@TokenScanApp | Telegram Bots : TokenScan (https://xitter.cf/t.co/wXVElXOdSd) - Raidar (https://xitter.cf/t.co/LfStaETtWS) - Guardian (https://xitter.cf/t.co/ttAiQn8pHj)
Telegram
Joined March 2016
- Tweets2.4K
- Following1K
- Followers2.8K
- Likes18.4K
Pinned Tweet
(Crypto) Telegram is a battlefield. Scammers adapt, refine, and deploy ever more deceptive tactics
Spending time in multiple communities, with our bots, seen some next-level tricks : Awareness is the first line of defense.
Here’s a breakdown of the most frequent ones ⬇️
MΞWNS retweeted
I posted about this vulnerability in 2021 and no-one cared.
How to turn off animated stickers (Loop Animated Stickers) in Telegram:
1. Open Telegram.
2. Go to Settings (tap the menu icon or your profile picture).
3. Tap Chat Settings (or Appearance / Chats, depending on your version).
4. Find the option “Loop Animated Stickers” and turn it off.
Additional tips:
• Also disable Auto-Download Media in Settings → Data and Storage to reduce risks from malicious files/stickers.
• On desktop (Telegram Desktop):
Settings → Advanced → Experimental or Chat Settings → uncheck Loop Animated Stickers.
After turning it off, animated stickers will no longer play in a loop automatically.
My post from 2021 ⬇️
MΞWNS retweeted
how to not get your crypto hacked.
bookmark this forever:
1. hardware
- buy direct from the company or an authorized retailer. never random resellers
- seed card already filled in when you received = scam. throw it
- ship it to a pickup point, not your home
- update firmware only through the official app
2. seed
- metal over paper. never a photo, cloud or notes app
- never enter your seed into a website or software wallet. restore only through your hardware wallet's official recovery
- don't split your seed manually. no redundancy and it leaks information. use shamir or multisig instead
- test your backup before funding: built-in check or wipe and restore. untested backup = no backup
- two copies, two locations. fire is a hacker too if seed burns
3. setup
- vault: a hardware wallet that never touches dapps
- hot wallet for daily use. burner for anything new
- bigger bags: passphrase on top. small decoy bag on the seed, real bag behind the passphrase
- back up the passphrase too, stored apart from the seed. lose it and nothing recovers your coins
- multisig when the amount justifies it. no single point of failure
4. signing (where most people get drained)
- verify on the device, never trust the website alone. bybit lost $1.5B to a compromised UI
- can't read it? don't sign it
- "free" signatures can drain you with zero gas (permits)
- one malicious eip-7702 authorization can delegate control of your entire account
- on solana, one bad tx can reassign your token accounts. simulate before you sign
- review approvals monthly. revoke what you don't need
5. sending
- never copy addresses from tx history. scammers plant lookalikes
- check the full address on the device, not just the first and last 4
- small test tx before every big one
6. machine
- a laptop that only touches crypto. clean browser, no random extensions
- download wallets only from the official site. app stores and search results are full of fakes
- never run "meeting apps", game builds or files strangers send
- never share your screen or install remote access. "support" asking for anydesk = scam
- bookmark every site. never click search ads
- surprise airdrops and NFTs = trap
7. exchanges
- unique password everywhere. 1password or bitwarden
- 2FA with an authenticator app or passkey. never SMS
- 2FA backup codes offline. not in email, not in cloud
- lock your SIM with a carrier PIN. sim swaps still work
- separate email only for crypto. nobody knows it
- turn on withdrawal whitelists
- not your keys, not your coins. move out what you're not trading
8. opsec
- don't flex your bags or your setup. wrench attacks are rising
- support never DMs first.
- avoid phishing emails, only trust official sources
- have an inheritance plan. dead keys are lost coins
9. quantum (check my other quantum tweet for detailed advice)
- not a threat today and anyone selling quantum panic is selling something
- btc: never reuse addresses. sending from one exposes its public key forever
- btc: park long-term coins in addresses that have never sent a tx. taproot (bc1p) and old p2pk show the key from day one
- btc: bip-360 proposes a step toward quantum-resistant addresses. not live. proposals also exist to freeze unmigrated coins
- eth + erc20: sending a tx exposes your public key. signing messages can expose it too so keep major bag on clean wallet
- sol: your address is your public key. exposed from day one. experimental winternitz vaults exist, not standard wallet protection
hardware rarely gets hacked. people do.
MΞWNS retweeted
getting there. next priorities some bug fixes and proper sound effects and fix some vfx like hue under the kart!
1️⃣3️⃣ We're seeing a new type of bot abuse that could very likely become a large-scale scam vector: A bot mention in chat that posts a scam content
The worrying part: the bot doesn't even need to be a member of a group. Simply mentioning its username in a chat (even in a private DM) can trigger it to automatically post unsolicited content
(In the screenshot below, I only mentioned the bot in a private conversation, and it immediately generated and sent its own message)
I don't know the exact exploit being used, but this clearly shouldn't be possible. @telegram and @durov should investigate and patch this ASAP before it's abused at scale
1️⃣4️⃣ Adding @PhilMino post:
xitter.cf/PhilMino/status/209334…
ATTENTION: Two days ago I received two calls from +33 numbers at night. A few minutes later I got a notification that somebody had logged into my Telegram account. Luckily, the attackers were not able to remove my session, and I could remove theirs before they locked me out.
1/7
33
Project teams & active TG community members - this is for you. 🫵
You know those annoying filters you have to set up with Guardian, Safeguard, etc. just to get basic static token information?
@TokenScanApp brings dynamic, live on-chain data directly into your Telegram group
Give your community live, actionable data about their token without making them leave Telegram
Need help ? Write me on Telegram : t.me/mewns
1
48
➰ "/tw" — Top Wallets
➰ "/soc" — Token Socials
➰ "/nar" — Token Narrative
And it doesn't stop at your token.
You also get Market Commands:
➰ "/i" — Market Info
➰ "/fear" — Fear & Greed
➰ "/cal" — Market Calendar
➰ "/today" — Today's News Summary
➰ "/tren" — Launchpads
1
28
MΞWNS retweeted
1️⃣3️⃣ We're seeing a new type of bot abuse that could very likely become a large-scale scam vector: A bot mention in chat that posts a scam content
The worrying part: the bot doesn't even need to be a member of a group. Simply mentioning its username in a chat (even in a private DM) can trigger it to automatically post unsolicited content
(In the screenshot below, I only mentioned the bot in a private conversation, and it immediately generated and sent its own message)
I don't know the exact exploit being used, but this clearly shouldn't be possible. @telegram and @durov should investigate and patch this ASAP before it's abused at scale
Meanwhile, here’s one that actually helps with decision-making
@TokenScanApp
Ten selected design proposals for the next series of euro banknotes have been unveiled.
Explore the proposals and tell us which ones you prefer.
Have your say surveys.ecb.europa.eu/10b/ec…
MΞWNS retweeted
1️⃣2️⃣ Fake AMA giveaways:
Some AMA sessions are promoted as completely free: you just need to “pay the community giveaway” or contribute a small amount to participate or claim rewards.
In reality, it’s often the same person logging in from multiple accounts to simulate an active audience and real listeners. They fake the engagement, control the chat, and ultimately pocket the giveaway funds themselves
Even when it looks authentic with people chatting, asking questions and participating, it can all be orchestrated by one scammer using alternate accounts.
MΞWNS retweeted
What We’ve Shipped So Far in June
TokenScan now everywhere on Telegram
Just type @tokenscan, add a space, and paste any token contract. No need to add the bot to the group. Giving 1B+ Telegram users instant access to TokenScan.
New TokenScan Charts
We’ve redesigned our charts to make them faster, cleaner, and easier to read.
Thesis
Share your conviction and see what others are saying on any token with /comment and /thesis.
Image Search
Reply to any image with /ic, and TokenScan will run an image search to find tokens using that image.
Token Lock
Use /lock to tie a specific token contract to your group. Perfect for token communities that only want users querying one specific token inside their group.
We didn’t stop there. We also shipped 30+ QOL improvements.
t.me/tokenscan
