
Hantu in the Machine: The Cyber-Sak Yant & The Soulbound Token
Why some assets, like sacred tattoos, can never be transferred or sold.

Hantu in the Machine: The Bomoh & The Oracle
How do blind computer networks know the weather or who won the World Cup? They need a medium.

Same Same but Different 4-6
An explainer content series to simplify blockchain concepts that even a 10 year-old could understand.
<100 subscribers

Hantu in the Machine: The Cyber-Sak Yant & The Soulbound Token
Why some assets, like sacred tattoos, can never be transferred or sold.

Hantu in the Machine: The Bomoh & The Oracle
How do blind computer networks know the weather or who won the World Cup? They need a medium.

Same Same but Different 4-6
An explainer content series to simplify blockchain concepts that even a 10 year-old could understand.


If you are driving late at night on a quiet, rural road, especially somewhere in Malaysia or Indonesia, and perhaps flanked by a rubber plantation or a dense patch of banana trees, you should know the rules. You keep your eyes on the road and never stop, especially when you see a lady along the side of the road.
Better yet, if you suddenly smell the overwhelming, sweet scent of jasmine or frangipani flowers where there shouldn't be any, you definitely don't roll down your window to investigate.
Because she might be there. The Pontianak.

In Malay folklore, she is the spirit of a woman who died during childbirth. She appears to lonely travelers as a breathtakingly beautiful woman who looks like she needs help. She is alluring, seemingly vulnerable, and impossible to ignore. She lures men close.
However, when they get too close, the illusion shatters very quickly. She reveals her true form as a terrifying vampiric entity with sharp claws, often with a gaping hole in her back, and feasts on their internal organs.
She is the ultimate example of bait-and-switch. The promise of something beautiful that delivers a nightmare.
In the digital realm of Web3, AI, and the metaverse, we may think we are safe from jungle spirits. After all, we are sitting in air-conditioned rooms behind firewalls.
But these days, the Pontianak has migrated. She doesn't haunt banana trees anymore; she now lurks around Discord servers, Telegram chats, and your email inbox, promising you everything.
We can now say she's started phishing.

The modern digital Pontianak doesn't appear as a woman in a white dress. She appears as an opportunity that's too good to resist.
She is that Direct Message (DM) from an attractive profile you don't recognise, striking up a conversation about crypto. She is that urgent email that looks exactly like it came from MetaMask or Coinbase support, warning you that your account is compromised. She is the bot in a Discord server asking you to connect your wallet to claim a free NFT airdrop.
Just like the scent of flowers on a lonely road, these things are designed to bypass your logical brain and trigger your lizard brain. They appeal to you either through greed by offering you free money, your fear by claiming your account might be locked, or just simply using lust through a beautiful stranger that just wants to talk.
They look official. They look professional. They smell sweet.
So, you pull over. You click the link. You reply to the DM.
According to legend, the Pontianak uses her beauty to hide the horrific emptiness inside her through the hole in her back.
In tech, this is the malicious website or smart contract.
When you click that link in the phishing email, you are taken to a website that looks identical to the real thing. It’s a perfect clone. The beautiful facade is maintained.
When you decide to type in your password, or when you connect your digital wallet to claim the airdrop, you aren't interacting with the real service. Instead, you are actually encountering the hole in the back.
You think you are signing a transaction to receive a free NFT. In reality, the code hidden beneath the surface is a "setApprovalForAll" function. You are granting the Pontianak permission to drain every single asset from your wallet while you sit there watching the screen.
By the time the illusion glitches and you realise what happened, your "internal organs" in the form of your Ethereum, your Solana, and your expensive JPEGs are all gone.

There is one crucial part of the Pontianak story that every tech user needs to remember. It is actually the only way to survive her.
Legend has it that the Pontianak can be tamed. If you are brave enough to catch her and drive a nail into the hole at the nape of her neck, she ceases to be a monster. Instead, she becomes a docile, beautiful human woman, sometimes even a dutiful wife, as long as the nail stays put.
The nail is the control mechanism. Whoever holds the nail controls the entity.
In the world of blockchain, you hold this nail. It is called your private key or seed phrase.
Your seed phrase (those 12 or 24 random words you got when you set up your wallet) is the master key to your digital identity and assets. It is the nail in the neck of your financial life.
If you keep this nail secure, your assets will serve you. They are docile.
If you give that nail to someone else by typing those 12 words into a fake website or giving them to a "support agent" in a DM, you have pulled the nail out.
Almost immediately, the beautiful promise becomes a monster. The scammer now has total control. They don't need your password; they already have the nail.
The digital world is a new kind of jungle. It's full of incredible riches and wonders, but it's also filled with ancient spirits wearing new masks.
The lesson of the Pontianak is about skepticism. If something looks too good to be true on that lonely digital road, it probably is. If a stranger approaches you with overwhelming beauty or promises of free wealth, roll up your windows and ignore them.
Never click on suspicious links. Never type your seed phrase into a website. And remember that real support agents will never DM you first.
Keep your nail in your own pocket, and stay safe on the road away from the Hantu.
If you are driving late at night on a quiet, rural road, especially somewhere in Malaysia or Indonesia, and perhaps flanked by a rubber plantation or a dense patch of banana trees, you should know the rules. You keep your eyes on the road and never stop, especially when you see a lady along the side of the road.
Better yet, if you suddenly smell the overwhelming, sweet scent of jasmine or frangipani flowers where there shouldn't be any, you definitely don't roll down your window to investigate.
Because she might be there. The Pontianak.

In Malay folklore, she is the spirit of a woman who died during childbirth. She appears to lonely travelers as a breathtakingly beautiful woman who looks like she needs help. She is alluring, seemingly vulnerable, and impossible to ignore. She lures men close.
However, when they get too close, the illusion shatters very quickly. She reveals her true form as a terrifying vampiric entity with sharp claws, often with a gaping hole in her back, and feasts on their internal organs.
She is the ultimate example of bait-and-switch. The promise of something beautiful that delivers a nightmare.
In the digital realm of Web3, AI, and the metaverse, we may think we are safe from jungle spirits. After all, we are sitting in air-conditioned rooms behind firewalls.
But these days, the Pontianak has migrated. She doesn't haunt banana trees anymore; she now lurks around Discord servers, Telegram chats, and your email inbox, promising you everything.
We can now say she's started phishing.

The modern digital Pontianak doesn't appear as a woman in a white dress. She appears as an opportunity that's too good to resist.
She is that Direct Message (DM) from an attractive profile you don't recognise, striking up a conversation about crypto. She is that urgent email that looks exactly like it came from MetaMask or Coinbase support, warning you that your account is compromised. She is the bot in a Discord server asking you to connect your wallet to claim a free NFT airdrop.
Just like the scent of flowers on a lonely road, these things are designed to bypass your logical brain and trigger your lizard brain. They appeal to you either through greed by offering you free money, your fear by claiming your account might be locked, or just simply using lust through a beautiful stranger that just wants to talk.
They look official. They look professional. They smell sweet.
So, you pull over. You click the link. You reply to the DM.
According to legend, the Pontianak uses her beauty to hide the horrific emptiness inside her through the hole in her back.
In tech, this is the malicious website or smart contract.
When you click that link in the phishing email, you are taken to a website that looks identical to the real thing. It’s a perfect clone. The beautiful facade is maintained.
When you decide to type in your password, or when you connect your digital wallet to claim the airdrop, you aren't interacting with the real service. Instead, you are actually encountering the hole in the back.
You think you are signing a transaction to receive a free NFT. In reality, the code hidden beneath the surface is a "setApprovalForAll" function. You are granting the Pontianak permission to drain every single asset from your wallet while you sit there watching the screen.
By the time the illusion glitches and you realise what happened, your "internal organs" in the form of your Ethereum, your Solana, and your expensive JPEGs are all gone.

There is one crucial part of the Pontianak story that every tech user needs to remember. It is actually the only way to survive her.
Legend has it that the Pontianak can be tamed. If you are brave enough to catch her and drive a nail into the hole at the nape of her neck, she ceases to be a monster. Instead, she becomes a docile, beautiful human woman, sometimes even a dutiful wife, as long as the nail stays put.
The nail is the control mechanism. Whoever holds the nail controls the entity.
In the world of blockchain, you hold this nail. It is called your private key or seed phrase.
Your seed phrase (those 12 or 24 random words you got when you set up your wallet) is the master key to your digital identity and assets. It is the nail in the neck of your financial life.
If you keep this nail secure, your assets will serve you. They are docile.
If you give that nail to someone else by typing those 12 words into a fake website or giving them to a "support agent" in a DM, you have pulled the nail out.
Almost immediately, the beautiful promise becomes a monster. The scammer now has total control. They don't need your password; they already have the nail.
The digital world is a new kind of jungle. It's full of incredible riches and wonders, but it's also filled with ancient spirits wearing new masks.
The lesson of the Pontianak is about skepticism. If something looks too good to be true on that lonely digital road, it probably is. If a stranger approaches you with overwhelming beauty or promises of free wealth, roll up your windows and ignore them.
Never click on suspicious links. Never type your seed phrase into a website. And remember that real support agents will never DM you first.
Keep your nail in your own pocket, and stay safe on the road away from the Hantu.
Share Dialog
Share Dialog
No comments yet