INDEPENDENT · PRACTICAL · SAFETY FIRST

Understand Web3.
Start with confidence.

From your first wallet to an informed transaction. Learn what you see, what you approve and how to stay in control, one step at a time.

28 chapters · 3 languages · 3 quiz levels

WELCOME TO WEB3

Learn Web3 at your own pace

Digital assets and applications bring new possibilities and responsibilities. This independent guide helps you understand the basics and practise safely, without requiring any particular platform.

What will you learn?

After this guide, you will know:

  • what Web3 is and how a wallet works;
  • how to recognise addresses, tokens and blockchain networks;
  • how to protect recovery phrases and private keys;
  • how to send and receive stablecoins such as USDC and USDT;
  • how swaps, bridges and smart contract approvals work;
  • how to recognise phishing and stop when unsure.

After the guide

Test your Web3 knowledge

The Web3 Knowledge Quiz shows where you stand and which parts you may want to review.

Open the Web3 Knowledge Quiz →
Remember: “Every expert was once a beginner.” Take your time. Understand each step. That is the safest way to get started with Web3.

Because the financial world is changing

What is Web3, and why understand it?

Web3 is an umbrella term for applications that use blockchains, digital assets and wallets. A wallet lets you sign actions. With a self-custody wallet, you control the keys and take responsibility for protecting them.

A raised fist in front of a chalkboard with the word CONTROL
More control over what you approve yourself.

What does this mean for you?

You can apply the same fundamentals across different wallets and applications. Always check what an application does, the risks involved and the permission you grant.

01

Send

Send digital assets to a service or platform.

02

Receive

Receive payouts directly in your own wallet.

03

Approve

Decide for yourself which transaction you confirm.

04

Connect

Access a Web3 service through your wallet.

🔒

More control

You decide which actions you approve.

👁

More transparency

Transactions can be checked on the blockchain.

⚡

More efficient processing

Fewer intermediate steps can speed up transactions.

🌍

Modern technology

Web3 is the foundation for digital financial applications.

Warning

Not every service works the same way

Sometimes you use the wallet only to send or receive. Other services may also require you to approve a transaction or smart contract.

Remember: “Web3 does not change what you want to achieve.”It mainly changes how digital transactions are carried out.

From bank to wallet and back

The journey of your money

Your money is not always in the same place. Once you understand the route, everything else becomes much easier.

Bank

Step 1

Your bank account

You send money from your bank account to a reliable crypto exchange. Check that both accounts are in the same name.

Exchange

Step 2

The crypto exchange

An exchange is a digital currency exchange. For example, you can convert euros into a stablecoin such as USDC or USDT. Which asset is available or suitable depends on your exchange, region and the service you use.

As long as your stablecoin remains on the exchange, it is managed by the exchange.

Web3 wallet

Step 3

Your Web3 wallet

When you send a stablecoin to your own wallet, it comes under your own control. From that moment, you are responsible for its security.

Web3 application

Step 4

A Web3 application

Depending on the service, you send digital assets or use your wallet to approve a transaction.

↔

Step 5

The return journey

A payout can arrive back in your wallet. You decide what to do next.

  • keep it;
  • use it again;
  • send it to an exchange;
  • sell it or withdraw it.

A token name is not enough: verify the issuer and contract address on the selected network. Native and bridged stablecoins can carry different risks. Stablecoins can lose their peg.

Why do we mainly use USDC in this guide?

USDC and USDT are both stablecoins designed to maintain approximately the same value as the US dollar. However, they are two different digital assets.

Within the European Economic Area, regulated providers mainly use stablecoins that can be offered under MiCA rules. That is why USDC remains the main example in this guide.

Outside Europe, USDT is also widely used. Which stablecoin you can use depends on your region, exchange, wallet, blockchain network and the Web3 service involved.

Remember: “Your money does not always follow the same route.”It can move between your bank, exchange, wallet and platform.

Your personal digital key

What is a Web3 wallet?

A Web3 wallet gives you access to digital assets and Web3 services.

ReceiveSendApproveConnect
Key→Housesame ideaWeb3 wallet→Blockchain

Think of your house key

The key is not your house. The key gives you access to your house.

A wallet works in the same way. The wallet is not the blockchain, but it gives you access to your digital assets and transactions on the blockchain.

↓

Receive

Receive digital assets at your wallet address.

↑

Send

Send digital assets to another address.

✓

Approve

Check and confirm transactions yourself.

⌁

Connect

Connect your wallet to a Web3 service.

Is a wallet the same as a bank account?

No. A bank manages your account. With a Web3 wallet, you decide which transactions you carry out and approve.

Does my money always have to stay in my wallet?

No. Sometimes you hold digital assets through your wallet. Sometimes you only use the wallet to send, receive or approve something.

Remember: “Think of your wallet as your personal digital key to Web3.”

Wallet app versus blockchain

What is actually inside a wallet?

Your digital assets are not literally stored in the app. The wallet gives you access to what is recorded on the blockchain.

📱

The wallet app

Shows information and allows you to carry out transactions.

VERSUS
Blockchain

The blockchain

Records digital assets, addresses and transactions.

What can be visible?

  • stablecoins such as USDC or USDT and other digital assets;
  • the network they are on;
  • received and sent transactions;
  • connections to Web3 services;
  • actions you need to approve.

Is all my money there?

No. It depends on the service. Sometimes digital assets are directly under your control. Sometimes you only use the wallet to send, receive, connect or approve.

Search

Why do I sometimes see nothing?

This does not automatically mean your assets have disappeared.

  • You are looking at the wrong network.
  • The token has not yet been added to the display.
  • The transaction is still being processed.
  • The wallet needs to be refreshed.
Remember: “Your wallet gives you access to what is recorded on the blockchain.”

A personal choice

Which Web3 wallet should I choose?

Most wallets perform the same basic functions. Choose a wallet that you understand and can learn to use safely.

What should you consider?

✓ Easy to use
✓ Secure
✓ Suitable for your networks
✓ Available on your device
✓ Regularly updated
📲

Software wallet

An app on your smartphone or computer. Convenient for daily use.

  • easy to install;
  • always available;
  • suitable for daily use.
🛡️

Hardware wallet

A separate device or card system that provides additional protection for your digital keys.

  • additional security;
  • suitable for larger amounts;
  • less exposed to online attacks.

Examples of well-known wallets

Always check that your wallet, network and chosen service are compatible. Download only from an official source.

Remember: “The best wallet is the wallet you understand and learn to use safely.”

Go deeper for Level 3

Understand the risks behind the action

What a hardware wallet protects

A hardware wallet keeps private keys outside the normal computer environment. It does not automatically determine whether every permission benefits you. Check the details on the device and understand the request. A valid malicious approval can expose tokens without revealing your recovery phrase.

Sources and further reading: MetaMask: hardware & signatures

Start Level 3 →

Take your time

Install your wallet safely

Installation is usually simple. Security deserves the most attention.

1

Download from an official source

Use the official App Store, Google Play Store or the wallet provider’s official website. Do not simply click advertisements or links in messages.

2

Create a new wallet

Choose Create a new wallet. Use Restore or Import only if you already have a wallet and know exactly what you are doing.

3

Secure the app

Use a strong access code, fingerprint, facial recognition and automatic locking.

Warning

Create your wallet at a quiet moment

  • on your own device;
  • through a secure internet connection;
  • without anyone watching;
  • not in a rush during a conversation or video call.
Remember: “Download your wallet only from an official source and secure it immediately.”

The backup key to your wallet

Your recovery words

Your recovery words allow you to reopen your wallet on another device.

Why are they so important?

You use them if your phone breaks, is lost, is replaced or if you need to reinstall the wallet.

Anyone who has your recovery words may be able to access your wallet.

1. river2. velvet3. maple4. orbit5. meadow6. copper

What should you do?

  • Write down every word exactly.
  • Keep the correct order.
  • Check the spelling and completeness.
  • Store them offline in a secure place.
  • Consider a metal backup for larger amounts.

What must you never do?

  • Do not take a screenshot.
  • Do not store them in email, notes or the cloud.
  • Do not share them through WhatsApp or Telegram.
  • Never send them to support.
  • Never enter them on a website someone sends you.
  • Never share them during a video call.
Warning

What if someone gets them?

Assume that your wallet is no longer secure. Create a new wallet as soon as possible and move your digital assets to the new wallet address.

Remember: “Never share your recovery words with anyone.”

Go deeper for Level 3

Understand the risks behind the action

Multisig and shared vulnerabilities

A 2-of-3 multisig requires two different authorized keys. Its protection is weakened if all keys share the same vulnerability. Separating devices, storage and, where appropriate, operators reduces the chance that one incident compromises enough keys to authorize a transaction.

Sources and further reading: Ethereum: smart contract security

Start Level 3 →

Public for receiving

Your wallet address

A wallet address can be compared to a bank account number.

May I share my wallet address?

YES

You may share your wallet address when someone wants to send you digital assets. Your recovery words must always remain secret.

Example

0x1234A9cB…7eF2ABCDAlways copy it. Never type it manually.
1

Copy the address

Use the copy button or QR code.

2

Check the beginning and end

Compare the first and last characters.

3

Check the network

The address and network must match.

Compare the full address with a trusted source. Do not copy an address solely from recent transaction history: address poisoning can introduce a lookalike address. Stop if you cannot verify the destination.

Remember: “Your wallet address is public. Your recovery words are secret.”

Go deeper for Level 3

Understand the risks behind the action

Address poisoning

In address poisoning, an attacker places a similar-looking address in your transaction history, for example through a small or zero-value transfer. Matching first and last characters do not prove identity. Compare the full recipient address with a trusted source; do not blindly copy from history.

Sources and further reading: MetaMask: address poisoning

Start Level 3 →

The correct route for your transaction

Always choose the correct network

Stablecoins such as USDC and USDT can exist on different blockchain networks.

BNB Smart Chain
Ethereum
Polygon
Tron

Think of the network as the route along which your digital package is sent.

Warning

Why is this important?

The sender and receiver must use the same network. If you use the wrong network, your assets may be difficult or sometimes impossible to recover.

Check not only the network, but also the exact asset. USDC on BNB Smart Chain is not the same token as USDT on BNB Smart Chain.

Check before every transaction

✓ Correct wallet address✓ Correct asset and network✓ Correct amount

If you are unsure, send a small test amount first.

Remember: “Both the address and the network must be correct.”

When the token or network does not match

Swapping & bridging

You may already have crypto, but not the right token or not on the right network. That is where swaps and bridges come in.

🔁 What is swapping?

With a swap, you exchange one token for another. Example: you have USDT on BNB Smart Chain and need USDC on BNB Smart Chain. When a suitable route is available, you can swap USDT for USDC. The token changes; the network stays the same.

🌉 What is bridging?

With a bridge, you move assets from one blockchain network to another. Example: you have USDC on Ethereum and need USDC on BNB Smart Chain. You then need a supported cross-chain route.

The quick decision rule

Token changes, network stays the same → SwapNetwork changes → BridgeToken and network both change → the route must support both

MetaMask can now also offer cross-chain transfers through the same Swap flow. Always check both the source and destination token and network.

1

You already have USDC on BNB

If your USDC is already on the correct network, no swap or bridge is needed.

2

You have USDT on BNB

If you need USDC on BNB, you can swap USDT for USDC when a suitable route is available.

3

You have USDC on Ethereum

If you need USDC on BNB, use a supported bridge/cross-chain route. Simply switching networks in MetaMask does not move your tokens.

4

You still need to buy

If you can buy the correct token on the correct network from the start, you avoid an extra swap or bridge.

What might your wallet ask?

Which token and network?Which swap or bridge route?Is a token approval required?What are the network and service fees?

An Approve step can be a separate smart-contract permission before the actual swap or bridge. Read every confirmation separately. On BNB Smart Chain, you need BNB whenever the action requires a gas fee.

Warning

The same wallet address does not mean the same network

Many EVM networks use addresses that look the same. That does not mean your tokens automatically move to another network. Always choose a route that supports the source token, source network, destination token and destination network.

🎯 This topic returns in Level 2You will need to decide which token and network action is required in a practical situation.View Level 2 →

A bridge uses additional infrastructure or smart contracts. Check the provider, token variant, destination network, route, waiting time and total fees. Switching networks in your wallet does not move tokens.

Remember: “Token changes? Think swap. Network changes? Think bridge.”Always check the exact token, network, approval and costs before confirming.

Go deeper for Level 3

Understand the risks behind the action

Native and bridged tokens

A native token and a bridged representation can have different contracts and risks. Some bridges hold the original token and issue a representation; other routes burn and mint native tokens. Check the actual route, backing, token variant and options for moving back.

Price impact and slippage

Price impact is the effect of your own order on available liquidity. Slippage is the difference between the quoted and executed outcome. A low slippage setting does not make a poor quote attractive. Assess price impact, minimum received, liquidity and fees separately.

Calculating the minimum received

An allowed 1% decrease from 1,000 tokens gives a floor of 1,000 × 0.99 = 990 tokens. Actual receipt can be higher. A correctly enforced minimum prevents execution below that floor but does not guarantee the transaction succeeds. Always check the explicit minimum shown in your wallet.

High slippage and sandwich attacks

Raising slippage does not fix every failure. It increases the price deterioration you accept. In a sandwich attack, an attacker trades before and after your swap to profit from the price movement. First check the failure, liquidity and route; assess MEV protection where available (MEV is value extracted through transaction ordering).

Stablecoins and depegging

A stablecoin targets a value; its market price can diverge from that target (a depeg). Examine backing, liquidity, issuer and redemption terms. Direct redemption may have eligibility requirements or restrictions. A discount to target is not guaranteed profit: recovery and actual redemption are uncertain.

Sources and further reading: Uniswap: price impact · Ethereum: MEV · Circle: bridged USDC

Start Level 3 →

Withdraw a stablecoin from an exchange

From an exchange to your wallet

Follow each step calmly and check the network before confirming.

1

Open your Web3 wallet

Copy the wallet address where you want to receive the required stablecoin.

2

Open your exchange

Choose Withdraw or Withdrawal.

3

Paste the wallet address

Choose exactly the same asset and network as required by the receiving wallet or service.

4

Check everything

Wallet address, asset, network and amount.

5

Confirm the transaction

After the network has processed the transaction, the stablecoin appears in your wallet.

🧪

Not sure?

Send a small test amount first. Check that it arrives before sending the rest.

Remember: “Always check the wallet address and network first.”

Connect Wallet

Connect your wallet to a Web3 application

Connecting allows the website to recognise your wallet address and present actions to your wallet.

▣ Connect Wallet

What does connecting mean?

The service can recognise your wallet address. Connecting by itself does not automatically send digital assets.

What may happen next?

Other actions may require a separate signature, approval or transaction.

Always read what your wallet asks

Which website?Which action?Which asset?What amount?

Confirm only actions you understand and want to carry out. If you are unsure, do not confirm.

Remember: “Connecting is not the same as paying. Read every separate approval carefully.”

TRANSACTION CHECK

Your first Web3 transaction

Sending a token and using a smart contract are different actions. First establish what kind of action you intend to perform.

1

Define your goal

Are you sending tokens to an address, making a swap or using a contract? Verify the official destination and understand what the action does.

2

Check before starting

Verify the token and contract address, network, recipient, amount and fees. For a new address, verify the details first, then send a small test before the remainder.

3

Read every wallet request

A regular token transfer normally needs no token approval. If a contract requires one, check the spender and limit the allowance to what you need.

4

Confirm and verify

Sign only the intended action. Check its TXID on the correct block explorer and confirm that the expected outcome occurred.

Check first. Confirm only when you understand the action.

A confirmed transaction is usually final. A successful approval does not prove the main action took place. A failed transaction can still cost gas.

Stop if an address, network or request is unexpected. More confirmations do not make an action safer.

Go deeper for Level 3

Understand the risks behind the action

The limits of simulations

A simulation estimates outcomes under particular conditions; alerts may identify known risks. No warning is not a guarantee. Detection may be incomplete and blockchain state can change before execution. Continue checking the purpose, address, contract, amount and permissions yourself.

Sources and further reading: MetaMask: security alerts

Start Level 3 →

Directly to your own wallet

Receive tokens in your wallet

A payment or transfer can arrive directly at your wallet address. Receiving normally requires no approval or payment to release tokens.

What must be correct?

✓

Wallet address

The correct receiving address.

✓

Network

The network on which the asset is sent.

✓

Token visible

The paid-out stablecoin, for example USDC or USDT, must be visible on the correct network.

Search

Do you not see the payout immediately?

This does not automatically mean something is wrong.

  • The blockchain is still processing the transaction.
  • You are looking at the wrong network.
  • The token still needs to be added to the display manually.
Remember: “First check the network, wallet address and status on the blockchain.”

Check what actually happened

Check a transaction on the blockchain

Can you not see a payment or payout yet? Use the transaction hash to check its status directly on the blockchain.

Check a transaction

What is a transaction hash?

The transaction hash, also called a TXID or Txn Hash, is the unique identifier of a blockchain transaction.

Example: 0x9abc...bddfb

You can usually find it in the transaction history of your wallet, exchange or platform.

1

Copy the TXID

Open the relevant transaction and copy its transaction hash.

2

Open the correct explorer

Use the block explorer for exactly the same network.

3

Paste and search

Paste the TXID into the explorer's search bar.

4

Check the details

Status, sender, recipient, token, amount and network must all be correct.

PENDING

Still processing

Wait and check again. Do not blindly send the same transaction again.

SUCCESS

Confirmed

The transaction has been processed. If the token is not visible, check the network and token display.

FAILED

Unsuccessful

The transfer was not completed. Investigate the cause before trying again.

Remember: “Your wallet app may refresh later. The block explorer shows the status on the blockchain.”

Go deeper for Level 3

Understand the risks behind the action

Checking a bridge end to end

A cross-chain transfer can involve several steps, separate confirmations, processing and sometimes a claim. Success on the source network does not prove receipt is complete. Check the bridge status, both explorers, the recipient address and token variant before sending again.

Sources and further reading: Ethereum: bridges

Start Level 3 →

Send a stablecoin back to sell it

From your wallet back to an exchange

Always copy the exchange deposit address and choose exactly the same network.

1

Open your exchange

Choose Deposit.

2

Select the same stablecoin

Choose exactly the same asset and network as in your wallet and copy the deposit address.

3

Open your wallet

Choose Send and paste the address.

4

Check and confirm

Address, network, amount and network fees.

⛽

Do not forget the network fees

Your wallet usually needs a small amount of the network’s native asset, such as BNB or ETH, to pay the gas fees.

Remember: “The network on the exchange and in your wallet must be exactly the same.”

Back to traditional money

From the exchange to your bank account

Is your stablecoin on the exchange? If the exchange supports it, you can sell it and have the proceeds paid to your bank account.

Exchange→
USDC
sell
→Bank
1

Sell your stablecoin

Convert the stablecoin into euros or another available currency.

2

Choose Withdraw

Select your bank account and enter the amount.

3

Check and confirm

Check the name, bank details and fees.

Important

Processing time differs by exchange and bank. Check that your exchange account and bank account are in the same name.

Remember: “Always check the name, bank details and fees before confirming.”

Trust and time pressure are weapons

How do you recognise scams?

Scammers sometimes pretend to be support, a leader or a well-known company.

✕ Someone asks for your recovery words.
✕ You are told to act immediately.
✕ You receive an unexpected link.
✕ You must pay first to release funds.
✕ Someone asks you to share your screen.
✕ You are asked to approve an unknown transaction.
STOP

Not sure?

Do not click anything and do not approve anything. Use only official websites, apps and support channels.

Remember: “Genuine support will never ask for your recovery words.”

Giving permission for an action

Approvals and smart contracts

An approval can grant important permissions. Always read what you are confirming.

Four requests, four different consequences

Connect

The site sees your public address and can send requests. Connecting alone does not grant permission to spend tokens.

Approve

You allow a specific contract (the spender) to use a particular token up to an allowance.

Sign

You sign a message. Even an off-chain signature can grant rights, for example through a permit. Read the request; a signature without gas is not automatically safe.

Transact

You sign a blockchain action such as a transfer, swap or contract interaction. Check the network, destination, amount and fees.

Token allowance

An allowance is the maximum amount of a token the spender may use. An unlimited allowance can also expose tokens received later. Choose a limited amount where possible and revoke unwanted permission. This does not revoke other approvals or undo past transactions.

Learn more about approvals ↗
⌁

Connect to a service

◉

Use a stablecoin for a transaction

↑

Send an amount

⚙

Activate a smart contract

Check before confirming

  1. Website: do you recognise the official address?
  2. Asset: which token is being used?
  3. Amount: how much may be used or sent?
  4. Effect: do you understand what will happen next?

An approval is not the same as sharing recovery words, but it can give access to a specific token or action.

🎯 This topic returns in Level 2Connect, approve, allowance, smart contract and revoke are combined in practical situations.View Level 2 →
Remember: “Always read what you approve. Not sure? Cancel and check first.”

Go deeper for Level 3

Understand the risks behind the action

Signing without a gas fee

An off-chain signature can grant a token permission (permit). Another party may submit it on-chain later, subject to its conditions. Check the domain, network, token, spender (the party receiving permission), amount and expiry. No gas fee does not mean no financial consequences.

Permission over an NFT collection

For ERC-721, setApprovalForAll authorizes an operator within one collection contract. It is broader than approval for one token ID: it also covers NFTs acquired later in that contract while active. It does not automatically cover other collections. Check the operator and the scope.

Audits and contract upgrades

An audit assesses a particular scope and version at a particular time; it is not a safety guarantee. Authorized parties can change how upgradeable contracts work. Check the current implementation, unresolved findings, administrative powers and any delay before upgrades take effect.

Oracles: external data

An oracle supplies external data, such as market prices, to smart contracts. Correct code can produce wrong outcomes when given faulty inputs. Assess the price source, freshness, resistance to manipulation and emergency controls. Reliable calculations also require reliable data.

Sources and further reading: ERC-721 · Ethereum: smart contract security

Start Level 3 →

Clean up access after use

Disconnect your wallet and revoke approvals

Disconnecting a wallet and revoking a token approval are two different actions.

Revoke access

Why does the difference matter?

Disconnect the wallet

The website no longer sees your wallet as actively connected. Existing token approvals may still remain active.

Revoke an approval

You end the on-chain permission that allowed a smart contract to use a specific token.

  1. Disconnect the siteOpen connected sites, dapps or permissions in your wallet and remove connections you no longer use.
  2. Review your approvalsCheck which contracts can still access which token and for what allowance.
  3. Revoke unused accessOnly revoke approvals you no longer need or do not recognise.
  4. Check the network and gasRevoking an approval is an on-chain transaction and normally requires a network fee.

Approval checker

Revoke.cash

Use only the official domain. Connect your wallet, select the correct network, inspect the approvals and revoke only unwanted access.

Revoke.cash is preventative. It cannot recover stolen assets.

OPEN REVOKE.CASH ↗
Remember: “Disconnecting ends the connection. Revoking ends the token approval.”

Act quickly, but do not rush

What should you do if your wallet may be compromised?

The correct response depends on what may have been exposed: an approval, your device or your recovery phrase.

Wallet security emergency plan

Suspicious website or approval

Stop confirming transactions, disconnect the site, review approvals and revoke suspicious permissions.

Recovery phrase or private key may be known

Treat the wallet as compromised. Create a completely new wallet and discontinue the old recovery phrase.

Emergency plan

  1. Do not confirm any new transactions.
  2. Check suspicious transactions in the block explorer.
  3. Disconnect unknown websites.
  4. Revoke suspicious token approvals.
  5. Never share recovery phrases, private keys or your screen.
  6. If the recovery phrase was exposed, create a new wallet on a trusted device or clean browser profile.
  7. Move remaining assets to the new wallet address.
  8. Save TXIDs, addresses and screenshots and use official support channels only.

Does every incoming asset disappear immediately?

Do not keep sending extra gas tokens to the same wallet. An automated sweeper may be active. Stop, collect the evidence and seek specialised help before taking further action.

Remember: “If your recovery phrase was exposed, only a completely new wallet is safe.”

Rushing causes mistakes

Common mistakes

Most mistakes can be prevented with one extra check.

Avoid this

  • Typing a wallet address manually.
  • Choosing the wrong network.
  • Storing recovery words online.
  • Opening unknown links.
  • Approving transactions without understanding them.
  • Sending the full amount immediately.
  • Ignoring gas fees.

Work safely

  • Copy addresses.
  • Check the beginning and end of the address.
  • Use a small test amount.
  • Take your time.
  • Ask for help if you are unsure.
Remember: “Rushing and Web3 are not a good combination.”

Keep this list

The 10 golden safety rules

  1. Never share your recovery words.
  2. Download wallets only from official sources.
  3. Always check the wallet address.
  4. Always choose the correct network.
  5. If you are unsure, send a test amount first.
  6. Do not click unexpected links.
  7. Do not approve anything you do not understand.
  8. Do not share your screen with strangers.
  9. Keep enough of the network asset in your wallet to pay fees.
  10. Take your time with every transaction.
Warning

You are responsible for the security of your wallet

Checking calmly is always faster than fixing a mistake.

Remember: “Checking calmly is always faster than fixing a mistake.”

Keep this on your phone

Downloadable safety card

Open this checklist before confirming an important transaction.

Web3 safety card in English

Check before every transaction

  • Exact asset or token
  • Correct blockchain network
  • Full wallet address
  • Correct amount
  • Sufficient network fees
  • An approval you understand
  • Official website or app
  • When in doubt, a test amount first
Remember: “Thirty seconds of checking can prevent an irreversible mistake.”

Click a question

Frequently asked questions

You do not need to remember everything. Look it up again calmly whenever you are unsure.

Can someone open my wallet with only my wallet address?

No. You may share your wallet address to receive digital assets. Remember that transactions on public blockchains may be visible.

What if my phone breaks?

Your recovery words allow you to reopen your wallet on another device.

Why can I not see my USDC or USDT?

Check whether you selected the correct asset, whether you are viewing the correct network, whether the token has been added to the display and whether the transaction has already been processed.

Can I cancel an incorrect transaction?

Usually not. A confirmed blockchain transaction is generally final.

Why do I need BNB, ETH or another asset?

That asset is used to pay the network fees or gas fees.

What should I do if I am unsure?

Do not confirm anything. Check first or ask for help through an official channel.

Can I send USDC when a service asks for USDT?

No. USDC and USDT are different tokens. Always use the exact asset and network requested by the receiving wallet, exchange or service.

Remember: “Stop if you are unsure.”Checking before confirming is always the safest choice.

Quickly look something up

Glossary

Type a word or browse the terms.

Blockchain

A digital network on which transactions are recorded.

Web3 wallet

Your personal access to digital assets and Web3 services.

Wallet address

The address you use to receive digital assets.

Recovery words

The secret words that allow you to reopen your wallet.

Exchange

A platform where you can buy, sell or exchange digital assets.

Stablecoin

A digital asset designed to maintain a relatively stable value, often linked to a traditional currency such as the US dollar.

USDC

A stablecoin linked to the US dollar that is available in the European Economic Area under a MiCA issuance structure.

USDT

A widely used global stablecoin linked to the US dollar. Availability and support can differ by region, exchange and service.

Network

The blockchain on which a transaction is carried out.

Network fees

The fee required to process a transaction. Also called gas fees.

Token

A digital asset that exists on a blockchain network.

Smart contract

A digital program that automatically carries out certain actions.

Approval

Permission you give through your wallet for a specific action.

Connect Wallet

The function used to connect your wallet to a Web3 service.

Transaction

Sending, receiving or approving digital assets.

Swap

Exchanging one token for another. In a regular swap, the blockchain network stays the same.

Bridge

A method for moving assets from one blockchain network to another.

Block explorer

A website used to inspect transactions, addresses and smart contracts on a blockchain.

Transaction hash / TXID

The unique identifier used to look up a blockchain transaction.

Revoke

The on-chain cancellation of a token approval that was granted earlier.

Allowance

The maximum token amount a specific contract may use on behalf of your address. An allowance can remain after you disconnect the website.

Signing without a gas fee

An off-chain signature can grant a token permission (permit). Another party may submit it on-chain later, subject to its conditions. Check the domain, network, token, spender (the party receiving permission), amount and expiry. No gas fee does not mean no financial consequences.

Open the chapter →

What a hardware wallet protects

A hardware wallet keeps private keys outside the normal computer environment. It does not automatically determine whether every permission benefits you. Check the details on the device and understand the request. A valid malicious approval can expose tokens without revealing your recovery phrase.

Open the chapter →

Address poisoning

In address poisoning, an attacker places a similar-looking address in your transaction history, for example through a small or zero-value transfer. Matching first and last characters do not prove identity. Compare the full recipient address with a trusted source; do not blindly copy from history.

Open the chapter →

Permission over an NFT collection

For ERC-721, setApprovalForAll authorizes an operator within one collection contract. It is broader than approval for one token ID: it also covers NFTs acquired later in that contract while active. It does not automatically cover other collections. Check the operator and the scope.

Open the chapter →

Audits and contract upgrades

An audit assesses a particular scope and version at a particular time; it is not a safety guarantee. Authorized parties can change how upgradeable contracts work. Check the current implementation, unresolved findings, administrative powers and any delay before upgrades take effect.

Open the chapter →

Multisig and shared vulnerabilities

A 2-of-3 multisig requires two different authorized keys. Its protection is weakened if all keys share the same vulnerability. Separating devices, storage and, where appropriate, operators reduces the chance that one incident compromises enough keys to authorize a transaction.

Open the chapter →

Native and bridged tokens

A native token and a bridged representation can have different contracts and risks. Some bridges hold the original token and issue a representation; other routes burn and mint native tokens. Check the actual route, backing, token variant and options for moving back.

Open the chapter →

Checking a bridge end to end

A cross-chain transfer can involve several steps, separate confirmations, processing and sometimes a claim. Success on the source network does not prove receipt is complete. Check the bridge status, both explorers, the recipient address and token variant before sending again.

Open the chapter →

Price impact and slippage

Price impact is the effect of your own order on available liquidity. Slippage is the difference between the quoted and executed outcome. A low slippage setting does not make a poor quote attractive. Assess price impact, minimum received, liquidity and fees separately.

Open the chapter →

Calculating the minimum received

An allowed 1% decrease from 1,000 tokens gives a floor of 1,000 × 0.99 = 990 tokens. Actual receipt can be higher. A correctly enforced minimum prevents execution below that floor but does not guarantee the transaction succeeds. Always check the explicit minimum shown in your wallet.

Open the chapter →

High slippage and sandwich attacks

Raising slippage does not fix every failure. It increases the price deterioration you accept. In a sandwich attack, an attacker trades before and after your swap to profit from the price movement. First check the failure, liquidity and route; assess MEV protection where available (MEV is value extracted through transaction ordering).

Open the chapter →

Impermanent loss: comparing with holding

Impermanent loss compares a pool position with separately holding the same original tokens. A position can rise in euros and still underperform. Here: €2,200 − €2,000 = €200 growth, but €2,200 − €2,500 = −€300 versus holding. Earned fees may partly or fully offset the difference, but this is not guaranteed.

Open the chapter →

Collateral and liquidation thresholds

Health factor compares weighted collateral with debt. Initially: €10,000 × 0.8 ÷ €6,000 = 1.33. At €7,500 it becomes €7,500 × 0.8 ÷ €6,000 = 1. In protocols such as Aave, a position below 1 becomes eligible for liquidation. Price moves, growing debt and parameter changes can reduce the buffer; rules differ by protocol.

Open the chapter →

Oracles: external data

An oracle supplies external data, such as market prices, to smart contracts. Correct code can produce wrong outcomes when given faulty inputs. Assess the price source, freshness, resistance to manipulation and emergency controls. Reliable calculations also require reliable data.

Open the chapter →

APY and the source of returns

APY is an annual percentage that assumes compounding; the displayed value may vary. Rewards paid in a token are not guaranteed euro returns. Investigate where income comes from, how long incentives last, whether rewards can be sold and what costs or lockups apply.

Open the chapter →

Token unlocks and selling pressure

A token unlock makes previously locked tokens available. If all 5 million join 10 million circulating tokens, circulating supply rises by 50%. This does not predict a 50% price drop: selling behavior, demand and liquidity matter. Unlocking does not necessarily create new tokens.

Open the chapter →

Stablecoins and depegging

A stablecoin targets a value; its market price can diverge from that target (a depeg). Examine backing, liquidity, issuer and redemption terms. Direct redemption may have eligibility requirements or restrictions. A discount to target is not guaranteed profit: recovery and actual redemption are uncertain.

Open the chapter →

Shared dependencies

Using several platform names does not automatically diversify underlying risks. Platforms may rely on the same bridge, stablecoin, oracle or contract library. One failure can therefore affect multiple positions at once. Map shared dependencies as well as the amount held on each platform.

Open the chapter →

The limits of simulations

A simulation estimates outcomes under particular conditions; alerts may identify known risks. No warning is not a guarantee. Detection may be incomplete and blockchain state can change before execution. Continue checking the purpose, address, contract, amount and permissions yourself.

Open the chapter →

More tokens do not always mean more value

Ending value = number of tokens × price: 1,200 × €0.70 = €840. Return = (€840 − €1,000) ÷ €1,000 = −16%. Token count and price multiply: 1.20 × 0.70 = 0.84. More tokens do not automatically mean more purchasing power. Costs can reduce the net result further.

Open the chapter →
Remember: “You do not need to memorise every word.”

You have learned the basics

Ready for Web3

Use this guide whenever you are unsure and check each step calmly.

You now know:

  • what a Web3 wallet is;
  • how to receive and send digital assets;
  • why the correct network matters;
  • how to connect a wallet safely to a Web3 application;
  • how to use your wallet safely;
  • which mistakes to avoid.
  • how to check a transaction on the blockchain;
  • how to manage connections and approvals;
  • how to recognise the difference between swapping and bridging;

Test your knowledge and application

Choose your quiz level

Level 1 tests what you know. Level 2 tests what you do with it.

Start with the basics or move to 20 practical situations involving wallets, tokens, networks, gas, smart contracts, approvals and revoke.

🇳🇱 Nederlands🇬🇧 English🇫🇷 Français

You have a strong foundation. Level 3 also explores dependencies, financial consequences and the limits of security tools.

Remember: “Web3 does not have to be difficult.”Working calmly, checking carefully and acting safely make all the difference.

Go deeper for Level 3

Understand the risks behind the action

Impermanent loss: comparing with holding

Impermanent loss compares a pool position with separately holding the same original tokens. A position can rise in euros and still underperform. Here: €2,200 − €2,000 = €200 growth, but €2,200 − €2,500 = −€300 versus holding. Earned fees may partly or fully offset the difference, but this is not guaranteed.

Collateral and liquidation thresholds

Health factor compares weighted collateral with debt. Initially: €10,000 × 0.8 ÷ €6,000 = 1.33. At €7,500 it becomes €7,500 × 0.8 ÷ €6,000 = 1. In protocols such as Aave, a position below 1 becomes eligible for liquidation. Price moves, growing debt and parameter changes can reduce the buffer; rules differ by protocol.

APY and the source of returns

APY is an annual percentage that assumes compounding; the displayed value may vary. Rewards paid in a token are not guaranteed euro returns. Investigate where income comes from, how long incentives last, whether rewards can be sold and what costs or lockups apply.

Token unlocks and selling pressure

A token unlock makes previously locked tokens available. If all 5 million join 10 million circulating tokens, circulating supply rises by 50%. This does not predict a 50% price drop: selling behavior, demand and liquidity matter. Unlocking does not necessarily create new tokens.

Shared dependencies

Using several platform names does not automatically diversify underlying risks. Platforms may rely on the same bridge, stablecoin, oracle or contract library. One failure can therefore affect multiple positions at once. Map shared dependencies as well as the amount held on each platform.

More tokens do not always mean more value

Ending value = number of tokens × price: 1,200 × €0.70 = €840. Return = (€840 − €1,000) ÷ €1,000 = −16%. Token count and price multiply: 1.20 × 0.70 = 0.84. More tokens do not automatically mean more purchasing power. Costs can reduce the net result further.

Sources and further reading: Uniswap: liquidity provider returns · Aave: liquidation

Start Level 3 →
Last updated 23 October 2026

Web3 changes quickly. This date helps you assess how current the guide is.