riotgoools’s avatarriotgoools’s Twitter Archive—№ 5,667

          1. got a dm from someone who got their nfts drained by the magicals scam on eth so i thought i’d write a simple guide about detecting scams and staying safe. basic due diligence stuff. the scammers will keep at it as long as they keep finding uninformed victims 👇🏻
            Permalink riotgoools’s avatar ♻️ 22 Retweets ❤️ 65 Favorites Mood -8 🙁
        1. …in reply to @riotgoools
          1/ quick visual check: bad spelling/mismatched assets are a warning sign. real projects should be able to spell their own project name consistently. you can also google image search an nft and look at the hits. the goools will show you lots of fantom ppl on twitter
          oh my god twitter doesn’t include alt text from images in their APIoh my god twitter doesn’t include alt text from images in their API
          Permalink riotgoools’s avatar ♻️ 3 Retweets ❤️ 13 Favorites Mood -4 🙁
      1. …in reply to @riotgoools
        1b/ it’s possible for scammers to go the extra mile and edit metadata/website assets to look legit but, so far, all the copymints i’ve seen have contained errors. i think if they weren’t lazy and redid everything perfectly, they would just be creating their own original work 😅
        oh my god twitter doesn’t include alt text from images in their API
        Permalink riotgoools’s avatar ❤️ 7 Favorites Mood +2 🙂
    1. …in reply to @riotgoools
      1c/ bonus: a simple google search of the scam url will often reveal mismatched info too bc scammers just clone stuff without proofing. you can even view the website source to see how assets are named. for example, my stuff is custom – i even made my own font called gooolos
      oh my god twitter doesn’t include alt text from images in their APIoh my god twitter doesn’t include alt text from images in their API
      Permalink riotgoools’s avatar ❤️ 6 Favorites Mood 0
  1. …in reply to @riotgoools
    2/ socials/website check: usually projects will have at least a twitter for info. the first google result for “magical goools” is my twitter. if you read my bio and tweets, you will see that my work is only on #fantom & #tezos. if i ever did do something on eth, i would say so!
    oh my god twitter doesn’t include alt text from images in their API
    riotgoools’s avatar ❤️ 5 Favorites Mood 0
    1. …in reply to @riotgoools
      2b/ my official website is riotgoools.com and all my history is recorded publicly on twitter dating back to the beginning of my project in sep 2021. be wary of accounts that have been spun up recently and have no history of communication
      oh my god twitter doesn’t include alt text from images in their API
      Permalink riotgoools’s avatar ❤️ 7 Favorites Mood -1 🙁
      1. …in reply to @riotgoools
        3/ contract check: look at the contract creator on etherscan. sometimes scammers will have deployed other copymints with the same wallet (past copymint displayed below.) if it’s a fresh wallet with no activity and the 1st internal txn is tornadoing in some eth, that is suspicious
        oh my god twitter doesn’t include alt text from images in their APIoh my god twitter doesn’t include alt text from images in their APIoh my god twitter doesn’t include alt text from images in their APIoh my god twitter doesn’t include alt text from images in their API
        Permalink riotgoools’s avatar ❤️ 6 Favorites Mood -2 🙁
        1. …in reply to @riotgoools
          3b/ my deploy address is 0xd91c8…8200 or more simply: riotgoools.eth (3 o’s in goools). you can always check my address on etherscan to see if i deployed any contracts on eth. i have not deployed any so if you’re seeing goool stuff on eth rn, run the other way 😤
          Permalink riotgoools’s avatar ❤️ 6 Favorites Mood -2 🙁
          1. …in reply to @riotgoools
            3c/ if you go to my os account opensea.io/riotgoools and click the “created” tab, you will see i have not deployed any nfts on eth
            Permalink riotgoools’s avatar ❤️ 6 Favorites Mood 0
            1. …in reply to @riotgoools
              4/ obviously, there could be real reasons for the 3 checks above to fail on their own (human error, bad at social, tornado cash for some other reason, etc.) but if they all stack up together, you should be worried and you should not continue without more verification! ⚠️
              Permalink riotgoools’s avatar ❤️ 6 Favorites Mood -10 🙁
              1. …in reply to @riotgoools
                5/ if you are being fomo pressured in some weird discord silo, just step back and evaluate. why does the minting site have mistakes in it? why no links to socials? why no background on the project? all red flags. do not connect your wallet and do not sign/approve anything! 🚫
                Permalink riotgoools’s avatar ❤️ 7 Favorites Mood -13 🙁
                1. …in reply to @riotgoools
                  6/ if random nfts got airdropped to your wallet out of nowhere, do the checks above to make sure it is a gift and not a scam before you touch them. there are nft airdrop attacks where interacting with the nft (even to burn them) will give the attacker access to drain you 🕵🏻‍♀️
                  Permalink riotgoools’s avatar ❤️ 7 Favorites Mood -1 🙁
                  1. …in reply to @riotgoools
                    6a/ you def don’t want an airdrop or a “free mint” to end up costing you everything you own. i announce all the airdrops and disperses i do publicly here on my twitter so people can verify. as the bitcoiners say, “don’t trust, verify.”
                    Permalink riotgoools’s avatar ❤️ 6 Favorites Mood +2 🙂
                    1. …in reply to @riotgoools
                      7/ if you are reading this after the fact and you have already connected to a suspicious site and signed/approved things, you should revoke approvals immediately on etherscan or a revoking site like debank, etc. or move all your stuff to a fresh wallet
                      oh my god twitter doesn’t include alt text from images in their API
                      Permalink riotgoools’s avatar ❤️ 9 Favorites Mood +3 🙂
                      1. …in reply to @riotgoools
                        8/ anyway, i know that for this advice to be found by those who need it, they would already be doing the checks above so this might be kind of pointless. but the way to strengthen/advance the space is by having an educated userbase.
                        Permalink riotgoools’s avatar ❤️ 6 Favorites Mood +2 🙂
                        1. …in reply to @riotgoools
                          9/ i see art nfts as training wheels to get people used to web3 tooling before we get to the cool stuff of the future like decentralized id, etc. but we won’t get there if we can’t even take care of jpegs. losing valuables sucks. imagine losing control of your identity
                          Permalink riotgoools’s avatar ❤️ 9 Favorites Mood -4 🙁
                          1. …in reply to @riotgoools
                            10/ i hope this helps save at least one person from grief. stay safe and thank you for coming to my ted talk 🖤🤘🏻
                            Permalink riotgoools’s avatar ❤️ 15 Favorites Mood +7 🙂