Wallet safety for degens

Meme coin trading has two kinds of losses: trades that go wrong, and wallets that get drained. The second kind is entirely preventable, and the rules are simpler than most people make them.

Your main wallet touches nothing

Keep one wallet that holds what you cannot afford to lose, and never connect it to a website, mint, or bot. Not once, not for a “trusted” site. Every signature request is a chance to sign something you did not read, and drainers are engineered to look exactly like the dialog you expected.

Trade from wallets built to be lost

A trading wallet should be one you created for the purpose, funded with only what you are actively deploying. If it is compromised, the damage has a known ceiling. This is the reason serious tooling keeps risky activity isolated rather than asking to connect your main wallet: isolation is the whole security model, not an inconvenience.

Approvals outlive the trade

On most chains, granting a token approval lets a contract move that token until you revoke it, long after you have forgotten the site. Review and revoke approvals periodically with a reputable checker. On Solana, be equally suspicious of token delegate requests and unknown programs in a transaction simulation.

The classics still work

Most drains are not exotic. They are a fake airdrop link in a Telegram group, a lookalike domain one character off, a “support agent” asking you to verify your seed phrase, or a pinned message in a hijacked community. The seed phrase rule has no exceptions: no legitimate product, including this one, will ever ask for it.

Custody questions to ask any tool

Before using any trading tool, get clear answers to three questions. Does it ever hold my keys? Can it touch wallets other than the one I fund? What happens to my funds if the service disappears? If the answers are vague, the answer is no.

Nothing here is investment advice, but all of it is security advice worth taking.