NFT Art Wallet Security and Scams Questions and Answers

Question 1

You receive an unexpected direct message on social media from an account impersonating a famous NFT artist. The message contains a link to a 'surprise free mint' for their new collection. What is the most secure course of action?

Accepted Answer

Ignore the message, block the user, and verify any official announcements on the artist's verified public channels.

Answer

This scenario describes a classic phishing attack. Scammers impersonate trusted figures to create a sense of urgency and lure victims into clicking malicious links that drain their wallets. The safest action is to always disregard unsolicited links and independently verify information through official, public sources like a verified Twitter account or official website.

Question 2

What is the primary function of a 12 or 24-word 'seed phrase' (or recovery phrase) for a non-custodial crypto wallet?

Accepted Answer

It is a master password used to restore access to all assets associated with the wallet if the device is lost or broken.

Answer

A seed phrase, or recovery phrase, is a list of words that stores all the information needed to recover a crypto wallet and its contents. It acts as the master key, allowing you to restore your wallet on a new device. It must be kept private and secure, as anyone with access to it can control your assets.

Question 3

Which of the following is the most significant security advantage of using a hardware wallet (cold storage) over a software wallet (hot storage) for storing high-value NFTs?

Accepted Answer

Hardware wallets store private keys offline, making them immune to online threats like malware and phishing attacks.

Answer

The key difference is that hardware wallets store your private keys on a physical device, completely isolated from the internet. This 'cold storage' approach protects your assets from remote hacking, malware, or phishing scams that target internet-connected software ('hot') wallets. Transactions must be physically confirmed on the device itself, providing a crucial security layer.

Question 4

While attempting to list an NFT on a new, unverified marketplace, your wallet prompts you to sign a transaction with a 'Set Approval For All' request. What is the primary risk of approving this type of transaction on a malicious site?

Accepted Answer

It allows the site's smart contract to transfer ALL NFTs from that specific collection out of your wallet without further permission.

Answer

A 'Set Approval For All' transaction grants a smart contract permission to move all tokens of a specific type (like all NFTs from one collection) from your wallet. While legitimate marketplaces use this for listing, malicious sites exploit it. By tricking you into signing it, their contract can then drain every NFT from that collection from your wallet at any time.

Question 5

A scammer joins a project's Discord server, impersonates a member of the support team, and contacts you via direct message to help with a 'wallet issue'. They ask you to share your screen to guide you through the process. This is an example of what kind of attack?

Accepted Answer

Social engineering

Answer

Social engineering is a manipulation technique that exploits human psychology to gain access to sensitive information. In this scenario, the scammer uses impersonation and the pretense of offering help to build trust, with the ultimate goal of tricking the victim into revealing their seed phrase or approving a malicious transaction.

NFT - Art Practice Test

NFT - Art Practice Test

NFT Art Wallet Security and Scams Questions and Answers