Verify before you connect or sign

Verify WStaking before connecting

Before connecting a wallet, confirm the browser domain is wstaking.net, the page was opened directly or from the Official Links page, the selected blockchain network is supported, and the full contract address matches the Contract Registry. Confirm the token contract, symbol, and wallet address. The page should never ask for a seed phrase, recovery phrase, private key, or wallet password.

Common impersonation and phishing risks

• Copied or lookalike domains that imitate the official WStaking website.
• Fake support accounts or direct messages pretending to represent WStaking.
• Unofficial preview links or mirror pages shared outside the official site.
• Copied contract addresses taken from chats, screenshots, or forwarded messages without checking the official registry.
• Fake staking pages designed to copy the WStaking interface or wallet flow.
• Misleading wallet approval prompts that do not match the action the user intended to take.
• Wallet-drain approval requests, including unexpected unlimited token approvals.

Check the wallet request before signing

Do not confirm a wallet request until it matches your intended action. Check the network, full destination or spender address, requested function, token contract, amount, native-token value, approval amount, gas fee, and wallet warnings. For a token approval, confirm the spender and whether the allowance is limited. Read any message before signing; a signature may authorize an application action even when it is not a blockchain transaction.

Action-specific checks

• Before staking: confirm the network, full staking-contract address, token, deposit amount, APR, duration, lock period, early-unstaking rules, and whether a separate approval is required.
• Before claiming rewards: confirm the selected position and wallet, review the displayed claim amount, and check the required transaction or operational condition and network fee.
• Before adding funds: confirm the existing position and additional amount, then review effects on start time, duration, APR, lock period, and rewards; check whether another approval is required.
• Before renewing: review the new duration, APR, start time, lock conditions, and requested contract function.
• Before partial unstaking: confirm the amount removed, remaining position, reward effect, penalty or waiting period, and that the position will not close unless intended.
• Before full unstaking: confirm the selected position, reward and early-unstaking effects, and whether the action starts an unlock period before a later wallet-signed unstake transaction.

Support and communication safety

Use support and social links listed on the Official Links page. Account names, profile images, copied posts, and group membership can be impersonated. WStaking support should never request wallet credentials, remote device access, recovery payments, an unknown-wallet transfer, or a connection through an unofficial domain.

The current support address is service@wstaking.net. For transaction support, provide only a public wallet address, network, contract address, and transaction hash; never provide wallet credentials.

Red flags

• Urgent direct messages asking you to act immediately.
• Requests to send funds first outside the official staking flow.
• Requests to sync, validate, or restore your wallet manually.
• Requests for your seed phrase or private key.
• Unofficial staking mirror sites or copied interfaces.
• Wallet prompts that do not match the intended action.
• Links from unknown accounts, sponsored links, or copied links that bypass the official site.

What to do if you are unsure

• Do not sign or transfer funds.
• Close the page and open https://www.wstaking.net directly.
• Verify the network and full contract address, then compare the requested action with the relevant documentation.
• Review the wallet simulation and warnings, Security page, and Risk Disclosure page.
• Contact support through the details shown on the WStaking website.
• After a suspicious interaction, disconnect the site, review and revoke unnecessary approvals, and check recent transactions and signatures.
• Save the domain, wallet address, spender address, transaction hash, message, and screenshots; report the incident through support or Responsible Disclosure.
• If a seed phrase or private key was exposed, treat the wallet as compromised. Revoking approvals does not protect exposed credentials; a new wallet may be necessary.
• A small transaction can limit the amount exposed, but it does not prove that a contract, website, or later transaction is safe.

Related information