DFK What to do if account is compromised? TLDR
If you wallet/account is (or suspected) compromised, you will need to take immediate actions to safeguard any other remaining assets you have. Here is the quick info on some of common FAQ
# 1 — How do I know if I get hacked? And anything can be done to recover what I lost?
- Commonly, if you log in to your account and found some or all of you assets such a Garden LP, Locked Jewels or xJewels from Jeweler are missing, that is a big red flag that your account is compromised
- If these assets have been transferred by the hackers, then so sorry there is really nothing can be done by anyone, literally no one
- So once you found out your account/wallet is compromised, don’t bother to spend time to try investigate on what happen but rather, FIRST THING you should do is to salvage whatever you may have — not just within DeFi Kingdoms but all other sites that your wallet is connected to
# 2 — How do I transfer my remaining assets out to another account/wallet?
- · Firstly get ready a new Metamask wallet and new Defi Kingdoms profile. (if you have forgotten how to do it, take a look at this guide by The High Indian https://www.youtube.com/watch?v=9j4VlczpQ3U)
Once you setup successfully a new wallet and DeFi Kingdoms account, next is identified which are the assets you want to transfer and how to:
- LOCKED JEWELS — Go to DeFI Kingdoms > Jeweler > Manager > Put in your NEW wallet address (0x addr) and click send any locked jewels you have. (please read carefully the instructions in Manager to understand the risk involved)
- HEROES — Go to DeFI Kingdoms > Tavern > Barkeep > Send Hero. Click in your hero and put in your NEW wallet address (0x addr) and click send. You need to do it one at a time, repeat till you finish sending all your heroes (IMPT: If any of your heroes are listed for sale or hire, please unlist them first before you send)
- GARDEN LP — You will need to break your LP and split the seeds to convert back to your tokens
To Withdraw LP
— Go to Garden > Seedbox > Click Manage on the Pool you have > then click Withdraw
— Once done, go to Marketplace > Druid and Click Split Seeds under the pair that you have withdrew
- JEWEL, xJEWEL, GOLD, or any other in-game items such as Runes, Stones, Bloaters, etc. — The fastest way to send all these will be adding them to your Metamask and send via Metamask to your new wallet
- To do that, firstly, add the contract address of the item in your Metamask via the Import Tokens functions. The full list of OFFICIAL tokens are available at DeFi Kingdoms Discord channel #Serendale-Contracts and #Crystalvale-Contracts https://discord.com/channels/947320107208675349/947347795579396109 https://discord.com/channels/947320107208675349/947348001997860895
- LANDS — Currently, there is no info on the token which likely a hacker will not be able to take that away. I believe this is tied to your DFK Account. I recommend reaching out to the DFK team for the next step..
#3 — So how did I get hacked at the first place and how to prevent?
Some of the reasons include:
- You have visited a malicious phishing website that stole your information. Common URLs are like those asking you to Sync your wallet. DO NOT SYNC any wallets or disclose your seed phase to anyone.
- Your computer has been compromised with malware/spyware which can potentially steal your private information such as seed phase if you saved on your computer locally
- You gave out your Seed Phrase or Private key to someone or submitted to any web site. Never ever disclose! (even to your mum! :) )
- Do not connect your wallet to any website (Web 3 or Smart Contract sites). Always check your Metamask on connected sites and disconnect any site that is looks unfamilar or suspicious. Click 3 dots on Metamask then click on Connected Sites to review the list. Only access links from official websites listed in Defi Kingdoms #Links-docs https://discord.com/channels/861728723991527464/861731836353576960
- Lastly, DO NOT RESPONSE TO ANY DM (DIRECT MESSAGE) coming from Discord or Telegram or any other social media sites.
Stay safe guys!
(If you like my work, pls support by following my channel and if you greatly appreciate and wanna tip me a penny of jewel, this will be the tipping jar address (JEWEL ONLY) 0x097217552be7b01ee6d074df507587dc698202da :D )