---
# System prepended metadata

title: Human Unreadable Security tips

---

# Human Unreadable Security Tips

Here are a few tips to keep in mind when interacting with any dApps and smart contracts, including the Human Unreadable project.

## Project Addresses

**Human Unreadable Act II**
https://etherscan.io/token/0x15878dF6BF7a5dA17e12Ba80f1a635211f3Dbae4

**Artblocks Contract Address (Act I)**
https://etherscan.io/address/0x99a9B7c1116f9ceEB1652de04d5969CcE509B069

### Claiming Act II token

Only attempt claim the token on the offical Operator site https://act2.operator.la/. Claiming involves **one transaction** and **does not require any token approvals**. You will not be asked to submit any approvals for your main Human Unreadable NFT during the claim process. If you see an approval request in your wallet it could be a sign you are on a compromised clone of the site.

Video walkthrough: https://www.loom.com/share/3a6029baa5e6451a8ddaad2434805b4e?sid=3aff7d68-eca3-41d4-a27c-17bd57933d36

## General Tips

### 1 - Beware of DMs

No one ever needs to ask you for your seed phrase, and anyone posing as a support desk representative requesting you to go to a website to 'upgrade your wallet' or do any transactions is probably trying to scam you.


### 2 - Verify full addresses before completing a transaction

A common scam known as 'address poisioning' involves malicious actors spamming your transaction history with addresses that look *nearly identical* to your own, but with a few different characters. Their goal is to get you to copy paste these addresses from your transaction history in your wallet or on Etherscan and send funds there instead of your own walle. **Always verify the full address before completing a transaction**

### 3 - Confirm you are on the valid dApp and not an impersonator

It is easy for hackers to clone a website's interface, deploy it to a similar looking URL and try to trick people to going there instead. The transaction requests on the clone site are designed to drain your wallet.

### 4 - Look out for unexpected transaction requests, even on valid sites

Legitimate sites can be compromised by attackers introducing additional transaction request through the technical dependencies of the project's source code. They will often pop up before the transaction you actually want to do. They might look like signature request or token approval requests. Double check the request content & the smart contract referenced in the transaction request before confirming. If one looks suspicious, reach out to the project admins.

### 5 - Spot fake collections on Opensea

Scammers will often copy all of a popular NFT collection's images and create a duplicate collection on marketplaces like Opensea that look nearly identical to the real collection. Always verify the contract address and titles in the URL of the marketplace link and look out for inconsistencies with floor prices and volume. This is more common just after the new launch of a collection but can happen at any time. If you spot a fake collection flag it and the marketplace can take it down to help other collectors avoid getting scammed.

### 6 - Pause and take a breath before confirming any transaction

Most people lose their assets to a scam in a moment of percieved urgency or panic, or when they are tired. This causes them to miss certain warning signs they should have identified. If you see a link for an airdrop on social media, group chat, or DM, be skeptical and don't rush into any transactions.