01Verify the website and wallet
Use a trusted bookmark or independently verified URL. Check the domain character by character. A wallet or support agent should never ask for your seed phrase or private key, and a recovery phrase should not be entered into a swap website.
02Verify chain and token contract
Confirm the connected network, source token contract, destination token contract, and decimals. Similar names and symbols can represent unrelated or malicious tokens. Use more than one reliable source for high-value decisions.
03Read every permission
Identify whether the prompt is a connection, message signature, permit, token approval, or transaction. Check the spender and amount. Limit permissions when practical and review old allowances periodically.
04Inspect the route and output
Review the source amount, destination amount, minimum received, price impact, slippage, route, fees, deadline, recipient, and any bridge. Do not sign because the button label looks familiar.
05Use proportionate testing
For an unfamiliar token, chain, bridge, or application, a smaller test can reveal basic routing and deposit issues. A test does not prove that a larger transaction is safe, but it can catch simple configuration errors.
06Review after execution
Confirm the transaction on a block explorer, verify the received contract and amount, save records, and review remaining token allowances. If the result is unexpected, stop before making additional approvals or rescue transactions.