Your Privacy Matters!

Everyone’s privacy needs are unique, and users can customize different spaces according to their individual needs and usage scenarios, with each space having an independent application lock password. This way, whether it’s work, life, or other aspects, users can get more personalized and practical privacy protection.

TokenPocket Private Wallet provides users with a more flexible and personalized way of protecting their privacy, which not only facilitates daily use but also enhances privacy security. Now let’s learn how to use the newly added Private Wallet in TokenPocket.

What is TokenPocket Private Wallet?

The Private Wallet is implemented through the APP Lock feature in the wallet. After enabling the APP Lock, you can add a [Subspace], which is the private space. After setting a password in the private space, you will enter a completely new [create wallet] or [import wallet] interface.

After importing or creating a wallet, the next time you access to the wallet, you will enter to different private wallet spaces, which is based on the password you entered.

For example, if you set password 1 in subspace 1 and password 2 in subspace 2, entering the respective subspace password will open the wallet interface for that subspace.

This setting provides better privacy but requires you to remember the password. If you forget the password, you can only recover assets by importing the private key or secret recovery phrase.

How to use TokenPocket Private Wallet?

Android Entrance

1. Open TokenPocket, tap on “Me,” then tap on “Settings”.

2. Open “App Lock” in the system settings. Simply check “Enable” and set a password. Afterward, you can “Add a Subspace” to configure the privacy wallet.

iOS Entrance

1. Open your TP Wallet, click [Me], and select [Security].

2. Click [App Lock], then activate the App Lock.

3. Set your space’s password on this page and click [Next]. It will be used as the password of your current wallets. You can also [Add Subspace] on this page.

Private Wallet Use Guide

1. Click [Add Subspace], then click [Start Creating], set the name for the subspace and click [Next].

2. You need to set another password for the new subspace you’ve created. After you finish, click [Enter space].

3. In the newly created subspace, you need to create or import a wallet again based on your needs. After completing the operation, the next time you open the wallet, you can enter the corresponding wallet by entering the password for the different subspaces we set.

Subapace Passwords play a crucial role here. If you forget a password for a subspace, it means that the wallet created or imported within that set will be inaccessible. The only way to regain access is by re-importing using the private key or secret recovery phrase. Please be sure to remember your subspace password.

Private Wallet Q&A

Q1: Can the passwords for different subspaces be the same?

A1: No, the passwords for different subspaces must be unique. The entry into a subspace depends entirely on the set password, and there will be prompts in the interface.

Q2: If I close the application lock for a subspace, will the data of other subspaces be lost?

A2: No, closing the application lock for the current subspace will keep the wallet in the currently accessed wallet. If you need to access another sub-space, you’ll need to reopen the application lock and open the wallet again to enter the password for a different sub-space.

Q3: Do I need to save the key for each subspace?

A3: Yes, it still needs to be saved. Essentially, it is still an externally owned account (EOA) type of key wallet, so be sure to back up your private key or mnemonic phrase offline.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

In order to reduce the cost of on-chain transactions, TokenPocket and Tronify jointly launched the “TRON Gas Fee Subsidy” campaign on June 7, 2023. You can find and participate in this new feature on TokenPocket’s TRON Wallet. This campaign, tailored exclusively for TokenPocket users, aims to minimize gas fees for those who frequently need to transfer.

During this period, **2,000 spots (starting from Jun 8th) **will be available each day to receive the “gas fee subsidy” benefit on a first-come, first-served basis. For each user who receives the benefit, we will provide a certain amount of TRON energy to cover the amount of energy needed for one USDT transfer on the TRON. Each wallet has one chance to claim one Transfer Subsidy per day, and the validity period is 10 minutes. (Attention, You need to use it within 10 minutes or it will be automatically forfeited and the subsidized energy will be cleared.) The reset time of the “Transfer Subsidy” is 1:00 AM (UTC), which means the new round of the day has started.

How to get and use the “Transfer Subsidy”(User’s Guide Link):

Open TokenPocket, create or import a TRON wallet, and find “Rent Energy” or Tronify Dapp. You will soon be able to enjoy the benefits!!!

The Entrance of Android：

The Entrance of iOS:

The reasons you use TokenPocket and Tronify:

• No Security Deposit: In our platform, you can rent the energy of the TRON without paying a security deposit. This reduces the additional costs for users.

• No Gas for Rent: While renting energy on our platform, you do not need to pay the gas fees. This makes the transaction more convenient and cost-effective.

• Lower Limited Rental Amount: On our platform, you can start with a minimum lease of 32,000 energy. More choices for users to choose.

• Lower Cost: Our energy rental fees are lower than other platforms, providing users with a more user-friendly product experience.

• No Gas for Transfer: Every user has a chance to claim a “Transfer Subsidy”(FCFS) once a day. This means you can enjoy a free transfer experience on our platform and save on transfer costs.

With these advantages, we are committed to providing users with more convenient, cost-effective, and efficient energy rental services on the TRON network.

What we can offer？

Competitive Referral Mechanism:

Ready to join us? You can fill out the form to get the suitable commission here .

The Entrance to get Invitation links:

1. If you are a crypto influencer or you have your own crypto community, we can generate exclusive invitation links and invitation codes for you to ensure that you can get your own exclusive invitation.

2. Users who use TokenPocket to create or import a TRON wallet will have the opportunity to receive a “Transfer Subsidy” that will allow them to transfer for free. (FCFS)

3. For users who join through your invitation link/invitation code, the profits generated from their energy rental and purchase will be refunded to your account at a rate of 10–30%. (The specific referral percentage can be communicated with TokenPocket team in order to develop a suitable plan according to your needs and influence.)

4. In addition, if through you are the** top 3 **invite-link/invitation code initiators of each month’s active user turnover, an additional 100–300 USDT will be given as an extra incentive.

5. The referral fees and extra rewards will be snapshotted on the last day of each month at 12:00 pm on the 30th/31st, and the previous month’s referral amount and extra rewards will be settled and issued to the designated on-chain wallet address on the first week of each month.

Operational support during the campaign:

1. We can provide event-related materials, including posters and other promotional materials so that you can better promote and publicize the event.

2. In addition, for special contributors, we can provide additional USDT rewards as recognition and incentive.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

| Website | Twitter |Telegram | Extension |Hardware Wallet|Fans Forum |

Zero-asset transfer and phishing address scams have been rampant, deceiving users into copying the “fake address” to execute a transfer. Earlier, TokenPocket posted many security articles, added security reminders for copying addresses, and a “hide small transactions” feature in-app to help users avoid transfer risks.

Recently, TokenPocket released an Android new version and optimized the Address Book feature, supporting users to execute the transfer operation to be safer and more convenient.

How to add a wallet address to TokenPocket Address Book?

Adding a wallet address to the Address Book supports the following entries，

Entry 1, click the wallet address on the page of [Token Details], then you can see the pop-up window, double check the wallet address and click [Add to Address Book].

Entry 2, click the wallet address on the page of [Transaction Details], then you can see the pop-up window, double check the wallet address and click [Add to Address Book].

Entry 3, switch to [Me], click [Address Book], click [Add], then will enter the Add address page, you can directly enter the wallet address or scan the wallet address to add it to the Address Book.

How to transfer by using TokenPocket Address Book?

Transfer by using TokenPocket Address Book supports the following entries，

Entry 1, click [Transfer] on the Assets page, click [Transfer].

Click [Select wallet], switch to [Address Book], select the wallet, and then you can execute the transfer operation.

Entry 2, click [Transfer] on the Assets page, click [Address Book].

Select the wallet and then you can execute the transfer operation.

After setting the address book for commonly used addresses, you will be able to see the transfer records of commonly used addresses on the Token Details page, which is convenient for you to distinguish the phishing address and avoid the phishing risk of transferring with disguised addresses. (Take BSC as an example)

Before adding Address Book VS After adding Address Book

How to manage TokenPocket Address Book?

1. Switch to [Me], and click [Address Book], you can see all the wallet addresses that you’ve added to Address Book on this page.

2. Click [All Networks], and you can view the network we’ve supported

3. Click the wallet address, and then click [Edit], you can edit the information of the wallet address, and you can also delete this wallet address on this page.

We strongly recommended that users who have frequently executed transfer operations should get used to using TokenPocket’s Address Book function to transfer, it can record the wallet address used daily and you can directly select the address when transferring.

Corresponding to the multi-signature wallet is the single-signature wallet. If we want to conduct a transfer operation on the blockchain, we need to generate a signature with the wallet. We sign and send the transaction out. This is the way for a typical single-signature wallet and it is also for our usual wallet.

A multi-signature wallet, as the name suggests, is a wallet that requires multiple people to sign in to perform an operation. Transferring with a multi-signature wallet often requires >= 1 person to sign and send the transaction before the operation can be completed. When using a multi-signature wallet, we can specify the signature mode of M/N, that is, only M signatures among N persons can complete the operation. For example, the 2/3 signature mode means that two of the three people can sign.

The multi-signature of ETH/ERC20 (including EVM chains such as BSC/BEP20) adopts a lightweight smart contract method.

Applicable scenes:

1. When managing assets by multiple people to avoid assets being misappropriated by individuals;

2. Multiple encryptions of assets through multi-signature to enhance asset security;

3. Other security application scenarios.

Create a MultiSig wallet in TP Extension

1. Open TokenPocket Extension, click the menu in the upper right corner and click MultiSig wallet.

2. You can select [Create Wallet] or [Impor Wallet] on this page.

3. The steps of creating a multi-signature wallet are the core content.

[Wallet Name] is as same as the wallet name you created before, which can be customized and it won’t be recorded on chain.

[Owners] is to set the managers of the multisig wallet. The owners can manage and control the multisig wallet and a maximum of 30 owners can be set, which can be understood as the [Threshold Setting] of the multisig wallet. The owners can be set up flexibly, it is suitable for enterprises, DAO, and individuals.

[Minimum number of confirmations] Set the minimum number of the MultiSig wallet. When the minimum number sign, on-chain operations such as transfer and contract interaction can be initiated. You are advised to set the minimum number of confirmation signatures to a value greater than 2.

[Estimated fee] The multisig scheme of an EVM-based chain is a smart contract, so creating a multsig wallet requires paying Gas (miner’s fee), which TokenPocket does not charge.

[Pay with] You can click and select the wallet address imported in the wallet to pay the Gas (miner’s fee) fee.

After everything is set, click [Confirm] to read the reminders for the creation of the multisig wallet. You can also read the information on this creation on the blockchain explorer.

4. You can view the statue of Creation.

5. After creating successfully, click [Enter Wallet], then you can view your MultiSig wallet.

Import a MultiSig wallet in TP Extension

1. Open TokenPocket Extension, click the menu in the upper right corner and click MultiSig wallet.

2. You can select [Impor Wallet] on this page.

3. Select the network and enter your MultiSig wallet address, then click [Import].

Tron multi-signature is generally divided into active multisig and passive multisig. Active multisig is a measure to set up multisig wallets by users and strengthen asset safety. Passive multisig refers to multi-sig operations that users do not intend to perform.

We have compiled the following scenarios that may lead to multisig,

Set multisig by users, the managers need to sign to execute the operation. The third party gets your secret recovery phrase or private key to set your wallet as the multisig wallet. Get the secret recovery phrase or private key, which was set as the multisig wallet from the internet. Access the unknown-source malicious link, and signed to complete the authority upgrade.

After the creation of the wallet address, the default signature setting is single-sig, which can perform any on-chain operation, if the address is multi-sig, it must be executed by users or the third party who get your secret recovery phrase or private key.

About TRON MultiSig Wallet

TRON’s multiple signature mechanism is a security measure that limits specific operations to be performed only with the mutual confirmation of multiple signers by setting thresholds and weights. In the multi-sig mechanism, the threshold refers to how many managers need to confirm before performing a specific operation. For example, if the threshold is 2, at least two managers are required to confirm a specific operation. The threshold can be set in the multi-contract and adjusted according to specific requirements. The weight refers to the weight of each manager, which determines the proportion of each manager in the multi-manager operation. For example, if the threshold is set to 2 and the weight of the two signatories is set to 1, a specific operation can take effect only after the confirmation of the two signatories with the weight of 1. The setting of weights needs to be set in the contract and must meet the requirement that the sum of the weights of all signatories equals the total weight.

By setting thresholds and weights, the TRON multisig mechanism can improve the security of the contract and prevent the contract from being tampered with by unauthorized operations or used by attackers for malicious operations.

TRON MultiSig Scams

Tron Authority Upgrade is different from the Approve. After approval, only the approved Token is affected. However, the upgrade of authority will lead to the change of the authority of the address, thus losing the management authority of the address.

Tron Authority Upgrade often happens in some use of the TRC20 deposit process, such as optimizing the price to buy fuel cards, and gift cards, using some verification code platform deposit. When the user uses the link they provide to deposit, it will call the malicious authority upgrade code, when the user directly confirms and enter the password to sign, the authority of the TRON wallet will be upgraded.

The following is a typical case,

Jump to the wallet through the deposit entrance of the malicious website and open it. The payment address is the contract address of USDT. Click [Pay now], and it will remind you not to copy the address to transfer, this is to prevent the user to bypass the malicious code to execute the transfer.

Click [Pay now], and you can see the transaction details. You can see the information about the ongoing operations and possible risks.

Click the second arrow position, you can view the role and risk of the Authority Upgrade(Upgrade account permissions). If you ignore the risk and execute the confirm operation, it will lead to Authority Upgrade, and the wallet address will be maliciously signed. Then, you will see the reminders when you transfer.

The original intention of multisig is to protect users’ assets, but after being used by scammers, it becomes a tool to steal assets, so please stay alert and read the reminders on TokenPocket carefully!

If you meet similar fraudulent links, please send them to our email: service@tokenpocket.pro and report them. After verification, we will localize the links to prevent more TokenPocket users from scams!

Uniswap has just released a new token approval standard, Permit2, which differs from the traditional ERC20 and EIP-2612. Permit2 allows users to avoid the need for a chain-level “approve” operation before interacting with different DApps, allowing the DApp protocol to first acquire your token approval. According to the description, the new Permit2 protocol has the advantages of saving gas, allowing for batch operations of approval/transfers and being more flexible than traditional ERC20 approval, and supporting one-stop approval management.

Uniswap initially conceived Permit2 and Universal Router to improve its own product, optimize gas costs, simplify the user transaction process, and enhance security. During the conceptual process, Uniswap felt that other applications could greatly benefit from integrating these contracts. Uniswap itself is dedicated to building public infrastructure, so it designed these contracts to be available for use by the entire developer ecosystem, including extensive documentation and SDKs.

To illustrate how revolutionary Permit2 is, let’s review the previous solutions by taking the example of a contract that needs to move tokens held by Alice.

Traditional approval model

The traditional way of execution is shown in the following diagram.

1. Alice calls the approve() function on the ERC20 to grant the contract a controlling limit.

2. Alice calls an interaction function on the contract, which in turn calls transferFrom() on the ERC20 token contract to move her tokens. It is evident that this model is feasible (as it is widely existent) and can ultimately be very flexible, as the protocol can continually access the user’s tokens for an extended period of time.

The approval contract is granted the approval to control the maximum amount of tokens by default, without any time limitations. Each DApp requires a one-time approval for the first execution, which poses significant risks.

But it faces two well-known real-world problems:

1. Poor user experience: Users must grant approval for each new protocol they intend to use on each token, which is almost always a separate transaction (for example, executing a token approval in Uniswap, but still having to reapprove if using Transit).

2. Poor security: Contracts usually require an unlimited approval limit, and approval must be executed every time a swap or other contract is used. This means that if the protocol is exploited, every user who has approved the protocol to consume their tokens could have all of their approved tokens transferred. (For example, we often encounter token usage approval, such as approval to operate DeFi, approval to exchange, and approval for first-time use of different DApps)

Permit (EIP-2612) mode

EIP-2612 iterates on token approval. Users can interact with the application contract by attaching an approval signature (Permit) information in their transaction, without having to pre-approve.

Let’s take a look at the methods enabled by the EIP-2612 extension of ERC20, which is usually like this:

1. Alice signs a “permit” message off-chain, indicating that she wishes to grant a contract the right to use an (EIP-2612) token.

2. Alice submits the signed message as part of her interaction with the said contract.

3. The contract calls the “permit()” method on the token, which uses the signature approval information and signature to grant the contract permission.

4. The contract now has permission, so it can call transferFrom() on the token, transferring tokens held by Alice.

Due to the requirement of EIP-2612 (Permit) to have the related methods written inside the ERC20 token contract, existing deployed ERC20 contracts cannot be supported.

This resolves two problems with the typical ERC20 approval method:

1. The user does not need to submit an additional approve() transaction on-chain.

2. Since one on-chain operation is omitted, a typically more reasonable approval amount can be chosen instead of unlimited, and more importantly, an expiration time can be set when signing the approval message.

While EIP-2612 makes token approval more secure, tokens released before EIP-2612 do not support signature approval and not all newer tokens have adopted this feature. Therefore, the protocol is not widely used.

Permit2 Approval Model

Permit2 combines both models, extending the user experience and security advantages of EIP-2612 to also cover standard ERC20 tokens.

1. Alice calls approve() on an ERC20, in a typical way, giving Permit2 contract limitless approval.

2. Alice signs a Permit2 message off-chain, indicating that the protocol contract is allowed to transfer tokens on her behalf.

3. Alice calls an interaction function on the protocol contract, passing in the signed Permit2 message as an argument.

4. The protocol contract calls permitTransferFrom() on the Permit2 contract, and Permit2 contract uses its approval (granted in 1) to call "transferFrom()" on the ERC20 contract, transferring tokens held by Alice.

   By granting approval to Permit2, DApps that use the Permit2 protocol only need to perform a 712 local signature once, eliminating the need for additional chain-level approval and reducing Gas fees, while increasing usability and security. The approval is time-limited, for example, if granted for a month, then after the month expires, it only requires one 712 signature to be used again.

   The protocol will not directly call the transferFrom() on the ERC20 token to execute the transfer but instead will call the standard Permit2 contract's permitTransferFrom(). Permit2 sits between the protocol and the ERC20 token, tracking and validating the permit2 message, and then ultimately using its approval to execute the transferFrom directly () call on the ERC20. This indirectness allows Permit2 to extend the benefits similar to EIP-2612 to every existing ERC20 token.

Advantages of the Permit2 protocol:

1. Unified token management

2. Controllable approval time

3. No need to send a transaction for approval every time

Possible Risks of Permit2

Permit2 is derived from EIP 2612 and is an extension of the EIP 20 protocol, so ultimately, Permit2 is just a supplement to ERC20, not a replacement. After all, Permit2 doesn't inherit all existing ERC20 data, and the so-called one-stop management still requires calling the approve function of the ERC20 contract to complete some initial operations.

The complete process of Permit2 should be:

1. The user grants the maximum approval of ERC20 tokens to the Permit2 contract.

2. The user manages specific approvals through the permit function in the Permit2 contract.

3. Third-party protocols and users can transfer tokens through the Permit2 contract as an intermediary based on the approval information already available in Permit2.

Possible risks of the Permit2 protocol:

1. Although it claims to solve the infinity approval problem, it only transfers the approval object from the interacting DApp to the Permit2 contract, and the security of the Permit2 contract requires higher standards for centralized management of approvals.

2. Although the token approval has an expiration time, this time can still be unlimited, and Dapps still need to set reasonable expiration times.

3. Because the permit function call process can be performed without sending a transaction, just providing a signature to a third party for forwarding, it can be more concealed if it is used for phishing. The cost of checking the signature message increases, and some third-party wallets may not decode and display the signature information, increasing the risk of user attack.

   Advantages and risks exist at the same time, which requires us to have a certain discernment ability. Specifically, the wallet also needs to have prior prevention for the possible large-scale support of Permit2 in the future (TokenPocket does not yet support the parsing of Permit2, but will soon). For example, TokenPocket's current approval risk warning pop-up windows can display the risk content well, thus avoiding risks such as phishing or malicious approval from third parties.

   Do not open unknown websites and execute them recklessly. Be sure to use regular DApps and control the amount of tokens granted to contracts as much as possible. Regularly use authorization check tools for inspection.

To help users to stay away from the “0 USDT” phishing transfer scan, TokenPocket's latest version(Android 1.6.6) optimizes and launches a new function: Hide small transaction records.

Why “0 USDT” transfer scam will appear in my wallet?

This operation is performed directly through the “TransferFrom” function of the USDT, any address can be invoked and generate a transfer record in the wallet and a “Cancelled” record in the Approvals. By the way, please note that this situation may occur in all public chains including EVM-based chains, TRON, etc.

The purpose of this operation is to simulate the transaction from the user’s address, combined with the disguised address to induce the user to misoperate the transfer, it won’t affect your asset's security, but please be aware of this possible misoperation execution.

How to hide the small transaction record?

1. Open your TokenPocket wallet (Android 1.6.6 supports hiding small transaction records), select a token randomly, and enter the Token Details page. Take USDT as an example here, click the Setting button on the right corner.

2. Turn on [Hide small amount], and enter the small amount according to your need, click [Save changes], then you have successfully hidden the small transaction records.

2. All the small transaction records will be hidden after setting, you can see a clear comparison of transaction records before and after hiding.

The continuous improvement of the wallet security function not only helps users to better keep assets but also reminds users to be careful when executing wallet operations.

Please double-check your wallet address before you transfer! Strengthening your wallet security awareness is the premise of protecting your assets!

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

Website | Twitter |Telegram | Extension |Hardware Wallet

1. TokenPocket Official Website: https://tokenpocket.pro/.

We found that the fake download link appeared on Google. Scammers have placed a large number of fake wallet advertisements on search web. TokenPocket has contacted Google Ads apartment to complain about this. Please don’t click the download link randomly, especially in searching tools like Google!! Get away from the FAKE TokenPocket APP!!

2. Distinguish the official TokenPocket Logo.

At present, the official TokenPocket wallet Logo is a blue background with a white “TP” pattern on the left below. The other logos are fake wallet logos, please pay attention to distinguish them!

3. Update Method

Android users who download TokenPocket APK from the official website can update it according to their personal needs. And users who download from Google Play, Samsung Store, and App Store can update the APP on the corresponding store.

In view of the user assets loss caused by the hijacking of other wallets recently, some users are concerned about the security of APK wallet downloads. TokenPocket states that the signature verification will be carried out for TokenPocket’s APK download. Meanwhile, we also have a very strict audit mechanism. The whole process needs to go through five strict security audits, so there is no malicious replacement of packets. TokenPocket will keep working on technical security services and provide users with a secure decentralized experience.

4. Verify whether the wallet is genuine!

Verify the APK Version

TokenPocket APK can determine whether it is a genuine wallet by MD5 and SHA256 values.

MD5 and SHA256 verification tool, which we can also call file hash verification tool refers to the tool that calculates the hash value of the file content. With these tools, the hash value of the file can be quickly calculated and compared with the official hash value to verify whether the file content has been tampered with.

Verify GooglePlay Version

Verify the App Store Version

Protect your private key and secret recovery phrase.

TokenPocket is a decentralized self-custodial wallet, users’ assets can only be controlled by the private key and secret recovery phrase, which means the private key/secret recovery phrase is the only proof to control your wallet.

When you create your wallet, TokenPocket reminds you to safely back up your secret recovery phrase and keep them in a safe place. When backing up the secret recovery phrase, please double-check to ensure the accuracy of your backed-up.

Please don’t trust anyone who claims to be an official. Anyone who directly communicates with you is a scammer! Don’t share the private key and secret recovery phrase with anyone, please be vigilant!

Approve carefully, cancel unnecessary and risky approvals regularly!

1. Approve carefully, don’t click any unknown third-party links!

Approval has become one of the important operations closely related to security in wallet operations. In order to avoid random approval executed by users, TokenPocket wallet adds the following security reminders before you perform the approval operation. Please be sure to understand the security tips in the popup window!

Don’t play DApps from unknown sources, don’t play DApps have no open-sourced, don’t play DApps have no audit reports and not from trustable teams.

2. Cancel the unnecessary and risky approvals regularly!

TokenPocket suggests that users check the approval of their wallet every week through the [Approval] on the [Assets] page, cancel unnecessary approval and risk approval, and protect wallet assets.

At present, the TokenPocket Approval Detector has supported Ethereum, BNB Chain, and TRON.

To sum up, wallet security needs every user’s attention, the above is the most effective protection of wallet assets security, but also the most necessary safety operations. We hoped that users will work hard to learn wallet security knowledge and stay #SAFU.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

Website | Twitter |Telegram | Extension |Hardware Wallet

We found that the fake download link appeared on Google.

Reminder: Don’t click the download link randomly, especially in searching tools like Google!! Get away from the FAKE TokenPocket APP!!

The only official website and the only download link!!

👉https://tokenpocket.pro

>> How to verify whether the wallet is genuine?

2. The security reminder on creating a wallet.

You will see the security reminder when you are creating a wallet, please back up your secret recovery phrase and password and store them in a safe place. At the same time, you can learn the video content and keep the security points in mind!

3. The security reminder on exporting a wallet.

a. Export the private key.

To keep your assets safe, please read the security reminders! Do not share your private key with anyone!

b. Export the secret recovery phrase.

To keep your assets safe, please read the security reminders! Do not share your secret recovery phrase with anyone!

4. The security reminder on transfer.

a. The security reminder on transfer to the contract address.

To avoid users transferring to the token contract address, when you enter a token contract address as the receiving address, TokenPocket will give you a security reminder.

Attention, A smart contract is a self-executing contract with the terms of the agreement written into lines of code. The code and the agreements contained therein exist across a distributed, decentralized blockchain network. Taking Ethereum network as an example, issuing ERC20 Tokens on Ethereum network is essentially creating the smart contract of a Token. The code of the smart contract determines all information of the token in this address.

Since the smart contract doesn’t have a private key, once transferred tokens to the contract address, they may never be returned.

>> Why can’t I transfer my assets to the contract address?

b. The security reminder on transfer between different networks.

Take EVM-compatible chains as an example, when you set a non-EVM-compatible chain address as the receiving address, TokenPocket will give you a security reminder.

This is due to the selection of the EVM-compatible chain when withdrawing tokens. ETH, HECO, BSC, and OKC, are all EVM-compatible chains. Even though the address format is the same, the tokens of this address can’t be transferred directly. So the tokens can only be transferred in the same public chain, but can’t be transferred between different public chains.

Since these public chains are EVM-compatible chains, their private keys can be imported into each other. For example, if the ETH tokens are transferred to the HECO address, you need to import the HECO private key to the ETH wallet to retrieve it successfully.

c. The security reminder on transfer to the risky address.

TokenPocket will localized mark the risk for fraud wallet addresses on-chain. When the following risk prompts appear after you enter the receiving address, please stop the transfer operation immediately!

d. The security reminder on multiSig wallet.

Recently, there are many users complained about the Tron multiSig wallet scams, and TokenPocket has also carried out special security tips for Tron multiSig wallet. When the following prompts appear during the wallet transfer process, your wallet or signature permissions are modified and it is a multi-signature wallet.

At the same time, TokenPocket provides the pop-up window for the TRON multiSig wallet to help users stay away from the scam!

Attention, if you’ve noticed the reminders below, please check if you have encountered the scams, and please delete the current wallet immediately!

e. The security reminder on copy the receiving address.

Recently, the “0 USDT transfer scam” and “phishing address” occurred, to help users to stay away from these scams, TokenPocket added the following reminders, Please check the whole recipient address before you transfer, don’t copy the recipient address from the transaction history randomly! And we recommend you use the “Address Book” function on TokenPocket then you can directly choose the recipient address when you need to transfer.

5. The security reminder on DApps.

a. The security reminder on entering the DApp.

Before you enter the DApp, you can see the following reminder, please read the following reminders carefully and be alert to common scams on the list!

Attention, please don’t enter the third-party DApp carefully, and don’t trust any claim to have a high-return project. All the DApps do not belong to TokenPocket and are controlled by the project's sides!

b. The security reminder on entering the risky web.

TokenPocket will localized mark the fraud website, when you enter the DApp and see this risk warning, please stop operation immediately!

c. The security reminder on approval.

To avoid users to approve randomly, TokenPocket provides the following security reminders. Before you execute the approval operation, please read the reminders carefully and make sure you’ve awarded of the risk of the approval!

Don’t play DApps from unknown sources, don’t play DApps have no open-sourced, don’t play DApps have no audit reports and are not from trustable teams.

6. The security reminder on tokens.

To help users to stay away from the honeypot, fake tokens, TokenPocket will localized mark these risky tokens as “Risky”. If you have the risky token, please delete it immediately!

7. TokenPocket Security Tools

a. TokenSecurity

Token trading through DEX is an often-used function in our daily life. Because of the openness of DEX, any person or team can list different types of tokens. In this process, some criminals will play tricks in the token contract, for example, issuing tokens unable to be sold(honeypot) and tokens with additional issuance functions. So, it is necessary to use the token contract security detection tool. Although the detection cannot be guaranteed to be 100% accurate, it can eliminate some risks and allow users to choose safer tokens for transactions.

Use Guide

b. Approval Detection TokenPocket Approval Detection now supports Ethereum, BNB Chain and TRON, users can use TokenPocket Approval Detection to manage and cancel the risky approvals.

Use Guide

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

Website | Twitter |Telegram | Extension |Hardware Wallet

The latest TokenPocket Android version (1.6.3) has supported the BNB Chain MultiSig wallet! > Details

What is a MultiSig wallet?

Generally, all the on-chain operations need to sign by private key, and the private key signature is equivalent to the process of permission verification. The wallet is divided into single-sig wallet and multi-sig wallet. The single-sig wallet is controlled by a private key. For example, the common wallet we use at present is the single-sig wallet. The multi-sig wallet is jointly controlled by 2 or more private keys. The private key holders of the multi-sig wallets are the managers.

Therefore, when the multi-sig wallet needs to execute the on-chain operation, the managers need to sign according to the weight.

The ETH/ERC20(Including the EVM-based chains like BSC/BEP20, etc.) MultiSig wallet using the smart contract to sign.

Applicable scenes:

1. Manage assets by multiple persons to avoid the misappropriation of assets by individuals;

2. Perform multi-address signature management for assets to enhance asset security.

3. Other security scenarios.​

Create a MuitiSig wallet

1. Open TokenPocket and click [No accounts] for the first time, and choose [MultiSig Wallet]. You can also click the wallet icon in the upper right corner to create a MultiSig wallet.

2. You need to choose the public chain before you create a MultiSig wallet, please read the reminders carefully during the creation process and then click [Next Step].

*Now TokenPocket supports BNB Chain MultiSig wallet.

3. The steps of creating a multi-signature wallet are the core content.

[Wallet Name] is as same as the wallet name you created before, which can be customized and it won’t be recorded on the chain.

[Owners] is to set the managers of the MultiSig wallet. The owners can manage and control the MultiSigwallet and a maximum of 30 owners can be set, which can be understood as the [Threshold Setting] of the MultiSig wallet. The owners can be set up flexibly, it is suitable for enterprises, DAO, and individuals.

[Required Signatures] it’s also called Weight, the difference between EOS/TRON MultiSig wallets and EVM MultiSig wallets is that EOS/TRON MultiSig wallets’ weights can be set as 1 or greater, while EVM-based MultiSig wallets’ weights can only be set as 1.

[Payment Details] The MultiSig scheme of an EVM-based chain is a smart contract, so creating a MultiSig wallet requires paying Gas (miner’s fee), which TokenPocket does not charge. [Pay with] You can click and select the wallet address imported in the wallet to pay the Gas (miner’s fee) fee.

After everything is set, click [Confirm] to read the reminders for the creation of the MultiSig wallet. You can also read the information on this creation on the blockchain explorer.

4. After the smart contract is deployed successfully, you’ve successfully created a MultiSig wallet. Click the upper-left menu of the wallet, and you can distinguish the difference between the MultiSig wallet and the single-sig wallet in the list, and it will be more convenient for you to switch the wallet.

5. After you’ve successfully created a MultiSig wallet, click [Details] and you can see the [Transaction Queue] and [Manage].

6. [Transaction Queue] will display the generated MultiSig order, you can click and complete the order; You can view information such as [Required signatures], [Latest Nonce on-chain], and [Associated Wallet] in [Manage], the associated wallet is the owners. If there is an address that has not been imported, you can click [Import] and use the private key or secret recovery phrase to import it. Whether the associated wallet is imported will affect the transaction and the use of DApps.

To sum up, the MultiSig wallet on the EVM-based chain is a smart contract. Creating a MultiSig wallet does not require backing up the secret recovery phrase or private key, nor require setting a password, nor require complex code, and is similar to the watch wallet.

The key point of creating a MultiSig wallet is the reasonable setting of [Owners] and [Required signatures]. A reasonable set of the MultiSig wallet can play its maximum security and convenience. The commonly used multiple signatures are 2/3, 3/5, and so on, which need to be selected according to the individual situation.

How to import a MultiSig wallet into TokenPocket? MultiSig wallet Transfer Use Guide

The advantages of MultiSig wallet.

1. More Secure

In the Single-Sig wallet, the private key that determines the ownership and management of cryptocurrencies is only in the hands of individuals. Once the private key is lost or the holder forgets the secret recovery phrase or private key, that means the holder lost the control right of the wallet assets. The existence of Multi-Sig wallets minimizes the risk of asset loss when a single private key is lost. Multi-Sig wallets greatly help users reduce security incidents due to lost or stolen private keys. Since the Multi-Sig wallet is controlled by two or more wallet addresses, even if the private key of one of the wallets is leaked, the wallet assets of the Multi-Sig address cannot be transferred, which greatly reduces the risk of asset loss. Take the “2–3 mode” as an example, among all 3 private keys, as long as 2 of the private keys have completed the signature approval operation, the relevant encrypted wallet address can be transferred. Even if one private key is lost, the transfer of assets can be completed through the remaining two private keys to avoid asset loss.

2. Multiple verifications to avoid the wrong transactions.

Multi-Sig wallets can be used to avoid the wrong transactions by multiple verifications. If you enter the wrong account when you transfer in a bank, the transaction will fail and the assets will return to the original account. But the transaction on the blockchain are irreversible, once the assets are transferred to the incorrect address, the asset will not be returned. Using a Multi-Sig wallet, when a private key owner initiates a wrong transaction, other private key holders can prevent the wrong transaction by rejecting the signature when they find the error. The more people involved in signature verification, the fewer wrong transaction will occur.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

Website | Twitter |Telegram | Extension |Hardware Wallet

But, is it possible to invoke the assets of a normal wallet address that didn’t approve before? Recently, many users found out there is a “0 USDT” transaction history appearing in the wallet. For example,

The first time you saw this transaction, you might think you were struggling with the risk of risky approval, then you might check on the blockchain explorer.

However, only “Cancelled” is shown on the blockchain explorer.

And you can’t find any approval history in the Approval Change History.

So, what’s going on? Let me explain further. Take TRONSCAN as an example, find the USDT contract address, and click [Contract] — [Write Contract] — [8. transferfrom].

You can enter [_from_address], [to_address], and the [_value], then click [Send]. [true] means the operation is successful. This is a simple invoke operation, which will cause your wallet [Approval] to add a history that shows “Cancelled” and also, through this invokes, it will cause “0 USDT” transfer history to appear in your wallet.

Scammers want to trick you into copying the wrong address during the transfer process, which can lead to the loss of assets. Be aware of the phishing address!

Q&A

1. Why my asset can be invoked?

This operation is performed directly through the TransferFrom function of the USDT, any address can be invoked and generate a transfer record in the wallet and a “Cancelled” record in the Approvals. By the way, please note that this situation may occur in all public chains including EVM-based chains, TRON, etc.

2. Are my assets still safe?

The purpose of this operation is to simulate the transaction from the user’s address, combined with the disguised address to induce the user to misoperate the transfer, it won’t affect your asset's security, but please be aware of this possible misoperation execution.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

Website | Twitter |Telegram | Extension |Hardware Wallet

Cold Wallet: Cold wallet is one type of blockchain wallet. It refers to the wallet where the user's private key disconnects from the Internet, so it is also called offline wallet. Cold wallets usually rely on "cold" devices (such as computers and phones that are not connected to the Internet) to ensure the security of private keys and use QR codes or Bluetooth to keep private keys against accessing the Internet, avoiding the risk of being stolen by hackers.

Hot Wallet: Hot wallet is another type of blockchain wallet. Compared with cold wallets, it is also known as an online wallet. Due to its internet connection, the operation may be disturbed by some risk factors such as viruses or scripts, which will put assets at risk. Therefore, the security is lower than cold wallets, but it is more convenient.

Watch Wallet: A watch wallet is essentially a block explorer that observes the data on a chain of a specific address. Users only need to import the account (public key) or address to enjoy the watch wallet easily, where they can view the account (address) assets, transaction records, and other information. But the watch wallet cannot directly execute transfers and other on-chain operations. If you need to transfer, you have to import the private key or secret recovery phrase into the wallet, and you can also use it with a cold wallet.

Hardware Wallet: A hardware wallet refers to a hardware device that stores the private key of digital token assets and is equipped with a security chip. It is not connected to the Internet, and supports “Connection (Bluetooth) and Play”.

Cold wallet vs Hot wallet

How to use Watch Wallet and Cold Wallet on TokenPocket?

1. When you execute the transfer operation on the watch wallet, the following QR  code will pop up, use the corresponding cold wallet, and click [Scan to sign] for the scanning code.

2. After you’ve confirmed the transaction introduction, the [Use the corresponding watch scan code to complete the operation] will pop up on the cold wallet page. Open the corresponding watch wallet and click the scanning button under the pop-up window to scan the QR code, and the transaction can be successfully sent.

Conclusion

After learning the difference between a cold wallet and a hot wallet, choosing a wallet to store your crypto assets is critical. Wallet security should be the highest priority in the selection process. Cold wallets can better protect the security of the wallet's private key in an offline environment. Of course, there will be users who prefer the convenience of transferring cryptocurrencies and realizing fast online transactions, thus they prefer to choose the hot wallet. This requires users of Hot Wallet to be more careful about backing up their private key or secret recovery phrase and keeping it in a safe place.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

| Twitter | Telegram | Website | Extension Wallet | Fans Forum |

** **

TokenPocket Wallet Survey is Coming📣!

To better understand the problems encountered by users in using TokenPocket, and improve our TokenPocket products and services. We sincerely invite you to take 3 minutes to fill out the following questionnaire, so that we can better understand your needs and provide you with better products and services.

Survey for English users: https://docs.google.com/forms/d/1kogfEozUZs7SU7YJ9KjSByYIE3iWI_5Fk60prYwtWFs/viewform?edit_requested=true

Survey for Chinese users: https://www.wenjuan.com/s/UZBZJvlxogP/#

TokenPocket appreciates your support!

If your suggestion is helpful enough, you will get a reward of up to $100 after being adopted.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

Website | Twitter | Telegram | Extension | Hardware Wallet | Fans Forum

• Custodial, in general, means a third party holds your funds on your behalf of you. While in crypto, self-custodial means that you hold and fully control your assets.

• Custodial wallets are offered by a third party that stores your asset on your behalf of you. It is easy for users who have no knowledge of blockchain to use, but there are some disadvantages as well like they can transfer your assets without noticing you. Currently, all the centralized exchanges are offering custodial wallets for their users.

• A self-custodial wallet gives you the private key and stores it on your device only. You are the only one to control your assets.

• TokenPocket is a fully self-custodial wallet that provides secure and easy-to-use features and also rich functionalities.

Do you have control over your assets? If you are an OG in crypto, this must be an unfailing topic for you. For most common users, people will regard the assets in an account belong to us, just like a bank account. But think further, we just deposit that money on a third party, they have control over our money. This is hard in traditional business, where we deposit the money and the other people have no control over it. But things are different in crypto.

What is a custodial wallet?

Custodial wallets are almost always web-based, usually offered by centralized cryptocurrency exchanges like Coinbase, Binance, etc. The interfaces of most exchanges are carefully designed so that users do not need to interact with their on-chain wallets directly. This simple and friendly approach is generally preferred by beginners. Because they don't have to understand blockchain concepts such as private keys.

With custodial wallets, users don't need to interact with their blockchain wallet, usually, it's just a change in the escrow platform's internal ledger, which means that the transaction never happened on-chain. When you need to interact on the chain, the escrow platform will use the private key they hold to help you publish the transaction on the chain.

Another problem with custodial wallets is theft. Exchanges are known to be the holders of private keys and their services interact with the blockchain, making them a big target for hackers. As a result, billions of dollars are lost to hacking every year. If the exchange holding your private keys goes bankrupt, all your assets will be lost as well.

What is a self-custodial wallet?

A self-custodial wallet often referred to as a decentralized wallet, is a crypto wallet in which users control their private keys. Only the user can access the cryptocurrencies held in the self-custodial wallet, thus achieving the user 100% control over their assets. In addition, self-custodial wallets also provide a guarantee for increasing the security of cryptocurrencies.

On the other hand, the advantages of self-custodial crypto wallets also bring some requirements for beginners, who should have basic knowledge of backing up and restoring wallets. Self-custodial wallets also hold users responsible for the security of their cryptocurrencies. Wallet users must be responsible for the security of their private keys, so there are certain requirements for users' wallet security knowledge.

In most cases, self-custodial wallets are controlled by a 12-word recovery phrase. Users must store recovery phrases in a safe location. For example, you can write down your recovery phrase on a piece of paper and keep it in a safe.

The recovery phrase is the most important thing for any crypto wallet as it helps to regain access to the wallet. However, anyone with a recovery phrase can access the self-custodial wallet. Therefore, users should avoid storing their recovery phrases online or sharing them with others.

Custodial vs. Self-Custodial

Reasons why to choose TokenPocket

1. A multi-chain wallet that has stably operated for more than 5 years. Supporting over 30 public chains and a few thousand EVM-compatible chains.

2. Private keys are generated and stored in the user’s device only. The user is the only one to access their private keys and assets.

3. The multitude of features, DEX, DApps, and NFT integrated. You can easily and safely surf on the blockchain.

4. TokenPocket won’t charge any fee, you will only need to pay a gas fee to the blockchain when you need to send a transaction.

   As we always said, not your keys, not your assets. From now on, let’s start to create our crypto wallet, to completely control our assets!

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

| Twitter | Telegram | Website | Extension Wallet | Fans Forum |

Recently, the TokenPocket technical team find a new kind of scam, which we named it “phishing” address.

This scam is in a more "primitive" way, the scammers will monitor the addresses which usually transfer large amounts of $USDT on-chain, and find the recipient address within the transaction history. Then, the scammers will use a tool like “Account Generator” and generate a “phishing” address that is very similar to the recipient address (usually the first few digits or the last few digits are as same as the recipient address), then, they will use this “phishing” address to transfer 0.001 USDT or 0.01 USDT to the users’ addresses, then this transaction will appear on users’ transaction history. If the users didn’t recognize it and copy the “phishing” address from the transaction history and paste it to the transfer page and execute the transfer operation.

Since blockchain is irreversible, if you transfer to the “phishing” address, no one can help you to recover your assets. Users’ assets can only be controlled by secret recovery phrases and private keys.

Please check the whole recipient address before you transfer, don’t copy the recipient address from the transaction history randomly! And we recommend you use the “Address Book” function on TokenPocket then you can directly choose the recipient address when you need to transfer.

How to use “Address Book?

TokenPocket Assets Page > Send > Address Book

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains and cryptocurrencies including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s device and users will be able to fully control their own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

|Twitter|Telegram|Website|Extension Wallet|Fans Forum|

Multi-Sig means multi-signature, it is a specific type of crypto signature that will allow more than two users to sign as a group. That means multi-signatures are generated by combining multiple single signatures.

You can imagine a safe with two locks and two keys, one held by A and one held by B. The only way to open this safe is for both A and B to provide the key to unlock it. If you only have one of the keys, you cannot open the safe.

In a word, Multi-Sig is to divide the asset control rights of the wallet address to 2 more people, which is suitable for enterprise management and can also help users to protect their wallet assets better.

Keywords

Private Key is used to transfer assets and verify transactions. The private key of the decentralized wallet is held by the users, and users are responsible for protecting the private key and keeping it safe.

Public Key is used to encrypt session keys, verify crypto signatures, or encrypt data that can be decrypted by the corresponding private key.

Wallet Address is the hashed version of the public key. When a user wants to receive assets, he discloses his public address to the other.

The difference between Single-Sig and Multi-Sig wallets.

Single-Sig wallet is the most common form of wallet in the current blockchain wallet. Most of the crypto users are holding Single-Sig wallets and the wallets can only be controlled by private keys and secret recovery phrases. That means anyone who holds this private key or secret recovery phrase can directly control the wallet address, meanwhile, the one who holds the private key or secret recovery phrase can transfer the wallet assets without permission.

Multi-Sig wallet provides a solution for this situation. By setting 2 more people to jointly manage an address, only the managers sign and agree to use the assets in the address, which greatly reduces the risk of asset loss caused by private keys being leaked.

The most important feature of a Multi-Sig wallet is that wallet transactions require the approval of the private key holders. Ordinary, the "m-n mode" needs to be confirmed when a Multi-Sig wallet is created. Only the "m" holders of the "n" private keys jointly sign and approve the transfer to complete the transfer operation.

"2–3 mode" is the most common form of Multi-Sig wallets, every transaction needs to be approved by the 2 private key holders, which can balance the relationship between safety and convenience.

The advantages of Multi-Sig wallet.

1. More Secure

   In the Single-Sig wallet, the private key that determines the ownership and management of cryptocurrencies is only in the hands of individuals. Once the private key is lost or the holder forgets the secret recovery phrase or private key, that means the holder lost the control right of the wallet assets. The existence of Multi-Sig wallets minimizes the risk of asset loss when a single private key is lost. Multi-Sig wallets greatly help users reduce security incidents due to lost or stolen private keys. Since the Multi-Sig wallet is controlled by two or more wallet addresses, even if the private key of one of the wallets is leaked, the wallet assets of the Multi-Sig address cannot be transferred, which greatly reduces the risk of asset loss. Take the "2–3 mode" as an example, among all 3 private keys, as long as 2 of the private keys have completed the signature approval operation, the relevant encrypted wallet address can be transferred. Even if one private key is lost, the transfer of assets can be completed through the remaining two private keys to avoid asset loss.

2. Multiple verifications to avoid the wrong transactions. Multi-Sig wallets can be used to avoid the wrong transactions by multiple verifications. If you enter the wrong account when you transfer in a bank, the transaction will fail and the assets will return to the original account. But the transaction on the blockchain are irreversible, once the assets are transferred to the incorrect address, the asset will not be returned. Using a Multi-Sig wallet, when a private key owner initiates a wrong transaction, other private key holders can prevent the wrong transaction by rejecting the signature when they find the error. The more people involved in signature verification, the fewer wrong transaction will occur.

Conclusion

Multi-Sig requires users to finish multiple signatures to transfer the wallet address, which provides higher security. However, many users don’t have enough knowledge of multi-signature wallets, and TokenPocket will continue to share more basic knowledge to help users to learn more about it. Meanwhile, TokenPocket’s multi-signature wallet will be launched soon! We hope to bring a more secure decentralized wallet experience to all users! Security as it should be!

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s own device and the user can fully control his own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

|Twitter|Telegram|Website|Extension Wallet|Fans Forum|

Download TokenPocket Mobile Wallet. > Download

Attention: The only TokenPocket official website is https://tokenpocket.pro/.

Add TokenPocket Extension Wallet to your Chrome. > Get it on Chrome

How to create/import/sync your wallet on TokenPocket?

Create A Wallet If you don’t have a wallet > Click [No accounts] > Choose [HD Wallet] or choose a public chain > Create your own wallet address.

Import A Wallet Click [I have an account] > Choose [HD Wallet] or choose a public chain > Enter your Secret Recovery Phrase and set the wallet name and password.

Sync A Wallet Follow the below guide to create/import your wallet address first. > Click [Import Wallet] > Click [One-step Sync] > Choose the wallet you want to Sync.

Tips: “Wallet Sync” is designed to help users quickly synchronize wallets on this network to other networks. This function can get your assets back when you transfer assets by the wrong network protocol (chain). [Only works for EVM Chains.]

Attention: Never share your private key or secret recovery phrase with anyone! TokenPocket will never ask for your private key or secret recovery phrase!

How to withdraw/deposit the assets on TokenPocket?

Withdraw your assets from exchanges or other decentralized wallets. TokenPocket Assets page > Choose the transfer Public chain > Click [Receive] > Copy the [Receiver] > Paste your TokenPocket wallet address to the transfer page of the exchange or other decentralized wallet > Click [Withdraw] > Withdrawal operation successfully.

Attention: You must execute the transfer operation on the same public chain! Don’t transfer your assets between different public chains! Otherwise, you will lose your assets and no one can help you recover them!

• How to Withdraw Cryptocurrency on Coinbase? > Tutorial

• How to Withdraw Cryptocurrency on FTX? > Tutorial

• How to Withdraw Cryptocurrency on Binance? > Tutorial

• How to Withdraw Cryptocurrency on Bitfinex? > Tutorial

Click to know more.

Deposit your assets to exchanges or other decentralized wallets. Exchange Deposit page > Copy the exchange wallet address > Open TokenPocket Assets page > Click [Transfer] > Paste your exchange wallet address to the [Receiver] > Enter the amount > Pay for the gas fee > Deposit operation successfully.

• How to Deposit Cryptocurrency to FTX? > Tutorial

• How to Deposit Cryptocurrency to Binance? > Tutorial

• How to Deposit Cryptocurrency to Bitfinex? > Tutorial

Notes for Exchanges Withdrawal

How to access DApps on TokenPocket?

For Android users, you just need to search the DApp on the search bar. You can move easily and smoothly through this simple operation!

Also, you can search different DApps on the “Discover” page!

For iOS users, the TokenPocket community has created a DApp List for all iOS users, which helps you to enter all your favorite DApps easier and conveniently!

Here is the link: https://dappcom.github.io/dapp-list/#/

How to trade Fiat on TokenPocket?

TokenPocket Assets page > Click [Buy] > You can choose [BUY] or [sell] button to experience the one-stop experience of Fiat-crypto buy and sell.

Transit

@TransitFinance

A New Gateway for @TransitFinance Fiat-Crypto purchase is supported by @AlchemyPay.

Operate a few simple steps to sail through the Fiat-Crypto Purchase.
buy.transit.finance

@TokenPocket_TP @TransitFinance @AlchemyPay

71

5:01 AM • Sep 6, 2022

TokenPocket Security Tips:

1. Never share your private key or Secret Recovery Phrase with anyone!

2. Don’t approve randomly!

3. Don’t transfer between different public chains!

4. Admin will never privately contact you!

Customize your TokenPocket Wallet

Set the NFT Asset Card, Receive Background, and Avatar on TokenPocket > Tutorial Set TokenPocket Widget on your phone. > Tutorial

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains and cryptocurrencies including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s device and users will be able to fully control their own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

|Twitter|Telegram|Website|Extension Wallet|Fans Forum|

Recently, we received feedback from the users that they’ve received the airdropped tokens from the exchange. Attention, the type of this transaction is to imitate the exchanges’ transfer label. When users received this token and try to transfer or swap it, they found that there are some problems with the token, such as the situation that the token can be bought but cannot be sold, etc. The TokenPocket security department has analyzed the on-chain information and we found that it is a new type of token transfer scam. The scammers forge transaction records of transfers between arbitrary addresses by using the browser or wallet to parse the transfer transaction records. This falsification of transaction records can only be done against tokens issued by scammers but they can forge the mainstream tokens.

The best way to prevent this scam:

Don’t trust any unknown-source tokens or NFTs airdrop. The exchanges will not airdrop tokens to the on-chain wallets randomly.

Don’t use any recommended website or APP.

Don’t open third-party links and approve randomly.

Keep private keys and secret recovery phrases safe and don’t share them with anyone.

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains and cryptocurrencies including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s device and users will be able to fully control their own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

|Twitter|Telegram|Website|Extension Wallet|Fans Forum|

“Here are my phrases: THIS IS DEFINITELY THE TRON MULTI SIGNATURE SCAM DO NOT BELIEVE IT.”

So, maybe you are interested in these phrases and you are trying to import them into your TokenPocket APP, right?

LOL! Please be aware of this TRON Multi-Signature SCAM!

What’s the difference between a single-signature wallet and a multi-signature wallet?

The standard transactions on cryptocurrency networks can be called single-signature transactions because they require only one digital signature for a transaction to be done. But for some special public chains like TRON, it has a multi-signature mechanism. The multi-signature gives every signature one weight, the signatures’ total weight of the transactions must reach the customized weight threshold before they can be executed. That means, an account can be managed by several private keys, and the transactions created in one account can be signed by serval private keys. For example, for a single-signature wallet, when you need to execute the transfer operation, you only need to sign once then the operation can be done. But for a multi-signature wallet, the transfer operation needs to be signed several times, the signature amount depends on the threshold.

What are the Multi-Signature Scams?

There are two common multi-signature scams.

The first is the scene at the beginning of this article. The scammers will share the Secret Recovery Phrase or Private Key with you and ask for your help. Ordinary, there is a large number of assets in the wallet, except for TRX. In this situation, users will be attracted by the assets and transfer TRX to this wallet. When they execute the transfer operation, they found that they can’t transfer. Then they finally realized they were scammed. At the same time, the scammers achieved their purpose, which is to get the TRX you deposited.

The second common multi-sig scam is the leakage of the private key or secret recovery phrase. If you’ve shared the private key or secret recovery phrase with the scammers. The scammers can use your private key or secret recovery phrase to change your account’s permission without notifying you. When you transfer the assets to the wallet and want to transfer them out, you will find that your wallet became a multi-signature wallet and your assets can’t be controlled by yourself anymore. Then, the scammers can transfer your assets immediately and you can’t do anything!

How to verify the TRON Multi-Sig wallet?

1. Open TRON Explorer, enter your TRON wallet address on the search bar, then you can view your assets page. If the current account’s “Owner Permission” and “Active Permission” are authorized to 2 or more accounts, that’s the Multi-Sig wallet address.

2. Click “View Account Permission”, then you can see another signature wallet address and the weight.

3. Click “View Account Permission”, then you can see another signature wallet address and the weight.

How do prevent Multi-Sign Scams?

1. Don’t believe anyone who sends a private message to you via Telegram, Twitter, or other social media!

ONLY THE SCAMMERS WILL DM YOU FIRST!

​​2. Don’t share your private key or secret recovery phrase with anyone!

YOUR ASSETS CAN ONLY BE CONTROLLED BY THE PRIVATE KEY AND SECRET RECOVERY PHRASE!

About TokenPocket

TokenPocket is the world’s leading multi-chain self-custodial wallet, which supports mainstream public chains and cryptocurrencies including BTC, ETH, BSC, TRON, Polygon, Solana, HECO, Klaytn, Avalanche, OKC, HSC, Fantom, Polkadot, Kusama, etc. The trinity of TokenPocket mobile wallet, chrome extension wallet, and hardware wallet has been formally formed. The Secret Recovery Phrase and Private Key are stored in the user’s device and users will be able to fully control their own crypto assets. TokenPocket has provided reliable services for over 20 million users around the world. The number of monthly active users exceeds 3.5 million and the users are located in more than 200 countries around the world.

|Twitter|Telegram|Website|Extension Wallet|Fans Forum|