Security & Scam Prevention

Security essentialsVerify the destination. Inspect the approval. Protect the recovery phrase.

A token name or recognizable logo does not establish legitimacy. Use independent contract verification and never share wallet secrets with a website or support account.

01 / Token verification

Start with the correct OOKS contract

Scammers can create lookalike tokens and websites. Before connecting a wallet or buying tokens, verify the network, contract address and destination domain. The official Onooks (OOKS) website is www.onooks.org.

Officially published OOKS contract / Ethereum mainnet0x69d9905b2e5f6f5433212b7f3c954433f23c1572Cross-check address in Etherscan ↗

A matching symbol, logo or token name alone is not sufficient. Verify the full hexadecimal contract address; fake tokens can reuse familiar names and symbols.

02 / Wallet security

Protect the keys that control your assets

Keep recovery phrases and private keys private

Never share, upload, email or type a seed phrase into a webpage or “support” form. Anyone who obtains it can control the wallet.

Check the destination domain

Type the intended URL manually or use bookmarks; fake search ads, social posts and private messages can imitate familiar sites.

Use secure devices and reliable wallet software

Keep software updated and consider a hardware wallet for long-term holdings or larger balances.

Verify the network and recipient address

Check Ethereum mainnet, the token address and the entire destination address before sending an irreversible transaction.

03 / Transaction approvals

A wallet connection is not a safety guarantee

Signing a transaction, message or token approval can have very different consequences. Read the wallet confirmation screen carefully and do not approve interactions you do not recognize.

Allowance approvals

Some smart contracts ask permission to move ERC-20 tokens. Prefer limited amounts when possible and review existing allowances periodically.

Blind signatures

Avoid opaque or unexpected requests. Do not authorize a transaction merely to “unlock” a reward or prove ownership.

Gas and failed swaps

Transactions can be irreversible, and Ethereum fees may be spent even when a transaction fails.

Third-party apps

DEX interfaces, wallets and bridge services may be operated independently. Check reputation and relevant contract addresses.

No wallet recovery phrase is required for ordinary verification

Legitimate block explorers can display public token information without needing your seed phrase. Do not follow instructions that ask for secrets to confirm a holding.

04 / Impersonation

Recognize common OOKS-related scams

Someone claiming to be an Onooks administrator asks you to send ETH or OOKS to “activate,” “validate” or “unlock” tokens.
A supposed support agent requests your recovery phrase, password, private key or remote access.
A social-media post or direct message promises guaranteed returns, automatic yield or a special token migration.
A lookalike site displays the Onooks branding but uses a different domain or token contract.
An unexpected airdrop or “claim” asks you to approve unlimited token spending.

Scammers may impersonate legitimate projects and compromise otherwise familiar social accounts. Verify each request through a separate trusted channel before acting.

05 / Exchange safety

Do not mistake historical links for current trading support

Trading venues can suspend markets, change deposit addresses, restrict withdrawals or close. Check current status, liquidity and token-contract identity directly before interacting with any market.

Historical Txbit reference

Older Onooks.org material contains Txbit links. Txbit’s own 2023 announcement said its services would close on 14 September 2023. That historical listing must not be used as a current trading or deposit instruction.

If you find an obsolete venue on Onooks.org, please report the page link to [email protected] so the project information can be corrected.

06 / Pause before action

What to do when a message or website looks suspicious

Do not sign or send funds

Close the prompt, do not connect another wallet, and avoid clicking more links from the suspicious source.

Check details independently

Compare the website domain and full token contract with onooks.org and a reputable Ethereum explorer.

Preserve non-sensitive evidence

Record URLs, message screenshots, transaction hashes and dates. Never send recovery phrases or private keys.

Report the incident

Contact the provider involved, notify relevant platforms, and send the suspected Onooks impersonation details to [email protected].

07 / Incident response

If you suspect compromise

When a malicious approval or wallet compromise is suspected, time may matter. Stop interacting with the suspicious application. From a trustworthy device, review your token approvals and transaction history using reputable resources. Where appropriate, revoke approvals and move unaffected funds to a new wallet whose secret keys were generated securely.

If the seed phrase itself is compromised, merely revoking one approval may not protect the wallet; an attacker may retain control. Consider seeking specialist incident-response assistance. On-chain transactions are generally not reversible, and recovery is often impossible.

See Ethereum’s official security and scam-prevention guidance for more background.

08 / Official contact

Report suspected impersonation or obsolete links

Website: https://www.onooks.org/
Reporting email: [email protected]
Risk information: Digital Asset Risk Disclosure.

For reports, include the suspicious URL, impersonated username, relevant blockchain transaction hash and a concise description. Never include private keys or recovery phrases. This contact channel can receive a report; it does not guarantee recovery of lost funds.