Protect your gecko
You hold a gecko, or you are about to. Read it the day you buy.
What you will get out of this
- What a token approval is, and how to revoke the ones you have
- Hot versus cold, decided once, with a rule you can actually follow
- The scams aimed specifically at this collection
- What to do in the first five minutes if you think you are drained
Approvals, and when to take them back#
An approval is permission for someone else to move one gecko out of one account, not a key to your whole wallet, and Solana clears it by itself once the sale goes through. So revoking is incident response, not housekeeping: you do it after you suspect you signed something bad.
If that is you, work from Phantom's own Revoke token approvals, which names the Solana tool to use. Fake revoke sites are a favourite drainer lure, so check the domain you have landed on before you connect a wallet to anything.
Hot and cold, decided once#
The wallet you connect to sites is not the wallet that holds what you would be upset to lose. Keep a hot wallet with a little SOL for connecting and listing, and keep the geckos you are not actively trading in a hardware wallet that only ever signs at your desk. Moving between two wallets you own costs a network fee and nothing else.
The scams aimed here#
Fake verification is the common one. Real verification asks you to sign a message, which is free and moves nothing. If anything calling itself verification asks you to approve a transaction, close it.
Real support is a ticket you open in #support-tickets in Discord, under Royalty Support, Staking Support, Drain Support. A DM offering help is someone who saw you ask for it.
Accounts and sites claiming to be us are the easiest thing to fake. Reach venues from a link on this site, and check any account against our official links.
Wallets known to be involved in theft of geckos are blocked from parts of this site, to protect holders from trading with them.
The first five minutes if you are drained#
- Sweep what is left to a fresh wallet, on a new seed phrase, before you investigate anything.
- Then revoke approvals on the compromised wallet, though revoking does not undo a leaked key.
- Then open a ticket and read what to do next.
Treat the drained wallet as burnt and never fund it again. team@galacticgeckos.com is for security reports only, not general support.