My Web3 Onboarding Capstone Walkthrough Just finished the free Web3 Onboarding pathway at @RavenNetworkHQ. It wasn’t “watch a few videos and call it a day.” It was structured modules, quizzes, practical tasks, and actual hands-on practice. Here’s my honest walkthrough of what the journey looked like and what stuck. Raven Academy’s free onboarding path is designed as the entry point into their contributor ecosystem. You learn the basics, prove you did the work, and build a public Nest/profile with reputation tracking. From there you can move into the paid Creator or Builder pathways if you want deeper skills and verified credentials. Early modules focused on the non-negotiables: How wallets actually work (custodial vs non-custodial) Seed phrases, private keys, and why “not your keys, not your crypto” is real Basic security habits so you don’t lose everything to a random DM or fake site I treated these seriously. One careless click in Web3 can wipe you out. Then we moved into multi-chain basics. Not just “what is blockchain,” but looking at different ecosystems (TON, Ethereum, Solana, Base, etc.) and why they exist. The goal wasn’t to become an expert overnight. It was to stop treating every chain as the same thing and understand the trade-offs. Practical side (the part that mattered most to me): Setting up a proper wallet Getting testnet tokens Sending test transactions Doing simple DEX swaps on testnets These modules force you to actually click the buttons instead of just reading about them. That changes how you understand gas, approvals, and explorers. Security kept coming back. Simple rules that still catch people: • Never share your seed phrase • Verify links before connecting a wallet • Don’t sign random transactions • Revoke old approvals •Ignore “support” DMs offering free airdrops I already knew some of this from past experience, but seeing it framed clearly inside the course still helped. Reputation and credentials are a big part of Raven’s model. They talk about streaks, XP, Soulbound tokens, and building a public Nest that shows what you’ve actually done. The idea is that learning turns into visible contribution instead of just another certificate sitting in a folder. What I liked: It felt structured. You know what the next module is. The free path is genuinely free. There’s a clear path from “I just joined” to “I have a profile and some proof of work.” What still requires effort: Consistency. The modules won’t make me a builder or researcher by themselves. I'll still have to publish, practice, and show up. My personal takeaway after going through the onboarding: Web3 is still noisy. Most people get overwhelmed by scattered YouTube videos, Telegram groups, and hype. Having a clear sequence (wallets, security, chains and practical tasks) makes the early stage less chaotic. I’m going to keep using what I learned to write clearer threads and researching projects properly. If you’re starting out and want a structured free path instead of random content, the Raven Web3 Onboarding is worth checking. I submitted this thread as my capstone walkthrough. Still learning. Still building. Still curious. $Shalom 🕊

You get a DM from a recruiter offering you a $120k remote job to help build or test a new Web3 game. They send you a GitHub link or a small ZIP file containing a "coding test" or a "beta build" of the game to review. Within minutes of running it on your Windows PC, your crypto wallets are drained, your browser cookies are gone, and your system is completely compromised. Here is how the "Contagious Interview" scam turns your career hustle into a security nightmare: 👇 1. The Corporate Actor This isn't a basic phishing email with bad grammar. These hackers spend weeks setting up incredibly realistic profiles on LinkedIn or X. They chat with you like human recruiters, talk about salary, and even schedule fake technical interviews. Once they build deep trust, they send the lethal trap: a file or repository they ask you to download and run locally on your PC to showcase your skills or review the game. 2. The Trojan Horse: Node.js & Python Payloads The "coding test" isn’t just broken software—it’s an advanced Remote Access Trojan (RAT). Major active campaigns use modular backdoors like OtterCookie or Invisible Ferret. The moment you trust the repository or open the file on your Windows desktop, these Trojans execute silently in the background. They act as a silent bridge, giving a hacker thousands of miles away total, administrative access to your entire operating system. 3. Bypassing Windows Firewalls How do they slip past Windows Defender? They use a trick called EtherHiding or abuse legitimate Windows system files (like MSBuild). 4. Advanced variants like RenPy Loader or Meeten bundle their malicious scripts inside normal, everyday dependencies (like npm or Python packages) or run them through fake video conferencing apps. Your PC thinks it's just compiling a normal piece of code, but the Trojan is actively cloning your MetaMask browser data, harvesting your 1Password vaults, and taking silent screenshots. How to protect your laptop this week: 1️⃣ Never run untrusted code raw: If a recruiter sends you a project file, never execute it directly on your main host machine. 2️⃣ Use a sandbox or VM: Run any testing software or repository inside an isolated Virtual Machine (VM) or a dedicated sandbox environment. 3️⃣ Audit the company: Call or look up the official company website independently. Don't rely solely on the person who cold-messaged you. Landing a great role in Web3 should elevate your life, not cost you your entire digital identity. Hackers are turning our collective hunger for new opportunities into our greatest vulnerability. Stay smart, stay guarded, and never let your eagerness to build blind you to what you're executing. $SHALOM 🕊️

Unfair😔

Did you know that on Windows PCs, hackers have figured out a way to completely bypass the password and the 2FA prompt altogether through a devastating technique called Session Hijacking (or Cookie Stealing)? Yes, you have a strong password. You have 2FA turned on via your phone. You feel 100% safe. But what if I told you a hacker could log into your Binance, Twitter, or Discord account right now without ever needing your password or your 2FA code? It’s quite common among Windows users. Here is the terrifying truth about "Session Hijacking" and how to stop it tonight: 👇 1. The "Remember Me" Cookie When you log into an app and click "Keep me logged in," your browser saves a tiny piece of data called a Session Cookie. This cookie acts like a digital VIP pass. It tells the website: "Hey, this person already entered their password and 2FA code earlier, just let them in without asking again." As long as that cookie is alive, you stay logged in. 2. The Silent Theft If a hacker slips a piece of Infostealer malware onto your Windows PC—often disguised as a free game, a cracked PDF reader, or a sketchy browser extension—they don't care about your keyboard logs. They go straight for your browser's database. They copy your active session cookies, package them into a tiny file, and beam them straight back to their server. 3. Bypassing the Fortress Once the hacker has your cookie file, they import it into their own browser. They refresh the page, and boom! They are instantly inside your account. Because the website thinks it’s still your active session, it never asks them for a password. It never triggers your Google Authenticator. Your 2FA is rendered completely useless. 4. How to kill this threat TONIGHT: 1️⃣ Clear your cookies regularly: Go to your browser settings and clear active sessions for sensitive sites. It forces the cookie to expire. 2️⃣ Log out completely: When you're done trading or using an exchange, don't just close the tab. Click "Log Out." This instantly deletes the cookie from your database. 3️⃣ Nuke sketchy extensions: Audit your browser extensions right now. If you don't absolutely need it, delete it. 2FA is a fantastic shield, but it cannot protect you if a hacker steals the keys to your front door while you're already inside the house. Security isn't a "set it and forget it" tool, it's a daily habit. Go to your settings and clear your browser cache before you go to sleep tonight. Your wallets will thank you tomorrow..... Probably 🙃 $SHALOM 🕊️