Before you start
Have the destination, correct network and enough fee asset ready, and make sure you can independently verify each request. Keep important recovery material offline; a website should never ask for your seed phrase or private key.
- 01
Confirm the goal and network
Define what you are trying to do, then verify the address source, selected chain and fee asset.
- 02
Review the request
Check the token, value, contract, allowance or signature details rather than trusting a logo or ticker.
- 03
Approve intentionally
Confirm only after you understand the request. Avoid unexpected pop-ups, empty links or instructions from impersonated support.
- 04
Keep a verifiable reference
Save the transaction hash, destination and network so you can inspect the result on an explorer.
- 05
Review the final state
Check the resulting balance or permissions and consider revoking access you no longer use.
Verify the source before connecting
A useful way to understand connect to and disconnect from dapps is to separate what an interface shows from what the chain records. Domain checks tells you which context you are operating in, while connection requests shapes where the request will be executed. Message signatures can then help you verify the outcome. Do not rely on logos, ticker symbols or familiar colors alone; similar labels may refer to different networks, contracts or permissions.
Many apparent failures are really context mismatches: the wrong network, an unverified address, a similar-looking token contract, a transaction still waiting for confirmations, or an approval that remains active after a session. Avoid resubmitting requests blindly. Record the network, address, amount and transaction hash, then inspect message signatures, transaction signatures and token approvals in a structured order.
Understand each request
In practice, connection requests rarely stands alone. It can change message signatures, transaction signatures, the fee asset, the explorer you should use and how long a transaction takes to settle. A dependable routine is to confirm the goal first, verify the network second, review the request details third, and keep a transaction or approval reference afterward. That gives you something objective to inspect when an interface is slow to refresh.
Security is part of the workflow, not a separate final step. imtoken will never ask for a seed phrase, private key or verification code. Before transferring, signing or approving, review the initiator, destination, network and permission scope. Third-party DApps, bridges and contracts carry their own risks, so a successful connection does not mean every subsequent request should be accepted.
- Verify the connection scope
- Confirm the signature details
- Keep a reference you can verify later
Signatures, approvals and transactions
Many apparent failures are really context mismatches: the wrong network, an unverified address, a similar-looking token contract, a transaction still waiting for confirmations, or an approval that remains active after a session. Avoid resubmitting requests blindly. Record the network, address, amount and transaction hash, then inspect message signatures, transaction signatures and token approvals in a structured order.
Long-term habits matter more than memorizing where a button sits. Before an action, verify token approvals and the intended outcome. During the action, review contract calls and the request details. Afterward, use domain checks, a transaction hash or an explorer to confirm what changed. Periodically review old connections and approvals, and keep important recovery material offline rather than in screenshots, chats or shared devices.
Risk in contract interactions
Security is part of the workflow, not a separate final step. imtoken will never ask for a seed phrase, private key or verification code. Before transferring, signing or approving, review the initiator, destination, network and permission scope. Third-party DApps, bridges and contracts carry their own risks, so a successful connection does not mean every subsequent request should be accepted.
When something is unclear, prefer verifiable data. Chain IDs, contract addresses, transaction hashes and explorer records are stronger evidence than screenshots or second-hand descriptions. If a balance looks wrong, confirm whether the on-chain transaction completed before assuming assets are missing. If a message, airdrop, support account or download link asks for recovery secrets, treat that request as unsafe.
Review permissions after use
Long-term habits matter more than memorizing where a button sits. Before an action, verify token approvals and the intended outcome. During the action, review contract calls and the request details. Afterward, use domain checks, a transaction hash or an explorer to confirm what changed. Periodically review old connections and approvals, and keep important recovery material offline rather than in screenshots, chats or shared devices.
A useful way to understand connect to and disconnect from dapps is to separate what an interface shows from what the chain records. Domain checks tells you which context you are operating in, while connection requests shapes where the request will be executed. Message signatures can then help you verify the outcome. Do not rely on logos, ticker symbols or familiar colors alone; similar labels may refer to different networks, contracts or permissions.
- Verify the approval allowance
- Confirm the contract address
- Keep a reference you can verify later
Handling unfamiliar requests
When something is unclear, prefer verifiable data. Chain IDs, contract addresses, transaction hashes and explorer records are stronger evidence than screenshots or second-hand descriptions. If a balance looks wrong, confirm whether the on-chain transaction completed before assuming assets are missing. If a message, airdrop, support account or download link asks for recovery secrets, treat that request as unsafe.
In practice, connection requests rarely stands alone. It can change message signatures, transaction signatures, the fee asset, the explorer you should use and how long a transaction takes to settle. A dependable routine is to confirm the goal first, verify the network second, review the request details third, and keep a transaction or approval reference afterward. That gives you something objective to inspect when an interface is slow to refresh.
Review checklist
- Never send a seed phrase, private key or verification code to anyone
- Verify the address, network, token and amount before a transfer
- Review the requester and permission scope before signing or approving
- Revisit old DApp connections and approvals
- Use transaction hashes and explorers when troubleshooting
