Although we expected that as we continue to advance, there will be a way to curb these attacks, but unfortunately, it has become even worse. This is why steps need to be taken to ensure that's these bad people don't gain access into a person's crypto wallets. Below, I will be listing out some ways that could help prevent your metamask wallet from getting attacked:
1. Be mindful of the sites you login in to using your Metamask wallet:
You must realize that although some sites may look legit and all professional, it may be owned by scammers. These sites (also know as phishing sites) are aimed at stealing your personal informations that can be used to hack you. So, by just clicking on the link of these phishing sites, you have exposed your sensitive information such as username, password and so forth.
To ensure you don't fall victim to this, you have to verify these sites first. Any site that makes exaggerated promises or assures a profitable return, beware of it. Some many persons have falling victims of such sites.
Another thing to watch out for, is for errors in a site. These scammers sometimes go so far as creating a copy of a legit site. If you don't pay attention, or not familiar with the original site, you may likely fall victim to scam. By paying closer attention, you will notice that these sites have very little spelling errors in them.
If the platform operates by an app, you should verify which of the app is legit from the platforms website. I remember when I was first introduced to deriv, I know a friend of mine uses the deriv app, so I decided to download the app, as I felt it was more easier to use than the site. I saw in Google play store, deriv on 80mb, so I downloaded it. I was yet to fund the account, luckily I showed it to my friend who quickly uninstalled that one, went to the derived platform downloaded the correct one with less than 17mb and then he created a new account for me. He told me how lucky I was. Turned out that these scammers go as far as creating fake apps too, so we all have to pay attention to these small details so that we can spot out the difference.
2. Don't share your recovery phrase with anyone:
Although we all know these, but I think it can't be over emphasized. Your recovery phrase is the main security of your wallet. If you lose it, or it comes into a scammers possession, I don't think you can really do anything more to recover your account. Your recovery phrase is like your accounts Master Password, and no legit site, including the metamask customer service can ask you to provide them with your security phrase. Any site that does is a malicious one. Be careful to make sure you keep your recovery phrase safe, known only by you.
3. Log Out from your Metamask when you are not using them. Also install safety softwares in your device as a precautionary measure:
When you know you may likely not use your Metamask wallet within the week, it is best to log out from it. This is to ensure that no one has access to your account without your authorization. It's also best to make use of your own data connection when login into your wallet, to avoid being spied on.
In addition to the measure above, you should install antivirus legit antivirus softwares with verifiable protection softwares. This will help protect your gadget from any cyber attacks. Some of the antivirus you can use includes: McAfee, Avast, Bitdefender, Kaspersky, Norton, ESET, Webroot, Trend Micro, Malwarebytes, and so on.
4. Revoke access to spending:
Sometimes, we may, by clicking on these scam links Grant access to an unwanted smart contract, or even unwanted token in your wallet. If you notice this, and the contract is on BSC network, you can easily stop them from spending your funds anymore by going to this web address: https://allowance.beefy.finance.
When you visit the site, link it with your web address, and it will show you the list of smart contract that you have given access to. To stop them from spending your funds anymore just click on "revoke all". Note that you will be required to pay a transaction fee from your metamask wallet to be able to carry out this transaction.
5. Don't put all your cryptocurrencies in one wallet:
An adage says "Do not put all your eggs in one basket". This adage is so true. It is safer to your distribute your crypto assets into several wallets than to keep them all in one wallet.
If you have all you assets in a wallet and something happens to that wallet, you may likely lose everything you have. On the other hand, if you have some of your assets in a different wallet, and probably on the wallets gets attacked, your loss will be minimal.
In summary, be smart, don't jump into every airdrop promotion or click on every link you see online. It is even wise to have different wallets for different purposes. One can be for trading, one for holding and another in participating in airdrop events. This way you can be more secured, and even if you are attacked, you will find it very easy to trace the origin of the attack.