WALLET & WEB3 SAFETY GUIDE

Keselamatan

Protect the wallet behind every Atlas action

Atlas System uses a non-custodial wallet. You remain in control of the wallet, its Secret Recovery Phrase and every request you approve. This guide shows how to recognise official Atlas resources, understand a MetaMask request and verify the result on-chain.

Atlas System support does not need your Secret Recovery Phrase, private key or MetaMask password. Never enter them on an Atlas website and never send them in a chat.

Sistem Atlas

Official Atlas security shield

Security starts with verificationUse the official interface, review every wallet request and verify the result on-chain.
Wallet reviewBNB Smart ChainOn-chain check

Three checks at a glance

Semak Official reference Mengapa ia penting
Website atlas-system.tech Start from the official public website and follow its links.
Papan Pemuka Peribadi app.atlas-system.tech Connect the wallet only after checking the complete domain.
On-chain result BscScan Independently verify the transaction status, addresses and token transfers.

1. How Atlas security works

Security is shared across four layers. Each layer answers a different question, and none of them replaces the others.

Sistem AtlasSistem AtlasShows the action

MetaMaskMetaMaskYou review and approve

BNB Smart ChainBNB Smart ChainExecutes and records

BscScanBscScanYou verify on-chain

Atlas System interface

Shows the selected action and prepares the request for the connected wallet. Before proceeding, confirm that the page is on the official Atlas domain and that the values shown match what you intend to do.

MetaMask

Shows the account, network and request that require your approval. The wallet does not make an unexpected request safe: the participant must still review the domain, action, address, token and amount before approving it.

BNB Smart Chain

Executes and records a submitted transaction according to the smart-contract rules. A confirmed blockchain transaction generally cannot be cancelled or reversed by Atlas support.

BscScan

Provides an independent view of the on-chain record: transaction status, sender, contract interaction, token transfers and network fee.

Who controls what

Atlas can provide Atlas cannot do
The official interface and links View or recover your Secret Recovery Phrase
Smart-contract rules and transaction requests Sign a wallet request for you
Transaction and contract references Reverse a confirmed blockchain transaction
Support based on public transaction data Restore assets from a compromised wallet

Connection is not custody. Connecting a wallet lets the site see the selected public address and request actions. It does not give Atlas your Secret Recovery Phrase or private key. You still decide whether to sign or submit each request.

The participant's safety rule

Do not approve an action simply because the page looks familiar. Check the full domain, the connected account and the request shown by MetaMask. If anything is unexpected, select Reject atau Cancel, close the page and return to Atlas through the official website.

2. Check official Atlas resources

A copied logo, familiar colours or a convincing page design do not prove that a website is genuine. The complete domain in the browser address bar is the primary check.

Official starting points

Open social networks, documents and other Atlas services through the official public website whenever possible. Save frequently used official pages as browser bookmarks.

Read the domain from right to left

https://app.atlas-system.tech/

encrypted connectionserviceofficial Atlas domain

The official domain must end exactly with atlas-system.tech. In app.atlas-system.tech, the word app is a subdomain of the official Atlas domain.

Be careful with extra words, replaced letters, unusual hyphens and domains where atlas-system.tech appears only at the beginning of a longer address. A secure connection icon means that traffic is encrypted; it does not prove that the owner of the site is Atlas System.

The safest route to the Personal Dashboard

1Bookmark or type
atlas-system.tech
→2Select
Papan Pemuka
→3Sahkan
app.atlas-system.tech
→4Menyambung
the correct wallet

Stop if you see any of these signs

Stop and check

  • a link arrived in an unsolicited private message;
  • the page asks for a Secret Recovery Phrase or private key;
  • the domain contains a spelling change or extra ending;
  • the page creates urgency: “verify now”, “unlock Claim” or “wallet will be blocked”;
  • an unexpected wallet request appears immediately after opening the page;
  • the page asks you to install an extension or application from an unknown source.

If in doubt, do not interact with the page. Close it, open a new browser tab and enter atlas-system.tech manually.

3. Protect the wallet and device

Wallet security is not limited to the MetaMask password. The device, browser, Secret Recovery Phrase and approvals granted to smart contracts all affect the safety of the wallet.

✓

Use these safeguards

  • Keep the Secret Recovery Phrase offline in a place only you can access.
  • Use a separate wallet for Web3 activity instead of exposing a wallet that stores all assets.
  • Keep only the amount needed for planned actions in the active Web3 wallet.
  • Use a strong device password and lock MetaMask when work is finished.
  • Install browser and wallet updates from official sources.
  • Check the selected account and network before every Atlas action.
  • Log out and lock the wallet after using a shared or public device; avoid such devices whenever possible.
!

Never do this

  • Never enter a Secret Recovery Phrase on an Atlas or other dapp website.
  • Never send a private key, Secret Recovery Phrase or MetaMask password to support.
  • Never store recovery data in an unprotected screenshot, email, messenger or cloud document.
  • Never display the recovery screen during a call or screen-sharing session.
  • Never install a wallet extension from a link in a chat, comment or advertisement.
  • Never approve an unexplained request to “verify”, “synchronise” or “restore” the wallet.

Separate wallet, separate risk

◈Long-term storageAssets not needed for current Web3 actions

≠

◆Atlas Web3 walletOnly the amount needed for planned actions

A separate Web3 wallet reduces the amount exposed to a malicious website or unsafe approval. It does not replace transaction checks: every request must still be reviewed before confirmation.

When you finish

  1. Confirm that the intended action appears in the Personal Dashboard or BscScan.
  2. Close pages that are no longer needed.
  3. Lock MetaMask, especially on a shared device.
  4. Periodically review connected sites and token approvals.

Disconnecting a website removes the active wallet connection. It does not automatically cancel token approvals already recorded on-chain.

4. Understand every MetaMask request

MetaMask can open for several different reasons. Menyambung, Sign, Approve dan Confirm transaction are not interchangeable: they grant different permissions and have different consequences.

↗MenyambungAccount accessNo gas

The site can see the selected public address and request further actions.

Semak
Domain and selected account
On-chain
No
✎SignMessage signatureUsually no gas

Creates a cryptographic signature. A signature can still authorise an important action.

Semak
Domain, message and purpose
On-chain
Not necessarily
◎ApproveToken permissionBNB gas

Lets a contract access a BEP20 token up to the displayed spending cap.

Semak
Token, cap, network and spender
On-chain
Yes, standard approval
✓Confirm transactionBlockchain operationBNB gas

Submits the displayed smart-contract operation to BNB Smart Chain.

Semak
Account, action, contract, amount and fee
On-chain
Yes

One Atlas action may require more than one wallet confirmation — for example, a token Approve followed by the Smart Cycle transaction. Treat each MetaMask window as a separate decision and check it independently.

If MetaMask shows a warning

Stop and read the warning. A security alert is a reason to recheck the domain, contract and request; it should not be dismissed simply because the page looks like Atlas. If the reason is unclear, select Reject and reopen Atlas through the official website.

5. Six checks before Confirm

Use the same short sequence before every transaction-related action. It takes a few seconds and catches the most common mistakes.

01DomainOfficial Atlas page
02AccountExpected wallet
03RangkaianBNB Smart Chain
04ActionMatches your click
05Contract & amountRegistry, token and value
06GasExpected BNB fee
Everything matchesSahkanatauSomething is unclearReject

Never confirm first and investigate later. If one item does not match, select Reject atau Cancel, take a screenshot without secret data and verify the action through official Atlas resources.

6. Verify contracts and transactions

The Atlas interface helps you perform an action; BscScan lets you independently inspect the on-chain record. Use the Contract Address Registry as the source of official contract addresses rather than copying an address from a message, comment or search advertisement.

Tx Hash

Atlas operationOpen the operation→Tx HashUnique public ID→BscScanInspect on-chain→Contract RegistryCompare the address
  1. Open the completed or pending operation in the Personal Dashboard.
  2. Salin Tx Hash operasi atau buka pautan yang berkaitan.
  3. Confirm that the link opens the official BscScan website.
  4. Compare the interacting contract with the official Atlas Contract Address Registry.
  5. Review the status and token movement.

Five fields that answer most questions

BscScan · Transaction DetailsBNB Smart Chain
Status● Success
Dari0x12…89AB
Berinteraksi Dengan0xA7…41C2
BEP-20 Tokens TransferredUSDT · amount · direction
Yuran TransaksiBNB network fee
  • Status — Success, Pending or Failed.
  • Dari — the wallet that submitted the transaction.
  • Berinteraksi Dengan — the smart contract called by the transaction.
  • BEP-20 Tokens Transferred — token, amount and direction recorded during the interaction.
  • Yuran Transaksi — BNB paid to process the transaction on BNB Smart Chain.

Read the status correctly

✓KejayaanIncluded and executed
…Belum selesaiWaiting for confirmation
!GagalExecution did not complete
  • Kejayaan means the transaction was included and executed by the network.
  • Belum selesai means the transaction has been submitted but has not yet been included in a confirmed block.
  • Gagal means the requested execution did not complete; a network fee may still have been charged.

A Kejayaan status confirms blockchain execution. It does not guarantee a future Claim, Delta or Partner Reward. Those outcomes depend on the applicable Smart Cycle or Partner Program rules and, where relevant, available liquidity.

Keep the Tx Hash

A Tx Hash is the public identifier of a blockchain transaction. Save it when reporting a problem: it allows support to inspect the same on-chain record without asking for wallet secrets.

For a full explanation of contract pages, source-code verification and BscScan tabs, use the separate Kontrak & BscScan arahan.

7. Recognise phishing and fake support

Phishing relies on urgency, imitation and trust. The message may copy Atlas branding or use public information about your wallet; that does not make the sender or website official.

⏱Urgency“Confirm now”
◉Frasa benihSecret requested
?Fake supportUnsolicited contact
↗Extra transferPay to “unlock”
★AirdropUnexpected reward
≠Look-alike domainChanged address

Common warning signs

  • Urgency: “Confirm now”, “your wallet will be blocked” or “Claim expires today”.
  • Wallet secret request: a form or person asks for a Secret Recovery Phrase, private key or MetaMask password.
  • Unsolicited support: an account contacts you first and claims it can fix the wallet or transaction.
  • Extra payment: someone promises to unlock a Claim, recover assets or guarantee a result after another transfer.
  • Unexpected reward: an airdrop, token, NFT, QR code or file asks you to connect and approve access.
  • Imitation: a domain, social account or extension uses Atlas branding with a changed name or address.

The safe response

1Stop→2Do not sign→3Open Atlas manually→4Verify official support
  1. Do not click additional links, scan QR codes or open attached files.
  2. Select Reject / Cancel if MetaMask is open.
  3. Close the page and enter atlas-system.tech manually in a new tab.
  4. Use contact links published on the official Atlas website.
  5. If an operation was already submitted, preserve the Tx Hash and check it on BscScan.

A useful rule

Public information can be shared for verification; wallet secrets cannot. A public wallet address and Tx Hash can help investigate an operation. A Secret Recovery Phrase, private key or password gives access and must never be sent to anyone.

A professional-looking message is not evidence. Verify the channel, domain and requested action independently before replying or connecting the wallet.

8. If something may be compromised

Respond according to what actually happened. Rejecting an unexpected popup is different from signing a token approval, and exposing a Secret Recovery Phrase requires a stronger response than disconnecting a website.

Choose the correct risk level

1Request rejectedVerify no action was submitted
2Approval signedInspect and revoke allowance
3Wallet secret exposedTreat the wallet as compromised

An unexpected request appeared, but you rejected it

  • Close the page.
  • Check that no transaction was submitted in MetaMask Activity or BscScan.
  • Disconnect the suspicious site from the wallet.
  • Reopen Atlas by entering atlas-system.tech manually.

If nothing was signed or submitted, there may be no on-chain action to reverse. Continue only after verifying the official domain.

You signed an unexplained token approval

  • Stop using the suspicious page.
  • Inspect the approval transaction and spender address on BscScan.
  • Review and revoke the unsafe token allowance through a trusted approval-management tool or block explorer.
  • Remember that revocation is an on-chain transaction and requires BNB gas.
  • Check the wallet for unexpected token transfers.

Disconnecting the site is useful, but it does not revoke an existing on-chain allowance.

A Secret Recovery Phrase or private key was exposed, or unauthorised transactions appeared

Treat the wallet as compromised.

  1. Use a clean device, browser or browser profile to create a new wallet with a new Secret Recovery Phrase.
  2. Securely record the new recovery information offline.
  3. If it is still possible and safe, move remaining assets to the new wallet.
  4. Stop using every account derived from the compromised Secret Recovery Phrase.
  5. Save the old public address, suspicious addresses and Tx Hashes.
  6. Contact official support and, where appropriate, the relevant authorities.

Do not reuse the exposed Secret Recovery Phrase. Resetting a password, reinstalling MetaMask or disconnecting a website does not make exposed wallet keys safe again.

Emergency sequence

1Stop→2Assess→3New wallet→4Move assets→5Record evidence→6Official support

Batasan penting

Atlas and MetaMask support cannot reverse confirmed blockchain transactions or recover a Secret Recovery Phrase. Support can help interpret public records and explain the next safe steps, but it cannot take control of the wallet for you.

If the compromised wallet appears to be drained automatically, do not add more assets merely to pay gas without specialist guidance: automated theft may remove newly added funds immediately.

9. Contact support safely

Start from the Contacts section on atlas-system.tech. Do not trust a support link supplied only in a private message, comment or advertisement.

Information that helps investigate an operation

!

Never share

  • Secret Recovery Phrase / seed phrase;
  • private key;
  • MetaMask password;
  • recovery files or wallet backups;
  • remote access to the device;
  • a signature or transaction requested only to “verify ownership”.

A useful support request

RangkaianBNB Smart ChainWalletPublic addressTx HashTransaction IDActionButton or sectionTimeDate and UTCResultExpected vs actual

Write the facts in chronological order. One precise request with a Tx Hash is easier to investigate than several screenshots without context.

Example:

Network: BNB Smart Chain
Wallet: 0x12…89AB
Section: My Support Cycles
Action: Claim
Time: 16 July 2026, approximately 14:30 UTC
Tx Hash: 0x…
Expected: the Claim transaction to appear as completed
Actual: BscScan shows Pending and the Personal Dashboard has not updated

Before sending

✓ Official channel✓ No wallet secrets✓ Tx Hash included✓ Screenshot reviewed

Check every screenshot and copied message for seed phrases, private keys, passwords, full recovery screens and unrelated personal information.

No legitimate investigation requires your Secret Recovery Phrase or private key. If anyone asks for either, end the conversation and return to the official Atlas website manually.

10. Quick security checklists

Use these cards as a final check before an action or whenever something feels unusual.

Before Connect

  • Open Atlas from a bookmark or type the address manually.
  • Check the complete domain.
  • Select the intended wallet account.
  • Never enter wallet secrets on the page.

Before Sign, Approve or Confirm

  • Confirm that you initiated the action.
  • Check the account and BNB Smart Chain.
  • Identify the request type.
  • Check contract, token, cap and amount.
  • Review gas and security warnings.

If something looks suspicious

  • Select Reject or Cancel.
  • Close the page and open Atlas manually.
  • Check MetaMask Activity and BscScan.
  • Save the Tx Hash and use official support.

Three rules to remember

01Verify the domainbefore connecting
02Read every requestbefore approving
03Never share wallet secretswith anyone

Pause before approval. Blockchain actions can be permanent. A few seconds spent checking the domain, account, contract and amount are part of every Atlas action.