WEBVTT

00:00:00.800 --> 00:00:03.860
Stop interacting with the suspicious site.

00:00:03.860 --> 00:00:08.020
Avoid further signatures and use a trusted device to assess what happened.

00:00:08.340 --> 00:00:14.080
A harmful token approval and an exposed recovery phrase need different responses.

00:00:14.080 --> 00:00:17.670
Revoking an approval cannot make exposed keys secret again.

00:00:17.967 --> 00:00:23.480
If keys were exposed, remaining assets may need a fresh wallet with a new backup.

00:00:23.480 --> 00:00:28.237
Automated thieves can race transfers, so seek trusted technical help.

00:00:28.533 --> 00:00:33.380
Keep transaction identifiers and messages for official reporting.

00:00:33.380 --> 00:00:37.803
Avoid anyone promising guaranteed recovery in return for an upfront fee.
