml.slowmist.com/recovery-funds.html)

{% hint style="danger" %}
Security comes first with Thor. There are **no backdoors, no hidden permissions, no wallet access**. If your assets are compromised, review the safety steps above — Thor never touches or controls your funds.
{% endhint %}