FomoPeek Malware: How a Read-Only Whale Tracker Stole iOS Private Keys
FomoPeek passed App Store review as a read-only whale tracker, then shipped an iOS kernel exploit that decrypts the Keychain. Timeline, forensics, victim steps.
On-chain Safety Education
Understand the chain.
Protect your wallet.
Onchain Diary is an independent Web3 safety education site: 100 deep-dive articles, a 232-term glossary, and the complete BIP-39 wordlist — covering crypto scams, smart contract security, and on-chain analysis. No jargon. No sign-up. No tools to install. Just the knowledge you need to stop getting rekt.
100 Articles
232 Glossary Terms
0 Sign-ups Required
§ 01
Latest
Guides, tutorials, and deep dives.
Sep 20, 2026 Sep 19, 2026 Sep 18, 2026 Sep 17, 2026 Sep 17, 2026 Sep 17, 2026
zkSNARKs Auction Cleared 12,000 ZEC. Here Is What the Winners Actually Hold
Zcash's zkSNARKs identity auction drew 16,971 bids and cleared at 1.5 ZEC; the secondary floor sits near 2 ZEC on Zilkroad. But with ZSA not on mainnet, ownership lives in a database — and the market data is unverifiable by design.
Zcash Cold Storage: How to Store ZEC Offline in 2026
ZEC holders moving funds off exchanges face a fork in the road: transparent addresses work on any hardware wallet, shielded addresses mostly don't. What Trezor and Ledger actually support, three working cold-storage setups, and the scams targeting new Zcash users.
BNB Chain Token Safety: How to Avoid Scams on Binance's Chain
The SQUID token let people buy but never sell, and it ran on BNB Chain. Learn the specific scam patterns on BSC and the exact steps to verify any BEP-20 token before you buy.
Polygon Token Safety: How to Avoid Scams on the MATIC Chain
Polygon's low fees and Ethereum association attract legitimate DeFi and every clone-token scam that follows. The exact steps to verify any Polygon token before you buy.
Zcash Whitelist Season: One Takes Your ZEC, One Takes Your Identity Map
ZecBit charged for a testnet NFT and left a 0.1 ZEC complaint in its wake. zaddr.net is free and asks for almost nothing. The second one is the more interesting case. Here is what each model actually collects.
§ 03
Test yourself
Reading is half. The other half is recall.
T-01
The Yellow Paper Quiz
Every question is drawn strictly from the Yellow Paper's own text. No outside knowledge required — if you've read it, you can pass it.
Take the quiz → T-02Onchain Security MBTI
Sixteen scenario questions sort you into one of sixteen security personas — hunter or prey — with a safety index and a shareable result card.
Find your type → § 04
Start learning
A few terms to get you going — the full glossary has 232+.
Don't transact blind.
Whether you're new to crypto or deep into DeFi, understanding how scams work is the best defense. Every guide here is free.
Start Reading →