If you believe your account is compromised, act in this order. Speed matters more than a perfect diagnosis.
Immediate steps
- Revoke API wallets. From a clean device, open Settings → API wallets and revoke every wallet you do not recognize.
- Move funds. Transfer remaining USDC to a new account that was never connected to the compromised device.
- Disconnect sessions. Revoke mobile sessions and WalletConnect sessions.
- Check approvals. Revoke token approvals for contracts you do not recognize.
- Report. Open a ticket with the transaction hashes. Do not share your seed phrase.
Support will never DM first
Nexwest support only responds inside the official Discord ticket channel or from @nexwest.app email. Anyone who DMs you first, asks for a seed phrase, or offers to “recover” funds is a scammer.
Common scams
| Scam | What it looks like | What to do |
|---|---|---|
| Fake support | A DM offering to fix your wallet | Block and report |
| Fake airdrop | A site asking you to sign a “claim” | Do not sign; check the official announcements |
| Address poisoning | A near-identical address in history | Verify the full address before sending |
| Malicious approval | A contract requesting unlimited spend | Revoke the approval |
| Impersonated app | A domain similar to nexwest.app | Check the URL character by character |
Approvals
Token approvals let a contract move your tokens. Revoke any approval you do not recognize from the explorer's approval page or a reputable approval manager. API wallet approvals are separate; revoke them from Settings → API wallets.
Best practices
- Use a hardware wallet for significant balances.
- Keep a separate API wallet per bot.
- Never reuse a seed phrase across devices or applications.
- Verify the domain and the chain before signing.
- Treat unsolicited links as hostile.
- Test recovery before you need it.
If funds were stolen
- Record the transaction hashes and the destination addresses.
- Report to local authorities and to the relevant chain's security contacts.
- Post in the official Discord
#securitychannel so the team can trace the flow. - Nexwest cannot reverse onchain transactions, but it can flag addresses and coordinate with exchanges.