Question 1

What are the three critical elements of crypto OpSec?

Accepted Answer

Your Identity, your Funds, your Transactions. OpSec in crypto centers on protecting identity, funds, and transactions.

Question 2

Where should you NEVER store your seed phrase?

Accepted Answer

Digitally in Google Drive, iCloud, or your phone. Cloud services and connected devices expose your seed to hacking and malware.

Question 3

Which 2FA method should you AVOID?

Accepted Answer

SMS-based codes. SMS 2FA is vulnerable to SIM-swapping attacks.

Question 4

What tool helps you revoke risky token approvals?

Accepted Answer

revoke.cash. revoke.cash lets you audit and revoke wallet spending permissions across chains.

Question 5

Which is the strongest OpSec mindset principle?

Accepted Answer

Don't trust - verify. Trust minimization is core: verify software, verify counterparties, verify contracts.

Question 6

When should you buy a hardware wallet second-hand?

Accepted Answer

Never. Only buy from the manufacturer or authorized resellers - tampered devices exist.

Question 7

Clipboard malware attacks work by…

Accepted Answer

Replacing copied wallet addresses with the attacker's. Always double-check the pasted address before you hit Send.

Question 8

A typical safer multisig configuration for personal funds:

Accepted Answer

2-of-3. 2-of-3 balances redundancy and security for personal setups.

Question 9

Which wallet type is best for long-term hodling?

Accepted Answer

Hardware wallet (cold storage). Hardware wallets keep keys offline - the standard for long-term storage.

Question 10

What's a strong indicator of a rug-pull risk in a token contract?

Accepted Answer

Highly concentrated supply in a few wallets. Concentrated ownership enables coordinated dumps and price manipulation.

Question 11

Which is a legitimate OSINT activity?

Accepted Answer

Analyzing public blockchain transactions on Etherscan. OSINT stays on publicly available data. Accessing restricted systems is illegal.

Question 12

Which explorer is best for Ethereum + EVM chains?

Accepted Answer

Etherscan. Etherscan is the standard for ETH and ERC-20 activity.

Question 13

A whale sending large amounts of BTC to Binance most likely signals…

Accepted Answer

A potential sale. Inflows to CEX hot wallets often precede selling.

Question 14

Which cryptocurrency is untraceable-by-default?

Accepted Answer

Monero (XMR). Monero uses ring signatures, stealth addresses, and confidential transactions.

Question 15

What tool ranks projects by GitHub development activity?

Accepted Answer

CryptoMiso. CryptoMiso surfaces commit frequency to gauge development health.

Test Your OpSec & OSINT.

OpSec Basics