Security Checklist for New DEX Traders

BeginnerOct 28, 2026 · 6 min read

Run one reusable checklist before, during, and after a small DEX session. If a required box fails, stop sizing — fix the box, then return.

Goal

Run one reusable checklist before, during, and after a small DEX session.

If a required box fails, stop sizing — fix the box, then return.

On a wallet-first venue, the last control point is your signing prompt — usually with no “undo desk” for a bad Confirm. This page is the check sheet: short rows you re-run every session, with a hard stop when something is unclear.

How to back up a seed, how to verify official links, and how a DEX trade works live on their own pages (linked below).

Before You Start

When to use it

Use the same sheet whenever signing risk is real — not only on day one:

First time on a new wallet-first venue
Start of a trading session with size that would hurt if signed wrong
After a wallet update, new network, or new market type
After any scare (phishing banner, odd allowance, support DM) before you put size back on

Skipping the sheet because “I already know this venue” lets stale bookmarks and leftover approvals through.

What you need

Your self-custody wallet unlocked on a device you control.
The venue opened from a path you already trust (bookmark or typed official address).
A learning float you can lose while building the habit — plus gas on the network you will use.
Enough calm to reject a prompt you cannot explain in one plain sentence.

Readiness narrative: DEX Basics for Complete Beginners. This sheet only asks whether today’s session is safe to size.

Steps

1. Before you connect

Do these rows before Connect. A false required row means no connect and no size.

#	Check	Why it matters / stop if	If unclear, open
B1	Offline seed backup exists and you know where it is	Without a recoverable backup, a lost device can end the account. Stop if you cannot find the offline copy or feel tempted to “verify” words on a site.	How to Protect and Back Up a Seed Phrase
B2	You are on the bookmarked / official entry — not a search ad or DM link	HTTPS / padlock ≠ identity. Lookalike domains and ads remain a primary loss path. Stop if the tab came from search, chat, email, or an urgent “verify wallet” message.	How to Verify Official Links and Avoid Phishing
B3	You can name the network your funds and gas sit on	Wrong-network actions waste fees or strand funds. Stop if you cannot say which chain this session uses.	What Is Gas Fee?
B4	Gas buffer + learning-size float are separate from money you cannot missign	Self-custody mistakes are often irreversible from your seat. Stop if today’s hot balance includes vault money.	DEX Basics for Complete Beginners
B5	First market is deep and familiar — not an unverified new ticker	Presence in a wallet ≠ legitimacy. Stop if you cannot name the asset and why it is on your list.	What Is Liquidity? · What Is Slippage?
B6	Device screen lock is on; wallet app is from an official install path	Fake extensions and unlocked phones turn one bad click into a drain. Stop if the install path is unknown or the device is shared/unlocked.	How to Verify Official Links and Avoid Phishing
B7	Only the trading float is hot this session (optional for tiny drills)	Larger balances need stronger posture. Stop upsizing if vault funds sit in the same hot wallet you will connect.	What Is Self-Custody?

2. During connect / approve / trade

Treat every wallet popup as a new decision. Connect, approve, and trade are different asks — do not Confirm just to continue.

#	Check	Why it matters / stop if	If unclear, open
D1	Address bar domain still matches your verified entry	Domains can change after a redirect. Stop if the name drifted, a phishing banner appeared, or you feel urgency to override a warning.	How to Verify Official Links and Avoid Phishing
D2	You know which ask this is: Connect ≠ Approve ≠ Trade/Sign	Connect shares an address; approve grants spend permission; trade/sign moves value. Stop if you cannot label the prompt type.	What Is Token Approval? · What Is a DEX and How It Works
D3	Wallet preview: network, asset, amount, and spender/contract match your intent	The preview is the last control point. Compare full addresses when shown — not only prefix/suffix. Stop if any field is unexpected.	What Is Token Approval?
D4	You did not type a seed, private key, or backup words into the site or a chat	No legitimate venue or support needs your seed. Stop immediately if anything asks for recovery words, remote access, or paste-to-verify.	How to Protect and Back Up a Seed Phrase
D5	Unlimited or unexpected allowances are rejected or narrowed when your wallet allows	Unlimited spend maximizes blast radius if a spender turns malicious later. Stop if the allowance is wider than this session needs.	What Is Token Approval?
D6	Fee magnitude and prompt text look sane for this network/action	Extreme fees or vague Sign-message wording can hide danger — including gasless-looking signatures. Stop if you cannot explain the ask in one plain sentence.	What Is Gas Fee?
D7	You are not signing because of FOMO, a countdown, or a stranger’s pressure	Artificial urgency is a scam feature, not a market feature. Stop if panic is the only reason to Confirm now.	—

3. After the session

Closing the tab ends the browser connection. It does not cancel on-chain token approvals — review leftovers before you walk away.

#	Check	Why it matters / stop if	If unclear, open
A1	You finished or cancelled the intended action; no surprise follow-up prompts left open	Stray Confirm windows are easy to hit later. Stop browsing until extras are rejected or completed on purpose.	—
A2	You know that disconnecting a site does not revoke on-chain token approvals	Disconnect only ends the live connection. Spend permission can remain until you revoke it on that network.	What Is Token Approval?
A3	New or wide approvals from this session are noted for later revoke if you will not reuse them	Stale allowances stay active indefinitely. Check each network you touched — one chain is not all chains.	What Is Token Approval?
A4	Venue bookmark still points at the same official domain you verified	Bookmarks drift when updated from a bad tab. Stop and re-verify before the next session if the saved URL changed.	How to Verify Official Links and Avoid Phishing
A5	Nothing odd needs a short note (unknown prompt, failed revoke, unexpected transfer)	Thin notes make the next session safer. Do not blindly top up gas on a possibly drained wallet — that can feed a sweeper.	What Is Smart Contract Risk?

Wallet-first venues such as edgeX use the same sheet: official entry, readable prompts, tiny first size.

Check Before You Confirm

[ ] Every Before row you need for this session is true
[ ] Every During row for this signature is true
[ ] You can say in one sentence what Confirm will do
[ ] You will run After before you walk away

Stop rule: any required false → no size and no Confirm. Fix the box, re-open from a trusted entry if needed, then restart. Stranger urgency never overrides a failed box.

If Something Looks Wrong

Match the failure. Do not improvise a send-gas-and-hope fix.

What failed	First move
Backup row fails	Stop trading. Complete How to Protect and Back Up a Seed Phrase first.
Official-entry row fails	Close the tab. Re-open from bookmark only. Ignore DMs and search ads.
Phishing banner / unknown domain	Disconnect and close. Do not override “to continue.”
Prompt / allowance unclear	Reject. Re-read Token Approval / How It Works. Resume only when you can label the ask.
Seed or key requested on site or in DM	Close immediately. Do not type. Do not share screen control.
You already approved something suspect	Stop signing. Review allowances on networks used; revoke via a trusted route when you can.
Seed or private key may be exposed	Stop using that wallet for size. Move to a new wallet + new recovery material on a clean device.
Wrong network, wrong asset, or wild fee in preview	Reject. Fix network/asset, then restart the checklist.
Unknown outbound transfer already happened	Record the tx hash if you can. Do not blind top-up gas. Pause and use a dedicated incident walkthrough if funds are already moving.

This sheet only tells you when to stop and which topic page to open next.

Ready for the next step?

Continue to registration or trading from this page using the official links.

Start trading on edgeX

Disclaimer

This content is for educational purposes only and does not constitute investment advice. Trading digital assets and derivatives involves risk. Make sure you understand the products and consider your own circumstances before trading.