Art NFT Security and Best Practices Flashcards
7 cards from real NFT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Art NFT Security and Best Practices flashcards as text
What is the purpose of a 'time-lock' mechanism in an NFT project's smart contract?
Answer: To delay execution of significant contract changes, giving the community time to react
Time-locks enforce a waiting period before major contract changes take effect, allowing token holders to exit if they disagree with proposed updates.
Which best practice protects an NFT artist from having their work minted by someone else on a competing platform?
Answer: Minting your own work first across all major platforms you intend to use
Minting your own artwork first establishes the earliest on-chain timestamp, creating a verifiable record of original authorship before copycats can act.
What is a 'multi-signature wallet' and why is it recommended for NFT art project treasuries?
Answer: A wallet requiring approval from multiple keyholders before any transaction executes
Multi-sig wallets prevent any single team member from unilaterally draining project funds, reducing insider theft and single-point-of-failure risk.
What risk does 'infinite approval' pose when interacting with NFT marketplace smart contracts?
Answer: It allows the approved contract to transfer your tokens at any future time without further consent
Infinite approval grants a contract unlimited future access to your tokens, so if the contract is later exploited or upgraded maliciously, your assets are at risk.
How can NFT art collectors protect themselves from 'discord DM' phishing attacks?
Answer: Disable direct messages from non-friends and never click links sent via DM
Scammers impersonate project admins in Discord DMs; disabling DMs from strangers and avoiding unsolicited links eliminates this attack vector.
What is 'provenance' in the context of NFT art, and why does it matter for security?
Answer: The verified ownership and transaction history of an NFT from creation to present
Provenance tracks an NFT's complete history of ownership, enabling buyers to verify authenticity and detect stolen or fraudulently represented works.
Why is it important for NFT art collectors to regularly audit and revoke unused token approvals?
Answer: Previously approved contracts may be exploited later, putting approved assets at risk
Smart contracts approved months earlier can be compromised or weaponized in later exploits, so revoking stale approvals removes dormant attack surfaces.