PANDUAN KEAMANAN DOMPET & WEB3

Keamanan

Lindungi dompet di balik setiap tindakan Atlas

Sistem Atlas menggunakan dompet nir-kustodian. Anda tetap memegang kendali atas dompet Anda, Frasa Pemulihan Rahasia, dan setiap permintaan yang Anda setujui. Panduan ini menunjukkan cara mengenali sumber daya resmi Atlas, memahami permintaan MetaMask, dan memverifikasi hasilnya di *on-chain*.

Dukungan Sistem Atlas tidak memerlukan Frasa Pemulihan Rahasia, kunci pribadi, atau kata sandi MetaMask Anda. Jangan pernah memasukkannya di situs web Atlas dan jangan pernah mengirimkannya melalui obrolan.

Sistem Atlas

Official Atlas security shield

Keamanan dimulai dengan verifikasiGunakan antarmuka resmi, tinjau setiap permintaan dompet, dan verifikasi hasilnya di *on-chain*.
Ulasan dompetBNB Smart ChainPemeriksaan on-chain

Tiga pemeriksaan sekilas

Periksa Referensi resmi Mengapa hal ini penting
Situs web atlas-system.tech Mulailah dari situs web resmi yang terbuka untuk umum dan ikuti tautan-tautan yang ada di sana.
Dasbor Pribadi app.atlas-system.tech Hubungkan dompet hanya setelah memeriksa domain secara lengkap.
Hasil on-chain BscScan Verifikasi secara mandiri status transaksi, alamat, dan transfer token.

1. Cara kerja keamanan Atlas

Keamanan dibagi menjadi empat lapisan. Setiap lapisan menjawab pertanyaan yang berbeda, dan tidak ada satu pun yang menggantikan lapisan lainnya.

Sistem AtlasSistem AtlasMenampilkan adegan tersebut

MetaMaskMetaMaskAnda meninjau dan menyetujui

BNB Smart ChainBNB Smart ChainMengeksekusi dan merekam

BscScanBscScanAnda memverifikasi on-chain

Antarmuka Sistem Atlas

Menampilkan tindakan yang dipilih dan menyiapkan permintaan untuk dompet yang terhubung. Sebelum melanjutkan, pastikan halaman berada di domain resmi Atlas dan nilai yang ditampilkan sesuai dengan yang ingin Anda lakukan.

MetaMask

Menampilkan akun, jaringan, dan permintaan yang memerlukan persetujuan Anda. Dompet ini tidak menjamin keamanan permintaan yang tidak terduga: pengguna tetap harus memeriksa domain, tindakan, alamat, token, dan jumlahnya sebelum menyetujuinya.

BNB Smart Chain

Menjalankan dan mencatat transaksi yang telah diajukan sesuai dengan aturan smart contract. Transaksi blockchain yang telah dikonfirmasi umumnya tidak dapat dibatalkan atau dibalikkan oleh tim dukungan Atlas.

BscScan

Menyediakan pandangan independen dari catatan on-chain: status transaksi, pengirim, interaksi kontrak, transfer token, dan biaya jaringan.

Siapa mengendalikan apa

Atlas dapat menyediakan Atlas tidak bisa
Antarmuka resmi dan tautan Lihat atau pulihkan Frasa Pemulihan Rahasia Anda
Aturan kontrak pintar dan permintaan transaksi Tandatangani permohonan dompet untuk Anda
Referensi transaksi dan kontrak Batalkan transaksi blockchain yang telah dikonfirmasi
Dukungan berdasarkan data transaksi publik Pulihkan aset dari dompet yang disusupi

Koneksi bukan berarti penguasaan. Menghubungkan dompet memungkinkan situs melihat alamat publik yang dipilih dan meminta tindakan. Ini tidak memberikan Frasa Pemulihan Rahasia atau kunci pribadi Anda kepada Atlas. Anda tetap memutuskan apakah akan menandatangani atau mengirimkan setiap permintaan.

Aturan keselamatan peserta

Jangan menyetujui suatu tindakan hanya karena halaman tersebut terlihat familiar. Periksa domain secara lengkap, akun yang terhubung, dan permintaan yang ditampilkan oleh MetaMask. Jika ada hal yang tidak terduga, pilih Tolak atau Batalkan, tutup halaman ini dan kembali ke Atlas melalui situs web resminya.

2. Periksa sumber daya resmi Atlas

Logo yang ditiru, warna yang mirip, atau desain halaman yang meyakinkan tidak menjamin bahwa sebuah situs web itu asli. Cara utama untuk memeriksanya adalah dengan melihat nama domain lengkap di bilah alamat browser.

Titik awal resmi

Buka jejaring sosial, dokumen, dan layanan Atlas lainnya melalui situs web publik resmi jika memungkinkan. Simpan halaman resmi yang sering Anda kunjungi sebagai bookmark di browser.

Baca domain tersebut dari kanan ke kiri

https://aplikasi.atlas-system.tech/

koneksi terenkripsilayanandomain resmi Atlas

Domain resmi harus berakhir persis dengan atlas-system.tech. Di app.atlas-system.tech, kata aplikasi merupakan subdomain dari domain resmi Atlas.

Berhati-hatilah terhadap kata-kata tambahan, huruf yang diganti, tanda hubung yang tidak lazim, dan domain yang atlas-system.tech hanya muncul di awal alamat yang lebih panjang. Ikon koneksi aman menandakan bahwa lalu lintas data dienkripsi; hal ini tidak membuktikan bahwa pemilik situs tersebut adalah Atlas System.

Jalur paling aman menuju Dasbor Pribadi

1Tandai atau ketik
atlas-system.tech
→2Pilih
Dasbor
→3Verifikasi
app.atlas-system.tech
→4Hubungkan
dompet yang tepat

Segera hentikan jika Anda melihat salah satu dari tanda-tanda berikut ini

Berhenti sejenak dan periksa

  • sebuah tautan masuk melalui pesan pribadi yang tidak diminta;
  • Halaman tersebut meminta Frasa Pemulihan Rahasia atau kunci pribadi;
  • domain tersebut mengandung perubahan ejaan atau tambahan akhiran;
  • Halaman tersebut menciptakan kesan mendesak: “verifikasi sekarang”, “buka kunci Klaim”, atau “dompet akan diblokir”;
  • Sebuah permintaan dompet yang tidak terduga langsung muncul begitu halaman dibuka;
  • halaman tersebut meminta Anda untuk memasang ekstensi atau aplikasi dari sumber yang tidak dikenal.

Jika ragu, jangan berinteraksi dengan halaman tersebut. Tutup halaman itu, buka tab peramban baru, lalu masukkan atlas-system.tech secara manual.

3. Lindungi dompet dan perangkat

Keamanan dompet tidak hanya bergantung pada kata sandi MetaMask. Perangkat, peramban, Frasa Pemulihan Rahasia, serta izin yang diberikan kepada kontrak pintar—semuanya memengaruhi keamanan dompet.

✓

Gunakan langkah-langkah pengamanan ini

  • Simpan Frasa Pemulihan Rahasia secara offline di tempat yang hanya bisa Anda akses.
  • Gunakan dompet terpisah untuk aktivitas Web3, alih-alih menggunakan dompet yang menyimpan semua aset.
  • Simpanlah hanya jumlah yang diperlukan untuk tindakan yang telah direncanakan di dompet Web3 yang aktif.
  • Gunakan kata sandi perangkat yang kuat dan kunci MetaMask saat pekerjaan selesai.
  • Pasang pembaruan peramban dan dompet dari sumber resmi.
  • Check the selected account and network before every Atlas action.
  • Log out and lock the wallet after using a shared or public device; avoid such devices whenever possible.
!

Never do this

  • Never enter a Secret Recovery Phrase on an Atlas or other dapp website.
  • Never send a private key, Secret Recovery Phrase or MetaMask password to support.
  • Never store recovery data in an unprotected screenshot, email, messenger or cloud document.
  • Never display the recovery screen during a call or screen-sharing session.
  • Never install a wallet extension from a link in a chat, comment or advertisement.
  • Never approve an unexplained request to “verify”, “synchronise” or “restore” the wallet.

Separate wallet, separate risk

◈Long-term storageAssets not needed for current Web3 actions

≠

◆Atlas Web3 walletOnly the amount needed for planned actions

A separate Web3 wallet reduces the amount exposed to a malicious website or unsafe approval. It does not replace transaction checks: every request must still be reviewed before confirmation.

When you finish

  1. Confirm that the intended action appears in the Personal Dashboard or BscScan.
  2. Close pages that are no longer needed.
  3. Lock MetaMask, especially on a shared device.
  4. Periodically review connected sites and token approvals.

Disconnecting a website removes the active wallet connection. It does not automatically cancel token approvals already recorded on-chain.

4. Understand every MetaMask request

MetaMask can open for several different reasons. Hubungkan, Sign, Approve dan Confirm transaction are not interchangeable: they grant different permissions and have different consequences.

↗HubungkanAccount accessNo gas

The site can see the selected public address and request further actions.

Periksa
Domain and selected account
On-chain
No
✎SignMessage signatureUsually no gas

Creates a cryptographic signature. A signature can still authorise an important action.

Periksa
Domain, message and purpose
On-chain
Not necessarily
◎ApproveToken permissionBNB gas

Lets a contract access a BEP20 token up to the displayed spending cap.

Periksa
Token, cap, network and spender
On-chain
Yes, standard approval
✓Confirm transactionBlockchain operationBNB gas

Submits the displayed smart-contract operation to BNB Smart Chain.

Periksa
Account, action, contract, amount and fee
On-chain
Yes

One Atlas action may require more than one wallet confirmation — for example, a token Approve followed by the Smart Cycle transaction. Treat each MetaMask window as a separate decision and check it independently.

If MetaMask shows a warning

Stop and read the warning. A security alert is a reason to recheck the domain, contract and request; it should not be dismissed simply because the page looks like Atlas. If the reason is unclear, select Tolak and reopen Atlas through the official website.

5. Six checks before Confirm

Use the same short sequence before every transaction-related action. It takes a few seconds and catches the most common mistakes.

01DomainOfficial Atlas page
02AkunExpected wallet
03JaringanBNB Smart Chain
04ActionMatches your click
05Contract & amountRegistry, token and value
06GasExpected BNB fee
Everything matchesKonfirmasiatauSomething is unclearTolak

Never confirm first and investigate later. If one item does not match, select Tolak atau Batalkan, take a screenshot without secret data and verify the action through official Atlas resources.

6. Verify contracts and transactions

The Atlas interface helps you perform an action; BscScan lets you independently inspect the on-chain record. Use the Contract Address Registry as the source of official contract addresses rather than copying an address from a message, comment or search advertisement.

Tx Hash

Atlas operationOpen the operation→Tx HashUnique public ID→BscScanInspect on-chain→Contract RegistryCompare the address
  1. Open the completed or pending operation in the Personal Dashboard.
  2. Salin Tx Hash operasi atau buka tautan terkait.
  3. Confirm that the link opens the official BscScan website.
  4. Compare the interacting contract with the official Atlas Contract Address Registry.
  5. Review the status and token movement.

Five fields that answer most questions

BscScan · Transaction DetailsBNB Smart Chain
Status● Success
Dari0x12…89AB
Berinteraksi dengan (kepada)0xA7…41C2
BEP-20 Tokens TransferredUSDT · amount · direction
Biaya TransaksiBNB network fee
  • Status — Success, Pending or Failed.
  • Dari — the wallet that submitted the transaction.
  • Berinteraksi dengan (kepada) — the smart contract called by the transaction.
  • BEP-20 Tokens Transferred — token, amount and direction recorded during the interaction.
  • Biaya Transaksi — BNB paid to process the transaction on BNB Smart Chain.

Read the status correctly

✓KeberhasilanIncluded and executed
…TertundaWaiting for confirmation
!GagalProses eksekusi tidak selesai
  • Keberhasilan means the transaction was included and executed by the network.
  • Tertunda means the transaction has been submitted but has not yet been included in a confirmed block.
  • Gagal means the requested execution did not complete; a network fee may still have been charged.

A Keberhasilan status confirms blockchain execution. It does not guarantee a future Claim, Delta or Partner Reward. Those outcomes depend on the applicable Smart Cycle or Partner Program rules and, where relevant, available liquidity.

Keep the Tx Hash

A Tx Hash is the public identifier of a blockchain transaction. Save it when reporting a problem: it allows support to inspect the same on-chain record without asking for wallet secrets.

For a full explanation of contract pages, source-code verification and BscScan tabs, use the separate Kontrak & BscScan instruksi.

7. Recognise phishing and fake support

Phishing relies on urgency, imitation and trust. The message may copy Atlas branding or use public information about your wallet; that does not make the sender or website official.

⏱Urgency“Confirm now”
◉Seed phraseSecret requested
?Fake supportUnsolicited contact
↗Extra transferPay to “unlock”
★AirdropUnexpected reward
≠Look-alike domainChanged address

Common warning signs

  • Urgency: “Confirm now”, “your wallet will be blocked” or “Claim expires today”.
  • Wallet secret request: a form or person asks for a Secret Recovery Phrase, private key or MetaMask password.
  • Unsolicited support: an account contacts you first and claims it can fix the wallet or transaction.
  • Extra payment: someone promises to unlock a Claim, recover assets or guarantee a result after another transfer.
  • Unexpected reward: an airdrop, token, NFT, QR code or file asks you to connect and approve access.
  • Imitation: a domain, social account or extension uses Atlas branding with a changed name or address.

The safe response

1Stop→2Do not sign→3Open Atlas manually→4Verify official support
  1. Do not click additional links, scan QR codes or open attached files.
  2. Pilih Reject / Cancel if MetaMask is open.
  3. Close the page and enter atlas-system.tech manually in a new tab.
  4. Use contact links published on the official Atlas website.
  5. If an operation was already submitted, preserve the Tx Hash and check it on BscScan.

A useful rule

Public information can be shared for verification; wallet secrets cannot. A public wallet address and Tx Hash can help investigate an operation. A Secret Recovery Phrase, private key or password gives access and must never be sent to anyone.

A professional-looking message is not evidence. Verify the channel, domain and requested action independently before replying or connecting the wallet.

8. If something may be compromised

Respond according to what actually happened. Rejecting an unexpected popup is different from signing a token approval, and exposing a Secret Recovery Phrase requires a stronger response than disconnecting a website.

Choose the correct risk level

1Request rejectedVerify no action was submitted
2Approval signedInspect and revoke allowance
3Wallet secret exposedTreat the wallet as compromised

An unexpected request appeared, but you rejected it

  • Close the page.
  • Check that no transaction was submitted in MetaMask Activity or BscScan.
  • Disconnect the suspicious site from the wallet.
  • Reopen Atlas by entering atlas-system.tech secara manual.

If nothing was signed or submitted, there may be no on-chain action to reverse. Continue only after verifying the official domain.

You signed an unexplained token approval

  • Stop using the suspicious page.
  • Inspect the approval transaction and spender address on BscScan.
  • Review and revoke the unsafe token allowance through a trusted approval-management tool or block explorer.
  • Remember that revocation is an on-chain transaction and requires BNB gas.
  • Check the wallet for unexpected token transfers.

Disconnecting the site is useful, but it does not revoke an existing on-chain allowance.

A Secret Recovery Phrase or private key was exposed, or unauthorised transactions appeared

Treat the wallet as compromised.

  1. Use a clean device, browser or browser profile to create a new wallet with a new Secret Recovery Phrase.
  2. Securely record the new recovery information offline.
  3. If it is still possible and safe, move remaining assets to the new wallet.
  4. Stop using every account derived from the compromised Secret Recovery Phrase.
  5. Save the old public address, suspicious addresses and Tx Hashes.
  6. Contact official support and, where appropriate, the relevant authorities.

Do not reuse the exposed Secret Recovery Phrase. Resetting a password, reinstalling MetaMask or disconnecting a website does not make exposed wallet keys safe again.

Emergency sequence

1Stop→2Assess→3New wallet→4Move assets→5Record evidence→6Official support

Batasan penting

Atlas and MetaMask support cannot reverse confirmed blockchain transactions or recover a Secret Recovery Phrase. Support can help interpret public records and explain the next safe steps, but it cannot take control of the wallet for you.

If the compromised wallet appears to be drained automatically, do not add more assets merely to pay gas without specialist guidance: automated theft may remove newly added funds immediately.

9. Contact support safely

Start from the Contacts section on atlas-system.tech. Do not trust a support link supplied only in a private message, comment or advertisement.

Information that helps investigate an operation

!

Never share

  • Secret Recovery Phrase / seed phrase;
  • private key;
  • MetaMask password;
  • recovery files or wallet backups;
  • remote access to the device;
  • a signature or transaction requested only to “verify ownership”.

A useful support request

JaringanBNB Smart ChainDompetPublic addressTx HashTransaction IDActionButton or sectionTimeDate and UTCResultExpected vs actual

Write the facts in chronological order. One precise request with a Tx Hash is easier to investigate than several screenshots without context.

Example:

Network: BNB Smart Chain
Wallet: 0x12…89AB
Section: My Support Cycles
Action: Claim
Time: 16 July 2026, approximately 14:30 UTC
Tx Hash: 0x…
Expected: the Claim transaction to appear as completed
Actual: BscScan shows Pending and the Personal Dashboard has not updated

Before sending

✓ Official channel✓ No wallet secrets✓ Tx Hash included✓ Screenshot reviewed

Check every screenshot and copied message for seed phrases, private keys, passwords, full recovery screens and unrelated personal information.

No legitimate investigation requires your Secret Recovery Phrase or private key. If anyone asks for either, end the conversation and return to the official Atlas website manually.

10. Quick security checklists

Use these cards as a final check before an action or whenever something feels unusual.

Before Connect

  • Open Atlas from a bookmark or type the address manually.
  • Check the complete domain.
  • Select the intended wallet account.
  • Never enter wallet secrets on the page.

Before Sign, Approve or Confirm

  • Confirm that you initiated the action.
  • Check the account and BNB Smart Chain.
  • Identify the request type.
  • Check contract, token, cap and amount.
  • Review gas and security warnings.

If something looks suspicious

  • Select Reject or Cancel.
  • Close the page and open Atlas manually.
  • Check MetaMask Activity and BscScan.
  • Save the Tx Hash and use official support.

Three rules to remember

01Verify the domainbefore connecting
02Read every requestbefore approving
03Never share wallet secretswith anyone

Pause before approval. Blockchain actions can be permanent. A few seconds spent checking the domain, account, contract and amount are part of every Atlas action.