Open Account
About Abra Capital ManagementFees
All products
Everyone we serve
About the company
Wealth Management
Bitcoin YieldUSD Stablecoin YieldEthereum YieldSolana YieldDigital Income StrategyAll yield strategies →
Crypto-Backed LoansPortfolio StrategiesCustody SolutionsAbout Abra Capital Management →Fees →
Log InOpen Account
Bitcoin YieldUSD Stablecoin YieldEthereum YieldSolana YieldExplore Yield →
TradeOrder execution built for scaleVault CustodyMPC key-management technologyOnchain Borrowing & LendingLiquidity without selling
Bitcoin TokenizationExplore Tokenization →
All products →
RIAsSMA custodyWealth ManagersDigital assets at scaleFamily OfficesPrivate wealthCorporate TreasuriesReserve strategyLong-Term CapitalPatient, compounding growthExchanges & BrokersYield & lending partnersPrivate Client IndividualsPrivate wealthEveryone we serve →
YieldLoansCustodyInvestingGetting StartedVisit the Learn Hub →
VideoPressGo to Media →
$124T Wealth Transfer ReportFive Cycles of CryptoBig Players OnchainRead Insights →
Crypto Yield RatesCrypto-Backed Loan RatesCompare rates →
Portfolio BuilderLoan CalculatorTreasury ROI CalculatorExplore Tools →
LeadershipWhat Sets Abra ApartHow One Balance WorksAbout Abra →
SupportPartner with AbraContact us →
Investor RelationsACM disclosures and investor informationSupportHelp center and account questionsAbout the company →
Log InOpen Account
Tools · Security

A practical guide to crypto security.

Attackers now operate at machine scale, and in crypto a drain is final. Every practice in the guide, from the words that generate your keys to the AI agent you might one day hand a wallet, by category and priority.

For the incidents and figures behind these practices, read the full article.

Priority

Showing 105 of 105 practices, all priorities.

If something looks wrong

Speed matters more than certainty.

Stolen crypto crosses chains within minutes, and the window in which an issuer or exchange can freeze funds is short. These are the steps responders generally take, in order.

  1. Stop using the suspect device. Do everything below from a different, known-clean one.
  2. Move what can be moved to a fresh wallet with a new seed. If a seed may have leaked, every wallet derived from it is compromised.
  3. Revoke token approvals and any EIP-7702 delegation you did not set. Drainers leave both in place to return later.
  4. Lock your accounts: new password and fresh two-factor on your email first, then exchanges and custodians. Revoke all sessions and API keys.
  5. Contact your exchange, broker or custodian through its app or official site, never a number from an email or a search ad, and report the transaction hashes.
  6. Report it. In the U.S., file with the FBI at ic3.gov. Custodians and insurers usually require a police report.
  7. Rotate everything the device touched, then wipe and reinstall it rather than cleaning it.

Expect a second wave. After any incident, “claim your refund” links and “recovery services” that offer to trace funds for an up-front fee follow. No legitimate investigator asks for a fee in crypto to recover crypto, and genuine reimbursement happens inside your account, never through a link.

This guide provides general information about security practices. It is not legal, financial, investment or tax advice, and no security practice eliminates the risk of loss. Incident figures are as reported by third-party sources as of October 30, 2026 and may have changed; ACM has not independently verified them. References to third-party products and companies are illustrative and do not imply endorsement. Abra Capital Management, LP (“ACM”) is an SEC-registered investment adviser; registration does not imply a particular level of skill or training. “Abra” is a brand used by affiliated entities that provide different products and services.