Our Classes

Boring Security's NFT Security 101 class is foundational education for wallet security, blockchain education, and crypto scams for everyone in web3. This is the class we believe everyone needs before putting any real money into the web3 and NFT space. Topics include:

Wallets and Seed Phrases

What is a crypto wallet, what is a seed phrase, how to secure and back up a seed phrase. We also cover security solutions like hardware wallets and steel backup solutions. Finally, just how easy it is for scammers to steal seed phrases from software wallets, along with everything inside them.

Operational Security

 Learn about Approvals and Signatures, how to set up your wallet addresses, and what we call "Security Speedbumps". These “speed bumps'' are activities that serve as additional "checks" before you submit a transaction. We recommend using bookmarks, browser extensions, transaction insights, and more.

Scams

We wrap up the course with talking about scammers and their tactics, as well as the most common, prolific, and trending scams. This ranges from IP/Royalty scams, trade scams, airdrop scams, and beyond.

The 101 Class is available in English, Spanish, German, and Portuguese.

Our NFT Security 102 class is for those that want to go deeper into blockchain education to understand transactions, smart contract interactions, and how to view them with Etherscan. We also cover more advanced topics like Wallet Delegation and how exactly it works.

We break down the class as follows:

Etherscan Foundations

The makings of a transaction. How is an Externally Owned Account different from a Contract Address? What is an internal transaction and what is input data? We answer all these questions and more in this section.
 

Etherscan Interactions

We dive deeper into Etherscan, and explain other information that shows up on Etherscan like a project’s social links, verification blue checkmarks, and how they get there. Finally, we discuss proxy contracts, minting directly from a smart contract, and how to tell if you should bookmark a contract or not!
 

Rugs/Hands-on

We do some hands-on activities of what we learned; we talk about rugs, red flags, and what scam contracts are capable of.
 

Wallet Delegation

We wrap up the class by discussing Wallet Delegation; what is it, how does it keep your funds secure when minting new NFTs, and how and when to delegate.

The Boring Security Social Media Security class focuses more on helping others: how can you protect your social media from scammers who want to use your account to scam your followers and friends. We break the class up as follows:

Twitter/X account protection

We cover tools scammers use like bots, hacked and fake accounts, and phishing. Then we’ll discuss settings you can change to have a better, more secure experience on Twitter, for you and your followers.
 

Discord protection

We talk about the issue of Discord’s token architecture; how the Bookmark scam, the oAuth scam, and other token stealing scams surface, why they work, and most importantly, how to protect yourself from them.
 

Other Scams

We round out the course with a handful of other Social Media scams. Awareness of the feature patterns across different frauds will help you recognize the new forms scams will take later on; find the features to spot the scams.

In partnership with Intelligence On-Chain, our Basics of Sleuthing class will deepen your understanding of how blockchains work. You will learn blockchain detective tools and techniques to become a white hat “Sleuther”, and catch criminals on the blockchain. The course outline is as follows:

Who/What/Why of Sleuthing

We begin by answering questions like: What is Sleuthing, why do people Sleuth, and who pays for Sleuthing work. 
 

Goals and Tools of Sleuthing

What are the general goals of Sleuthing and what are the tools and techniques that Sleuthers use to find the information they need? Tools include Metadock, Metasleuth, Arkham, Breadcrumbs, and more.
 

Obfuscation Techniques

This is all about untangling all the methods anons and criminals use to hide their tracks and make Sleuthing difficult. We discuss buffer wallets, Bridges, Tornado Cash, Exchanges, and the myriad ways scammers use these tools to avoid detection and persecution.
 

Connecting the Dots

How do we put all these pieces together? How do we overcome the numerous layers of obfuscation employed by scammers? We put all this together with some live examples, and a hands-on exercise to do together!

Our Solana Security Class goes into detail about the technical architecture that makes Solana what it is today. You will learn about its unique qualities, tools, scams, and more. The course breaks into thee sections:

Understanding the Chain

We break down the uniqueness of Solana, comparing some aspects to the "traditional" EVM architecture. As we explore how transactions are processed, we take a look on-chain via Solscan and break down token swaps, accounts, and more. We'll also take a look at Solana tooling - including Blinks & Actions, Rugcheck, and others. 

Getting & Staying on Solana Safely

For our students who haven't yet onboarded onto Solana, this seciton breaks down wallet offerings & onramps, including bridges. We also cover the importance of transaction simulation, seed phrase security, and how staking can help improve & secure the network.
 

Scams & Tools

In this section we go over scam techniques and methodologies unique to the Solana chain. Students will gain an understanding of the attack vectors of SPL tokens, usage of cNFTs for phishing spam, and social media attacks like Telegram compomises to steal trading bot private keys. Lastly students are shown a variety of secuity tools for use in day to day on-chain activity including the Famous Fox Federation token approval tool, Solsniffer, and Webacy's new offerings.

This module introduces learners to the foundational concepts that drive decentralized finance (DeFi).

Protocols & Primitives – the building blocks of DeFi

DeFi is powered by a set of core “primitives”, simple, composable financial actions like lending, swapping, staking, and issuing tokens. These primitives form the foundation for more complex applications. Protocols like Uniswap, Aave, MakerDAO, and Curve use these primitives to deliver decentralized alternatives to banks, exchanges, and lending platforms. Understanding these fundamentals helps users grasp how DeFi apps interact with each other and why interoperability is a key strength of Web3.

Abstraction & MEV – what they are and why they matter

Abstraction simplifies blockchain interactions by hiding technical details (such as gas, signatures, and networks) to create a smoother user experience. Meanwhile, MEV (Maximal Extractable Value) represents the profits that validators or bots can extract by reordering, inserting, or censoring transactions. Knowing how abstraction improves usability and how MEV affects transaction fairness and cost helps users understand the trade-offs in modern blockchain infrastructure.

Navigating DeFi Safely – best practices for everyday use

Using DeFi requires a proactive security approach. This section covers essential habits like verifying contract addresses, double-checking transaction approvals, using hardware wallets, and interacting only with trusted protocols. Learners will also understand how to read blockchain explorers, interpret risk dashboards, and avoid common missteps. These best practices form the foundation of safe, responsible on-chain participation.

Risks & Scams – how to identify and avoid common pitfalls

DeFi offers incredible opportunities, but it also attracts bad actors and technical vulnerabilities. This section breaks down common risks, including rug pulls, phishing attacks, compromised front-ends, fake tokens, smart contract exploits, and social engineering tactics. By learning how these scams operate and what red flags to look for, users can better protect their funds and avoid becoming victims of fraudulent schemes.