Liquidity Pool Party
The annotated lyrics, glossary, and Web3 safety manual
for the album by Mental Stamina
Washington, D.C.
Ten tracks. Every one about crypto. The album is the syllabus.
Educational only. Not financial advice. You can lose everything.
Introduction
Why an album
Hip-hop has always been a technical literature. It compresses information into a form people carry around without trying — coded language, dense internal reference, a whole vocabulary that has to be learned before the lines open up. Fans have been doing close reading on it for forty years. Annotating rap is not a novelty; it is one of the most established reading practices in popular music.
So teaching a technical subject through it is not a gimmick. It is using the form for the thing the form already does.
Crypto has the same shape as a problem. It is a field with its own vocabulary, its own in-jokes, and a very high cost for misunderstanding a word. Most explanations of it fail in one of two directions: they either flatter people who already understand it, or they talk to newcomers as though they were slow. Neither of those is a teaching problem. Both are a tone problem.
An album fixes the tone problem, because a song does not condescend. It just plays, and you either catch the reference or you look it up. This book is the looking it up.
What this will and will not do
This will not make you rich. Nothing here is a recommendation to buy anything, and nobody involved is a licensed financial adviser.
What it will do is make you considerably harder to rob.
That is a smaller promise and a much more defensible one. Most people who lose money in this field do not lose it to a market. They lose it to a fake website, a phrase stored in a photo, an approval they signed without reading, or a company they trusted to hold their money that turned out not to be holding it. Every one of those is preventable, and none of the prevention requires being clever. It requires knowing four or five specific things and having the habits to match.
By the end of this book you will know what a wallet actually is, why nobody can reset it, what the recovery words are and where they should live, how to read the public ledger yourself instead of taking someone's word for it, and what the most common attacks look like from the inside.
One order, not two
The album and this book run in the same sequence.
That was a decision, and it was argued rather than assumed. An album sequence normally manages energy and hooks; a curriculum sequence manages which idea depends on which. Those are genuinely different jobs, and forcing them together usually damages one of them.
It turned out not to here, because the dependencies are looser than they look. Only a few things are actually fixed: you need to know what a chain is before anything else, you need to know what a wallet is before anything can be stolen from you, the seed phrase has to be established before the track that attacks one, the villain belongs late, and the synthesis belongs last. Everything else was free, and all of that freedom went into the running order.
So there is no separate reading order to learn. Track 1 is chapter 1. The record is the syllabus.
There is a villain
Two tracks on this album are written from the attacker's point of view.
Track 8 is a scammer describing his business. Track 9 is a robbery. Neither is comfortable, and neither is decoration.
This is how security is taught everywhere it is taught well. You cannot defend against an attack nobody has ever described to you, and the most reliable way to make a threat legible is to let it speak. Security professionals call this threat modelling. It is the standard method, not an edgy one.
Each of those two tracks ships with a Defense Sheet on the facing page. Every technique named in the lyric appears in a table beside how it actually works and what stops it. No attack is described in more detail than its defence requires, and no row appears without a countermeasure. If there were no defence, the row would not be there.
It is worth saying plainly: the villain arc is the security curriculum. That is not a justification added afterwards. It is why the album is shaped this way.
Three ways to read this
None of them is wrong, and nobody has to do all of it.
Just the music. Read the lyrics, skip everything else. The album works as an album.
The music with the decoder. Read the annotations beside each track. Each does up to four jobs — Define what a term means, Decode what the bar is saying, name the Danger, and give you something to Do. You will finish knowing what the lines mean and roughly how the technology works.
The full manual. Work the last third front to back. It assumes nothing, and it takes you from never having opened a wallet to holding your own keys safely.
One rule holds across all three. The manual teaches you how to lose money before it teaches you how to move it. The safety chapter comes before the tutorial chapter, deliberately, and that ordering is not negotiable — it is the single thing that most separates this from other attempts to teach beginners about crypto.
Start wherever you like. Track 1 is as good a place as any.
How To Use This Book
Three ways in, and none of them is wrong.
Just the music. Read the lyrics. Skip everything else. The album works as an album.
Music with the decoder. Read the annotations beside each track. Each one does up to four jobs — Define, Decode, Danger, Do. You'll finish knowing what the bars mean and roughly how the technology works.
The full manual. Work the last third front to back. It assumes nothing and takes you from never having opened a wallet to holding your own keys safely.
The Four D's
| Define | What the term means |
| Decode | What the bar is actually saying |
| Danger | The failure mode being referenced |
| Do | The action you can take |
The one rule
The manual teaches you how to lose money before it teaches you how to move it. That order is deliberate and it isn't negotiable. Chapter order exists for a reason — the safety chapter comes before the tutorial chapter.
What this book is not
It is not investment advice. Nothing here recommends buying anything. The annotations describe how things work and how they fail, and nothing more. The songs are art; art is allowed opinions the manual is not.
The Tracks
The album order and the teaching order are the same order.
| # | Track | Act | Teaching job | Energy |
|---|---|---|---|---|
| 1 | I Love My Blockchain | I — Origin | What a chain is: immutable, on-chain, fixed supply | High / chant |
| 2 | You Need A Wallet | I — Origin | Custody first. Get the wallet before you get the coin | Peak |
| 3 | Buy Bitcoin (BTC) | I — Origin | The asset, the culture, HODL, block explorers | High |
| 4 | Buy Ethereum (ETH) | I — Origin | Programmable money, contracts, code, nodes | Mid / melodic |
| 5 | Cryptocurrency | II — The World | Exchanges and counterparty risk | Mid-high |
| 6 | Buy The Floor | II — The World | Layer 2s, gas, floors, sats | Mid |
| 7 | All In | II — The World | Seed phrases, generational wallets, risk tolerance | High / pivot |
| 8 | Rug Pulls Pay My Rent | III — The Antagonist | The scam economy in its own voice | Dark / mid |
| 9 | Keys Please | III — The Antagonist | Physical coercion, the wrench attack | Dark / peak menace |
| 10 | Dying Rich | IV — Resolution | Patience, self-custody, community, what money isn't | Anthemic close |
1. I Love My Blockchain
Act I — Origin · High / chant
What a chain is: immutable, on-chain, fixed supply
Lyrics
Annotations
Define — A block is a batch of transactions added to the ledger as one unit. Each block points back at the one before it, and that chain of pointers is what the word blockchain describes.
Decode — "Chained to my block" is the mechanism stated as a boast. Being chained is usually a complaint; here it is the feature. The link between blocks is exactly what makes the record hard to rewrite.
See also — block, blockchain, Manual Part One §2.
Define — Liquidity locked means the pot of funds people trade a token against is held in a contract that prevents anyone withdrawing it until a set date.
Decode — The line rhymes a refusal to buy stocks against the one reassurance a token buyer can actually verify. Locked liquidity is the checkable claim in a field full of unverifiable ones.
Danger — "Liquidity locked" is announced far more often than it is true, and the phrase is used as a closing argument by people running exit scams. A lock that expires next Tuesday is technically a lock. So is a lock the team can cancel.
Do — Next time you see the claim, find the lock contract and read its unlock date. You do not need a wallet or any money to do this — the lock is public, and either it exists with a date on it or it does not.
See also — liquidity-locked, liquidity-pool, rug-pull, Manual Part Four §4.
Decode — Literally true and easy to miss: these markets have no closing bell, no weekend, no holiday. Stock exchanges close. This does not.
Danger — Continuous markets mean the worst move can happen at four in the morning in your time zone, and it regularly does. People who set no rules in advance end up making decisions half-awake.
See also — Manual Part Three §4.
Define — Bitcoin launched in 2009 and does one thing: move and hold value. Ethereum launched in 2015 and adds the ability to run programs on the chain.
Decode — A one-line history of the field, in order. It is also the order of this book: track 3 is the asset, track 4 is the programmable version.
See also — bitcoin, ethereum, tracks 3 and 4.
Define — OpenSea is a marketplace for digital collectibles. Items in a collection are graded by how common their traits are.
Decode — "Common, not rare" is an honest admission wearing a boast's clothing. Most items in most collections are common, and common is what the floor price actually measures.
Danger — Rarity is the number sellers quote and the number that stops mattering first. When interest drops, rare items do not hold value proportionally — they simply stop selling at all, which looks like a high price and is actually no market.
See also — floor-price, bored-ape, Manual Part Five §3.
Define — A trading pair is the two things being swapped. Every price is a price in something else.
Decode — The bar states a mechanic most beginners never notice: you are always pricing one asset against another, never against nothing.
Do — Look up any token's price quoted against two different pairs and compare. Seeing the same asset carry two different numbers, at the same moment, teaches the idea faster than a definition does.
See also — trading-pair, liquidity-pool.
Define — Mining is the work computers do to add the next block. Whoever completes it first gets to add that block and collect the reward.
Decode — The line personifies the network as a partner putting in hours. It is closer to literal than it sounds: the security of the chain is the accumulated cost of all that work.
See also — block, node, Manual Part One §2.
Define — Fixed supply means a hard cap on how many coins can ever exist. Bitcoin's is 21 million, written into the rules and enforced by every participant.
Decode — The joke lands on the exact number a newcomer needs to remember, and the "sike" tells you the number is the punchline — the one fact from the whole song most worth keeping.
Do — Remember the number, then ask the only question that follows from it: capped by what? The answer is that every node rejects a block breaking the rule. It is arithmetic agreed by everyone, not a promise by anyone.
See also — fixed-supply, bitcoin, Manual Part One §4.
Define — A stop loss is a standing instruction to sell automatically if the price falls to a set level.
Decode — The narrator declines the safety rail, and says so as a flex. This is the album being honest about its own posture rather than pretending to be prudent.
Danger — This is a song lyric, not a method. Refusing any exit plan is precisely how a manageable loss becomes a total one. The book's position throughout: the songs are art and art is allowed opinions; the annotations are not.
See also — take-profits, diamond-hands, Manual Part Four §7.
Define — A dip is a short-term fall in price within a larger trend.
Decode — Dips as small plates, taken casually and often. The image carries the strategy: repeated small buys rather than one large one.
Danger — Whether a fall is a dip or the start of a decline is only knowable afterwards. Buying every fall without a limit set in advance is how people average down into something that never comes back.
See also — dip, buy-the-dip, bear-market.
Define — On-chain means recorded on the public ledger itself, rather than in a company's private database.
Decode — "Forever it reads" is the property, not the poetry. Anyone can read it, without an account, without permission, indefinitely.
Do — Open a block explorer and look up any transaction. No sign-up, no wallet, no cost. Getting used to checking the ledger yourself is the single most useful habit in this book.
See also — on-chain, block-explorer, Manual Part One §2.
Define — Immutable means that once written, it cannot be edited or deleted.
Decode — The album's central idea, stated plainly and early. Everything else in this book follows from it.
Danger — The feature and the danger are the same property. No reversals, no chargebacks, no support line. Send to a wrong address and there is no undo — not because someone refuses, but because the mechanism to undo does not exist.
See also — immutable, seed-phrase-loss, Manual Part One §3.
Decode — The line draws the distinction the record keeps returning to: participating in something versus betting on it.
Danger — It is also the sentence every project uses to discourage selling, and to reframe a purchase as membership. Being told you are "part of the team" is a common way of being talked out of taking profit — and of being made responsible for a price you do not control.
See also — wagmi, diamond-hands, Manual Part Four §7.
2. You Need A Wallet
Act I — Origin · Peak
Custody first. Get the wallet before you get the coin
Lyrics
Annotations
Define — Degen is short for degenerate. It is a badge people apply to themselves for taking high-risk positions.
Decode — The narrator claims it before anyone else can, and repeats it until it is the song's spine. Claiming the insult first is an old rhetorical move: it removes the other side's leverage.
Danger — The posture is honest; the position sizing that travels with it is where the damage happens. Adopting the identity tends to mean adopting the bet size, and the identity does not absorb the loss.
See also — degen, paper-hands, Manual Part Four §7.
Define — A whale is a holder large enough that their buying or selling moves the price on its own.
Decode — Swimming with them is the aspiration. The image is doing quiet work, though — you swim near whales, you do not become one by proximity.
Danger — Whale wallets are public, which invites copying their trades. You cannot see what they paid, what else they hold, or how long they intend to wait. You are seeing one leg of something larger and calling it a signal.
See also — whale, block-explorer.
Define — A wallet does not hold coins. It holds the keys that prove the coins on the ledger are yours.
Decode — The title line, and the whole thesis of the record's position 2. The joke is a brush-off — she gave a number, he wants a wallet address — but the pedagogy is exact: custody comes before acquisition. Get the place to put it before you get the thing.
Do — If you take one action from this book, make it this one, in this order: set up a wallet and write down its recovery words before you buy anything. Doing it afterwards is how people end up leaving funds on an exchange for years.
See also — wallet, self-custody, hold-your-own-keys, Manual Part Two.
Decode — A larger position moves more in absolute terms. Arithmetically true and completely silent on direction.
Danger — It grows quicker in both directions, which the line omits. This is the record's recurring rhetorical shape: a true statement about upside with the symmetrical downside left out. Track 7 is the whole song about it.
See also — track 7, bear-market, Manual Part Four §7.
Decode — A double meaning that rewards a second listen: gold diggers as the cliché, and as literal prospectors — the people digging rather than the people buying. Mining imagery runs under the whole first act.
See also — stacking-sats.
Define — Diamond hands means holding through severe falls without selling.
Decode — Compressed into a marksman image: steady, unhurried, does not flinch. The slow trigger in the following line is the same idea — patience rendered as aim.
Danger — Praised as a virtue, it is a decision made once and then never revisited. Refusing to reassess is not conviction. The opposite label, paper hands, exists to shame people out of ordinary risk management.
See also — diamond-hands, paper-hands, take-profits.
Define — Satoshi Nakamoto is the pseudonym of whoever published Bitcoin in 2009. Their identity has never been established, and they have been silent since 2011.
Decode — A leader nobody can find, who cannot issue instructions, and whose coins have never moved. The line is affectionate about a genuinely strange fact: the field's founder is an absence.
See also — bitcoin, anon, Manual Part One §1.
Decode — Payment for a guest verse, settled in Bitcoin. A small, ordinary use — money moving between two people for work, with no platform in between.
Danger — In most countries being paid in crypto is taxable at the value on the day you received it, and disposing of it later is a second taxable event. People who treat payments as invisible discover otherwise afterwards. Record what it was worth the day it arrived.
See also — cost-basis, Manual Part Three §6.
Define — A Ponzi pays existing participants with money from new ones while presenting it as returns.
Decode — "See thru" is the claim being made, and it is a claim about the narrator's eyesight, not about the scheme. They are not transparent. That is the entire point of them.
Danger — Early withdrawals working is the mechanism, not evidence against it. Paying the first group is what recruits the second. Everyone who got out early is a testimonial the operator did not have to pay for.
Do — Ask where the yield comes from and keep asking until the answer is specific. "Trading" and "arbitrage" without detail are not answers. A fixed high return regardless of market conditions is the tell.
See also — ponzi, pooled-funds, fake-guru, Manual Part Four §5.
Define — A VPN routes your traffic through another server, hiding your network address from the sites you visit.
Decode — Delivered as the panicked advice of someone who has just discovered the topic. The song is gently mocking it, and it is right to.
Danger — A VPN is widely mistaken for general crypto protection. It hides where you are. It does nothing about a malicious contract you approve, a fake site you type your recovery words into, or a phone you left unlocked. Those are how people actually lose funds.
See also — vpn, opsec, wallet-drainer.
Decode — "One hundred" becomes "1 ETH" — keeping it honest, denominated in Ethereum. A small, well-built pun that also tells you which chain the narrator lives on.
See also — ethereum.
Define — A fake guru sells signals, courses, or picks. Their income is your subscription and undisclosed paid promotion, not their trading.
Decode — The clearest piece of direct advice in the first act, delivered without irony. Note that it arrives inside a song whose narrator is openly a degen — the record can warn you and implicate itself in the same breath.
Danger — Followers and visible wealth are both purchasable, and neither is a track record. Anyone promoting a token they hold, without disclosing it, is describing their exit and calling it analysis.
Do — Ask for a complete timestamped record including the losses. Check whether promotions are disclosed as paid. Never give anyone access to your wallet to "manage" funds for you.
See also — fake-guru, dyor, pump-and-dump, Manual Part Four §5.
Define — A smart contract is a program stored on the chain that runs exactly as written when called.
Decode — "Send the contract" reads as a business negotiation and means the token's code address. Asking for the contract is the correct instinct — it is the only version of a project that cannot lie about itself.
Do — Paste any contract address into a block explorer and look at two things: whether the code is verified, and how concentrated the holdings are. Free, no wallet required, and it answers more than any amount of reading community chat.
See also — smart-contract, code-audit, block-explorer, honeypot.
Define — A honeypot is a token you can buy but cannot sell. The restriction is written into the contract.
Decode — The punchline to the previous line. He asked for the contract, read it, and found the trap — the whole defensive sequence compressed into two bars.
Danger — The chart looks healthy the entire time, because buys work and only sells fail. Everyone still holding is a buyer who has not yet tried to leave. You discover it at the exact moment you need to get out.
Do — Before buying anything obscure, check whether anyone has successfully sold it. Explorers and token scanners show sell transactions; a token with buys and no sells is the shape of this trap.
See also — honeypot, token-tax, rug-pull, Manual Part Four §4.
Define — Unlocked liquidity means the pot backing the token can be withdrawn by whoever controls it, at any moment.
Decode — The deliberate inversion of track 1's "liquidity locked". Same phrase, one word changed, opposite meaning. The record teaches the safe version first and the dangerous version second.
Danger — This is the mechanical precondition for a rug pull. When the pool is emptied, the token is still in your wallet and there is nothing left to sell it against. The balance shows a number; the number is not reachable.
See also — liquidity-locked, rug-pull, track 8.
Define — Overclocking runs hardware faster than its rated speed, producing more output and more heat.
Decode — A real detail from the mining era: rooms of machines run past their limits, and the electricity bill as the actual constraint. It grounds the abstraction — the ledger is secured by physical hardware someone is paying to run.
See also — node, block.
Define — To ape in is to buy a large position quickly, without research, usually because something is moving.
Decode — "Mach One" sets the speed. The word ape carries the self-awareness — it is not a term anyone uses to describe a considered decision.
Danger — Speed is the common factor in almost every avoidable loss in this book. Nothing legitimate requires you to act within minutes. Urgency is manufactured precisely because deliberation kills the sale.
See also — fomo, dyor, mint.
Define — To moon is to rise sharply in price.
Decode — Stated as certainty, in a song, by a narrator who has already told you he is a degen. The book's line holds here: the songs are art and art is allowed opinions.
Danger — This annotation is not a forecast and nothing in this book is a recommendation to buy. A plan whose only branch is "it goes up" is not a plan — it has no exit and no downside case.
See also — moon, fomo, the standing disclaimer.
Define — Market cap is the price per token multiplied by the number in circulation.
Decode — The narrator is waiting for a lower total valuation, not a lower price tag. That distinction is the single most useful piece of numeracy in the first act.
Do — Take any token priced at a fraction of a cent and multiply its price by its circulating supply. Then ask what "it only needs to reach one dollar" would imply for that total. Sometimes it implies a number larger than the world's biggest companies combined.
See also — market-cap, shiba, doge.
Decode — Said lightly, and it is the most serious line in the verse. Tokens going to zero is not an edge case in this market; it is the base rate for new ones.
Danger — "Too often" implies a survivor still standing. The people it happened to once, with everything, are not in the song and do not post. Judging risk from the accounts still talking is how the rate gets underestimated.
See also — rekt, bear-market.
Decode — Two words, placed directly after "hit zero too often". The record does this repeatedly — a boast, then the correction, without ever breaking character to lecture. It is the same structure the book uses: the bar, then the annotation.
See also — Manual Part Four.
Define — A 10x is a position worth ten times what was paid for it.
Decode — The moment being celebrated is the paper gain, not the sale. Read it again and notice nothing was sold.
Danger — Unrealised gains are not gains. Every drawdown is full of people who were up ten times at some point and are now down. The decision that matters is the one nobody makes in advance.
Do — Decide now, in writing, what would make you sell a portion. Any rule beats no rule, because the alternative is deciding under emotion at the worst moment.
See also — take-profits, diamond-hands, Manual Part Five.
Define — DYOR — do your own research. The standard disclaimer attached to any mention of a token.
Decode — Genuinely good advice, and simultaneously the liability shield of everyone promoting anything. Both things are true at once, which is why the next line calls it a chore.
Danger — Reading community posts is not research. It measures enthusiasm, and enthusiasm is the thing being manufactured. A channel full of agreement is not evidence; it is often just everyone holding the same bag.
Do — Research means five specific things: the contract, the holder distribution, the audit, the vesting schedule, and what the team has previously shipped. All five are public and free to check.
See also — dyor, fud, code-audit, vesting.
Define — Items in a collection carry traits of varying rarity, which are used to price individual pieces above the collection's floor.
Decode — Rarity as a status system. The following line about capes is the joke landing: the traits are arbitrary, and everyone agrees to care.
Danger — Rarity premiums evaporate before floors do. In a falling market rare items do not sell at a discount, they stop selling entirely, which shows as a high asking price and no buyer.
See also — floor-price, bored-ape, Manual Part Five §3.
Decode — The fear of having missed it, named exactly. It is the most reliable emotion in the market and it never goes away — people felt late in 2013, 2017, 2021, and today.
Danger — "You're late" and "you're early" are both sales pitches, deployed by the same people depending on which is useful. Neither is information. Nobody has ever been harmed by taking another week to understand something.
See also — fomo, normie, wagmi.
Define — FOMO — fear of missing out. The pressure to act because others appear to be profiting.
Decode — Named as something other people have. It is always something other people have.
Danger — This is the attacker who needs no attacker. Peak attention and peak price arrive together, so the moment something is most talked about is the moment the earlier buyers have someone to sell to. The people posting gains bought long before the post.
See also — fomo, pump-and-dump, Manual Part Four §7.
Define — SOL is the native coin of Solana, a chain built for high speed and very low fees. It is taught properly at track 9; here it is simply the money being spent. DexTools is a site where tokens can pay for placement.
Decode — This is paid promotion, described plainly, by the person paying for it. The album shows you the machinery from the inside two tracks before it introduces its villain.
Danger — Much of what looks like organic enthusiasm is purchased placement. Trending is a product with a price list. If you cannot tell why something is in front of you, assume someone paid for it to be.
See also — sol, pump-and-dump, fake-guru, track 8.
Define — A candlestick shows the open, close, high, and low over one period. A red candle closed lower than it opened.
Decode — Immediately after paying for promotion. The order of events is the joke, and it is the honest version of how these campaigns usually go.
Danger — Colour is not information. It is a summary of what already happened, and selling into red or buying into green is reacting to the past. Most regretted trades are made looking at a chart rather than a plan.
See also — red-candle, green-candle, candlestick.
Define — Porting here is the shift from a network address to the next line's phone-number sense — SIM porting, where an attacker moves your number to their device.
Decode — The verse turns from market risk to personal risk, and it is the hinge into the album's dark half. The threat stops being the chart.
Danger — Once your number is ported, every code sent by SMS goes to the attacker — including the ones protecting your email and exchange accounts. This is one of the most common routes into a person's crypto, and it involves no blockchain expertise at all.
Do — Move two-factor authentication off SMS and onto an app or hardware key, starting with the email address your accounts recover to. Ask your mobile provider to add a port-out PIN.
See also — opsec, doxxing, dark-web, Manual Part Four §5.
Define — Fiat is government-issued money — dollars, euros, yen. Valuable because a state says so and people agree.
Decode — Three currencies, three flags. Crypto is priced against all of them at once, and the number differs depending on where you stand.
Do — Before buying anything, work out how you would convert back. People plan the entry in detail and discover the exit has fees, limits, and identity checks they never looked at.
See also — fiat, exchange, Manual Part Three §6.
Decode — A claim of invulnerability, and the album will spend track 9 taking it apart. Read in sequence, this line is setup: the narrator believes it here, and the villain answers it later.
Danger — Nobody is immune to this, and confidence is not a countermeasure. Cryptography protects keys from computers; it does nothing about a person standing in front of you. This is why track 9 exists and why it ships with a Defense Sheet.
See also — coercion, duress-wallet, multisig, track 9.
Define — Recovery keys are the words that restore a wallet on any device. Whoever holds them holds the funds. There is no second factor and no identity check.
Decode — The song's most consequential line, delivered as a throwaway. Left on a dresser: visible to anyone in the room, anyone photographing the room, anyone who has ever been in the room.
Danger — This is the most common way people are robbed, and it requires no attack on any blockchain. A photo, a cloud-synced note, a screenshot, a guest, a repair technician. The chain was never the weak point — the bedroom was.
Do — Write the words on paper, never in a photo, note, email, or cloud document. Store two copies in two separate places. Never type them into any website, and know that no legitimate service will ever ask for them.
See also — recovery-keys, seed-phrase-loss, opsec, Manual Part Two §5, and the Part Two safety notice.
3. Buy Bitcoin (BTC)
Act I — Origin · High
The asset, the culture, HODL, block explorers
Lyrics
Annotations
Decode — The wallet as jewellery. It is the oldest move in the genre — display the wealth — applied to an asset where display works very differently.
Danger — A wallet address is public and permanent. Showing it once links a name to a balance forever, and that link cannot be withdrawn. This is exactly the sequence that makes someone a target in track 9.
Do — Keep the wallet you show or use publicly separate from the one holding savings. If you have ever posted an address, assume it is permanently associated with you.
See also — opsec, doxxing, coercion, track 9.
Define — Lambo — a Lamborghini, the culture's shorthand for sudden wealth. "When lambo?"
Decode — The genre's standard flex, and here it is also the field's in-joke about its own motivation.
Danger — As a goal it fails for a specific reason: it is an object, not an amount and a date. Targets with no number have no point at which you stop, so nothing is ever taken off the table.
See also — lambo, take-profits, moon.
Define — A green candle is a period that closed higher than it opened. HODL is a misspelling of hold from a 2013 forum post, now the standard word for not selling.
Decode — "Now you love it" is the observation the whole verse turns on: affection tracks the colour of the chart, and arrives after the move.
Danger — Buying because a chart is green is buying because other people already did. The colour is a record of the past, not a signal about the future.
See also — green-candle, hodl, red-candle, fomo.
Decode — A recurring refusal across the record — the narrator positions crypto against the traditional market rather than alongside it.
Danger — Stated as identity, it becomes a reason not to diversify. Nothing in this book suggests holding one thing only, and the manual's closing exercise assumes you hold more than crypto.
See also — Manual Part Five.
Decode — The pun runs autograph into auto-graphing: fame and chart-watching in one word.
Danger — Constant chart-watching reliably produces worse decisions, because it converts noise into apparent signal and invites action where none is needed. Markets that never close make this a genuine health issue, not a figure of speech.
Do — Decide how often you will look, in advance. For most people holding for years, daily is already too often.
See also — candlestick, Manual Part Four §7.
Decode — A warning against copy-trading from someone whose plays are being watched. It is more honest than most disclaimers, and it is aimed at the exact reader this book is for.
Danger — Copying trades fails because you see the entry and never the rest: not the cost basis, not the size relative to everything else held, not the timeframe, not the exit. You are copying one visible fragment.
See also — dyor, whale, fake-guru.
Define — HODL — to hold regardless of price movement.
Decode — The admission underneath the posture: holding is hard, and wanting a shortcut is the normal human response. The record keeps undercutting its own bravado this way.
See also — hodl, diamond-hands, paper-hands.
Define — The floor is the lowest current asking price in a collection.
Decode — Hitting the floor is read as the signal to buy more. It compresses averaging down into a single bar.
Danger — A floor is an asking price, not a support level. It can move down indefinitely, and "we hit the floor" has been said at every price on the way to zero. Adding on the way down without a predetermined limit is how a small loss becomes the whole position.
See also — floor-price, buy-the-dip, dip.
Define — A block explorer is a free website for searching the chain — any address, any transaction, no account needed.
Decode — The most practically useful line on the record. "Every order tracked" is not a boast; it is a description of how the ledger works for everyone, including you.
Do — Open any block explorer and paste in a transaction or address. This is the habit that replaces trusting what people tell you with checking it yourself, and it costs nothing.
See also — block-explorer, on-chain, Manual Part One §2.
Define — A stablecoin is a token designed to hold a steady value, usually one dollar, by being backed by reserves.
Decode — The correct mechanic, stated plainly: it is how people sit still without leaving crypto entirely.
Danger — "Stable" is a promise by an issuer, not a property of the token. Stablecoins have broken before, and the ones that broke looked fine the week before. Ask what backs it and who has audited those reserves.
See also — stablecoin, counterparty-risk, Manual Part Three §2.
Decode — The set-up bar. The next line names the scheme it describes.
Danger — Bandwagon following is the raw material a pump needs. Organised campaigns do not require many participants to know they are participating — they require enough people to arrive late.
See also — fomo, pump-and-dump.
Define — A pump and dump: organisers quietly accumulate, promote hard, and sell into the buying they created.
Decode — Named outright, from the outside, by a narrator who two tracks earlier paid for promotion himself. The record is consistent about implicating itself.
Danger — If you are being told when to buy, you are the exit. The people who bought before the announcement are the ones being paid, and the announcement is the product.
Do — Check holder concentration on a block explorer before buying anything obscure. A handful of wallets holding most of the supply means a few people can end it whenever they choose.
See also — pump-and-dump, fake-guru, market-cap, Manual Part Four §5.
Decode — A quiet arithmetic lesson hidden in a battle-rap line. It is market cap stated as a principle: the whole is price times supply, and only the whole is comparable.
Do — Whenever a token's price looks cheap, do this sum before anything else. It is the fastest way to see whether a target price is possible or absurd.
See also — market-cap, fixed-supply.
Decode — Sound and processor speed collapsed into one image. It keeps the physical layer present: chains run on hardware someone powers and cools.
See also — node.
Define — The metaverse is the idea of persistent shared virtual spaces with their own economies.
Decode — Delivered with enough lightness that it reads as both hope and joke.
Danger — Metaverse land and assets were among the heaviest losses of the last cycle, frequently down more than ninety per cent. Any project still leading with the word is selling a narrative from a previous market.
See also — roadmap, Manual Part Five §5.
Decode — Small caps as the hunting ground, on the logic that small things can grow more.
Danger — They can also disappear entirely, and most do. Low market cap frequently means thin liquidity, which means the price you see is not the price you get when you try to leave with any size.
See also — market-cap, liquidity-pool, honeypot.
Define — Ransomware encrypts your files and demands payment, usually in crypto, to release them.
Decode — A dense triple: handsome heir, hands-on air, ransomware. Inheritance and extortion in the same breath — which is the album's actual subject in miniature.
Danger — The ransom decision only exists because there is no clean copy to restore from. Paying funds the next attack and frequently does not return the files.
Do — Keep a backup that is disconnected when not in use, and test a restore from it once. An untested backup is an assumption, not a backup.
See also — ransomware, encryption, generational-wallet, Manual Part Four §2.
Decode — The hard drive as the thing worth stealing — an accurate picture of where the value sits once you hold your own keys.
Danger — A hard drive is both the theft target and the loss risk. Some of the best-known unreachable fortunes in Bitcoin are drives that were discarded or failed, with no second copy of the recovery words anywhere.
Do — Never let a single device be the only thing standing between you and your funds. The recovery words, on paper, in two separate places, are what make any device replaceable.
See also — cold-wallet, seed-phrase-loss, recovery-keys, Manual Part Two §5.
Decode — Chain rivalry stated as advice. Tron is a competing chain; the line is a jab, not an analysis.
Danger — Most loud comparisons between chains come from people holding one of them. Treat advocacy as advocacy. Nothing in this book rates one chain above another — that is a merit judgement the annotations do not make.
See also — maxi, fud.
Define — Counterparty is a layer built on Bitcoin in 2014 that let people issue their own tokens and assets. Rare Pepes were issued on it — collectible cards that predate the word NFT by years.
Decode — A genuine piece of history, correctly placed. Collectibles on Bitcoin came first, long before the 2021 boom most people think of as the beginning.
Danger — Do not confuse this with counterparty risk, an unrelated idea about who can fail and take your money with them. Same word, two meanings, and track 5 is about the other one.
See also — counterparty, counterparty-risk, mint, track 5.
Define — DOGE began in 2013 as a joke about crypto speculation. Shiba Inu launched in 2020 imitating it.
Decode — "Breed all those dogs" is precise about what actually happens: the template gets copied, endlessly, and each copy launches a new one.
Danger — A huge supply makes the per-coin price look tiny, which is read as room to grow. Supply times price is the only number that matters. The community is the product, and communities move on.
See also — doge, shiba, market-cap.
Decode — Trading reframed as a one-on-one contest, which is how it feels and not how it works.
Danger — The other side is usually automated, faster than you, and does not get tired or emotional. Treating the market as an opponent you can outplay is a reliable route to overtrading.
See also — Manual Part Four §7.
4. Buy Ethereum (ETH)
Act I — Origin · Mid / melodic
Programmable money, contracts, code, nodes
Lyrics
Annotations
Define — Cost basis is what you originally paid, used to work out gain or loss when you dispose of something.
Decode — The track opens on accounting rather than excitement. For a song called Buy Ethereum, starting at "what did I pay" is a deliberate choice.
Danger — Most countries treat crypto disposals as taxable events, including swapping one token for another. People trade for a year, then find they cannot prove what anything cost and are taxed on the full proceeds.
Do — Record the date, amount, and value in your own currency for every purchase, from the first one. Retrofitting this later is far harder than doing it as you go.
See also — cost-basis, ethereum, Manual Part Three §6.
Define — A proxy here is the network sense — routing traffic through another server. The word has a second, unrelated meaning in smart contracts, annotated below.
Decode — Ordinary internet friction, dropped in as a detail of the working life around this stuff.
Danger — Routing around a platform's access restrictions usually breaches its terms, and accounts get frozen with funds inside them. The block is rarely the real problem; the frozen balance is.
See also — proxy, vpn, cex.
Define — A node is a computer running the chain's software, keeping a full copy of the ledger and checking every rule.
Decode — "Test code twice" is the most sensible engineering advice on the album, delivered in passing.
Do — Apply the same rule to yourself: send a small test amount before sending a large one, every time, to a new address. It costs a fee and prevents the single most expensive irreversible mistake there is.
See also — node, code-audit, immutable.
Define — A smart contract is a program stored on the chain that runs exactly as written when called.
Decode — The knife makes the point the word "contract" obscures: this is a blade, and it cuts in whichever direction it was written to cut.
Danger — "Contract" implies legal protection. There is none. Nobody enforces it on your behalf, and if the code permits your funds to be taken, they are taken and the contract worked as designed.
Do — Before interacting with anything, check on a block explorer whether the code is verified, and look for a published audit naming who reviewed it, when, and which version.
See also — smart-contract, code-audit, backdoor, Manual Part Four §3.
Decode — Sprites are the small images games draw on screen. The bar keeps the programmable-money theme concrete: a chain that runs code can render things, not only move balances.
See also — smart-contract, mint.
Define — FUD — fear, uncertainty and doubt. In practice it labels negative claims the speaker rejects.
Decode — Thrown out as a challenge, which is how the word is normally used: as a move rather than an argument.
Danger — The label is applied to genuine manipulation and to entirely legitimate criticism, indistinguishably. If someone names a specific, checkable problem, check it. "That's FUD" is not a rebuttal, and treating it as one is how people stay in things they should have questioned.
See also — fud, dyor, maxi.
Define — DeFi — decentralised finance. Lending, trading, and earning run by smart contracts instead of institutions.
Decode — The spelling-out is the joke and the warning in one gesture.
Danger — No accounts and no approval also means no refunds, no complaints process, and no one to call. Advertised yields come from somewhere — usually other users' fees or newly issued tokens — and stop when that source does.
See also — defi, liquidity-pool, staking, Manual Part Five §2.
Define — A whale holds enough to move the price by transacting.
Decode — Watching them is presented as the strategy. Their wallets genuinely are public, so the watching part is real.
Danger — Watching is not copying. You see one transaction without the cost basis, the timeframe, the hedges, or the reason. Following a whale into a position and not out of it is a common and expensive pattern.
See also — whale, block-explorer, dyor.
Define — Gas is the fee paid to have a transaction processed. On Ethereum it is quoted in gwei, one billionth of one ETH.
Decode — The fuel pun is exact rather than decorative: ETH is literally what pays for movement on the network.
Danger — Fees are an auction and spike precisely when everyone wants to act — during crashes and launches. People routinely pay a fee larger than the amount they are moving, and small transfers can cost more than they are worth.
Do — Check the fee in your own currency before confirming, every time. If it is a meaningful fraction of the amount, wait or use a Layer 2.
See also — gas, gwei, gas-price, network-congestion, layer-2.
Define — A rug pull is when a project's operators withdraw the funds backing a token and disappear. It is taught in full at track 8; here it is the aftermath being described.
Decode — "A trail of rugs" is a serial record, not one incident. The same people do this repeatedly, launch after launch, which is exactly track 8's premise.
Danger — After the pool is drained the token remains in your wallet showing a balance. There is simply nothing left to sell it against. The number is visible and unreachable.
Do — Check whether liquidity is locked and read the unlock date before buying. It is public, it is free to check, and it is the single most predictive thing you can look at.
See also — rug-pull, liquidity-locked, liquidity-pool, track 8.
Define — Connecting a wallet grants a site the ability to request signatures from it. A wallet drainer is malicious code that uses that access to empty it.
Decode — "Connect with the wrong plug" is the attack named precisely, in street language, one track before the villain arrives.
Danger — The request looks like an ordinary pop-up. Approving it can hand over blanket permission to move your tokens, and no blockchain was broken — you authorised it.
Do — Reach sites from your own bookmarks, never from links or search adverts. Read what you are signing. Keep a separate wallet for connecting to sites, holding only what you can afford to lose.
See also — wallet-drainer, phishing, contract-approval, Manual Part Four §2.
Define — Diamond hands means holding through severe falls without selling.
Decode — "Froze" is doing double duty — diamond-cold, and unable to act. The second reading is the honest one.
Danger — Frozen is what it usually is. An identity that forbids selling is not conviction; it is a decision made once, then defended rather than reviewed.
See also — diamond-hands, paper-hands, take-profits.
Define — A roadmap is a project's published plan of what it will deliver and when.
Decode — Presented as the thing that makes a project legible. Often it is the only thing a project has.
Danger — Roadmaps are free to write and quietly rewritten. Valuing a project on its roadmap is valuing an intention.
Do — Compare the roadmap against what the same team has already shipped, and when. Delivery history is the only part of this that is evidence.
See also — roadmap, vesting, dyor.
Define — Anon — taking part under a pseudonym rather than a real name.
Decode — Behind the camera rather than in front of it. Pseudonymity is normal here and not in itself suspicious; Bitcoin's author was anonymous.
Danger — Anonymity is not the risk factor people think it is, in either direction. A named team can vanish too. What matters is whether the code and the funds are verifiable, not whether faces are shown.
See also — anon, doxxing, code-audit.
Decode — The album's title track announced eight tracks early. Track 10 answers this line and changes what "dying rich" means — the claim here is about money, and the closer is not.
See also — track 10.
Define — On-chain means recorded on the public ledger rather than in a company's database.
Decode — The verse's closing instruction, and the plainest advice in the track: stay in the system where you can verify things yourself.
Do — Practise moving a small amount from an exchange to a wallet you control, and back. Doing it once while nothing is at stake is worth more than reading about it.
See also — on-chain, hold-your-own-keys, exchange, Manual Part Three §6.
Decode — The gym cliché inverted. Sometimes the pain simply does not produce the gain, which is a rare admission inside a song built on confidence.
Danger — Bear markets last years, not weeks, and newcomers consistently underestimate this. Position size is what determines whether you can sit through one — not conviction, and not the label you have adopted.
See also — bear-market, rekt, Manual Part Four §7.
5. Cryptocurrency
Act II — The World · Mid-high
Exchanges and counterparty risk
Lyrics
Annotations
Decode — "Everything" is the operative word, and it is said cheerfully. The verse opens on total commitment to the least substantiated thing available.
Danger — Concentrating everything into one position is the decision that turns a bad outcome into an unrecoverable one. Nothing else in this book matters if the position size is wrong.
See also — fomo, market-cap, track 7.
Decode — A guarantee, in a song, from a narrator who has spent two tracks telling you he is reckless.
Danger — Nobody can guarantee a return. In most jurisdictions doing so in a financial promotion is illegal, and the word is a reliable marker of either a scam or someone about to become one. Treat "guaranteed" as the end of the conversation.
See also — ponzi, fake-guru, the standing disclaimer.
Define — A smart contract is a program stored on the chain that runs exactly as written when someone calls it.
Decode — The narrator is building, not just buying. It is a small but deliberate shift — this act of the album is about the world around the asset.
See also — smart-contract, solidity.
Decode — Outsourcing the code to someone cleverer. A joke, and an accurate description of how a great many token projects are actually built.
Danger — If you did not write the contract and cannot read it, you are trusting whoever did, entirely. Anonymous contractors have written back doors into contracts they were paid to build.
Do — Look for a published audit that names the firm, the date, and the version reviewed. "Audited" with no report attached is a word, not a review.
See also — code-audit, backdoor, anon.
Define — Solidity is the main programming language for Ethereum smart contracts.
Decode — Naming the actual language grounds the track. Most of the money in decentralised apps sits behind code written in it.
See also — solidity, rust, smart-contract.
Define — An exchange is a business where you swap money for crypto. A CEX is a centralised one: the company holds the keys and controls withdrawals.
Decode — Past tense. "I use to" is the whole story — this is the setup for the best beginner warning on the record.
Danger — A balance on an exchange is a claim against a company, not coins you hold. Smaller exchanges fail more often, with less warning and less recourse.
See also — exchange, cex, counterparty-risk, Manual Part Three §1.
Define — Counterparty risk is the risk that the party holding your money fails, freezes, or absconds.
Decode — This is the moment the album hands the microphone to experience. Someone who had already been through it explained the risk, plainly, before it happened.
Do — Lead a workshop with these four bars. They contain the warning, the mechanism, and the consequence in sequence, from inside the culture rather than from a lectern.
See also — counterparty-risk, exchange, Manual Part Three §2.
Decode — The precise reframing of what depositing on an exchange is. Not storing — giving, to strangers, on the understanding you can ask for it back.
Danger — Every large collapse in this industry was a company failing, not a blockchain failing. The chain kept running throughout. The people who lost money had handed it to a business.
Do — Decide a maximum you are willing to leave on any platform, and move the rest to a wallet you control. "Not your keys, not your coins" is this bar in five words.
See also — counterparty-risk, hold-your-own-keys, cex, Manual Part Three §2.
Decode — The consequence, delivered flat and without self-pity. Two words for the loss, three for the feeling.
Danger — Anger is the documented follow-on risk. People who have just been wiped out take larger positions trying to recover, and revenge trading compounds a single loss into a pattern.
See also — rekt, fomo, Manual Part Four §7.
Define — Rekt — wrecked. Having taken a severe loss.
Decode — One word, used as punctuation, closing the verse. The lightness is exactly how the culture handles it.
Danger — The humour normalises losses that were often avoidable and discourages examining them. The post-mortem is the only part of a loss with any value in it.
See also — rekt, Manual Part Four §7.
Define — Normie — someone outside crypto. A gentle insult.
Decode — The hook is an invitation and a boundary at the same time. Come in, and know which side you are currently on.
Danger — The pressure not to be on the wrong side of that line sells a great deal. Nobody has ever lost money by taking an extra week to understand something.
See also — normie, fomo, wagmi.
Decode — Stated without decoration. Track 10 is the answer to this line, and the album's four-act shape depends on the gap between them.
See also — track 10.
Define — Lending protocols pay a return to depositors and charge borrowers, with a contract in the middle instead of a bank.
Decode — Casual, and describing a real mechanic that powers much of decentralised finance.
Danger — The yield comes from somewhere. If it is not obvious who is paying it and why, the answer is usually newly issued tokens or the next depositor — and both stop.
See also — defi, staking, ponzi, Manual Part Five §2.
Decode — The mentor figure, unnamed and unexamined, presented as a source of edge.
Danger — Paid mentors in this space are overwhelmingly selling confidence rather than accuracy, and their results are never independently checked. The next line — a price that conveniently retraces before he enters — is the sort of claim that is easy to make and impossible to verify after the fact.
Do — Ask for a full timestamped record including losses, and check whether promotions are disclosed as paid.
See also — fake-guru, dyor, pump-and-dump.
Define — A retrace is a partial move back against the recent direction, before the trend continues — or does not.
Decode — The perfect entry, every time, in retrospect. This is how trading is described by people who are not showing you their record.
Danger — Waiting for a retrace that never comes, and assuming one is temporary when the trend has actually turned, are the same error in opposite directions. Nobody knows which it is at the time.
See also — retrace, dip, buy-the-dip.
Decode — Correct about the target. Attackers do not attack the blockchain; they go for the keys, because the keys are the whole thing.
Danger — Nearly every theft is key theft dressed up as something else — a fake site, a support account that messages first, a file you opened. The cryptography is not what fails.
Do — Treat any unsolicited contact about your wallet as hostile by default. No legitimate service will ever ask for your recovery words, and support does not message first.
See also — phishing, recovery-keys, wallet-drainer, Manual Part Four §5.
Define — A maxi is a maximalist — someone who believes one chain is the only one that matters.
Decode — A status claim aimed at the people most likely to contest it. Note the stray "10" — an artefact of the source document, preserved here because bars are quoted exactly as they appear.
Danger — Much of the loudest commentary comes from people with a fixed position to defend. Advocacy is not assessment, and both directions of chain rivalry are held alongside a bag.
See also — maxi, fud, bitcoin.
Define — Gas price is what you offer per unit of computation. It rises when demand for block space rises — network congestion.
Decode — The traffic metaphor is the correct one. It is an auction for limited space, settled continuously.
Danger — Congestion arrives exactly when everyone wants to act, during crashes and launches. Planning to move funds "if things go wrong" schedules the move for the most expensive and least reliable moment there is.
Do — Rehearse the transfer you might need in an emergency while the network is quiet, with a small amount. Then you know the steps and the cost before it matters.
See also — gas-price, network-congestion, gas, layer-2.
Decode — The practical response to the previous bar, and it genuinely works: fees fall when fewer people are transacting.
Do — For any non-urgent transaction, check the current fee and simply wait if it is high. A fee tracker costs nothing and needs no wallet.
See also — gas-price, network-congestion.
Define — An angel investor funds a project very early, usually on terms the public never sees.
Decode — Stated as validation — someone with money believed in us. It is also a disclosure, if you read it as one.
Danger — Early backers often hold large allocations bought far below the public price. If they can sell freely at launch, the public is the exit by design.
Do — Look up the vesting schedule and the allocation split before buying. Both are usually published, and a large unlock next month is entirely predictable.
See also — angel-investor, vesting, whale.
Define — The dark web is sites reachable only through software that hides both visitor and host.
Decode — The fall of the coder from the previous bars, compressed into one line. It is also the album's first real step toward its villain.
Danger — What matters for the reader is not visiting it — it is that stolen credentials and personal data are traded there, and reused passwords make those useful against you.
Do — Use a password manager with a unique password everywhere, and turn on two-factor authentication using an app or hardware key rather than SMS.
See also — dark-web, opsec, doxxing, Manual Part Four §5.
Define — To moon is to rise sharply in price.
Decode — The outro's repeated claim, and the second act's thesis stated at its most exuberant. Everything from track 8 onward is the correction.
Danger — Meme coins are the highest-attrition category in a high-attrition market. The ones that worked are famous precisely because they are exceptions; the thousands that went to zero are not written about.
See also — moon, doge, shiba, market-cap.
6. Buy The Floor
Act II — The World · Mid
Layer 2s, gas, floors, sats
Lyrics
Annotations
Define — The floor is the cheapest item currently listed in a collection — an asking price, not a bid.
Decode — The title move. "Buy the floor" means take the cheapest available rather than paying up for rarity.
Danger — A floor is not a support level and nothing holds it up. If nobody bids, there is no floor at all — only a list of prices no one is paying.
See also — floor-price, buy-the-dip, dip.
Decode — Spending it rather than holding it — a rarer subject in this genre than accumulating.
Danger — In most countries spending crypto is a disposal and therefore a taxable event, calculated against what you originally paid. Buying coffee can create a tax record. Check your local rules before treating it as ordinary money.
See also — cost-basis, fiat, Manual Part Three §6.
Define — Fiat is government-issued money, valuable because a state says so and people agree.
Decode — The standard dismissal, delivered as a punchline.
Danger — Almost everyone holds both, and the exchange rate between them is where most gains and losses are actually measured. Framing it as a war makes people skip the boring, essential question of how they would convert back.
See also — fiat, exchange, Manual Part Three §6.
Define — A smart contract runs exactly as written, without anyone choosing to honour it.
Decode — The pun is the definition. A contract that keeps your word for you is precisely what this technology is.
Danger — It also keeps the word of whoever wrote it, including against you. "Contract" implies a protection that does not exist here — there is no arbitrator and no appeal.
See also — smart-contract, code-audit, backdoor.
Define — A Layer 2 is a faster, cheaper network that batches its activity back to the main chain for security. A rollup is the most common kind — it rolls many transactions into one record posted below.
Decode — "Roll up" is the technical term used as slang, and the double meaning is exact rather than decorative.
Danger — Sending funds to an address on the wrong layer is a common and often unrecoverable mistake, because the address looks identical on both. Some rollups also hold withdrawals for days by design.
Do — Before your first Layer 2 transfer, check which network the receiving address expects, and send a small test amount first.
See also — layer-2, rollup, gas, Manual Part Three §5.
Define — Decentralized means run by many independent participants rather than one company.
Decode — Said plainly, as a defining property rather than a slogan.
Danger — The word is applied to almost everything, and it is usually a marketing claim rather than a structural fact. Many "decentralised" projects have one person able to change everything.
Do — For any project, ask three questions: who can upgrade the contract, who holds the admin keys, and who controls the website. All three are checkable, and the answers are frequently "one person."
See also — decentralized, node, proxy, backdoor.
Define — Gwei is the unit Ethereum fees are quoted in — one billionth of one ETH.
Decode — The fee named as a cost of entry. You do not trade without paying for the computation.
Do — Keep a small amount of the network's own coin in any wallet you use. People routinely get stuck holding tokens they cannot move because they have no ETH left to pay the fee with.
See also — gwei, gas, gas-price.
Define — FUD — fear, uncertainty and doubt. In practice, negative claims the speaker rejects.
Decode — Cast as a monster. That framing is the problem with the word.
Danger — The label is used identically against manipulation and against accurate criticism, which makes it useless as a signal and effective as a silencer. If a claim is specific and checkable, check it.
See also — fud, dyor, maxi.
Decode — The most serious line on an otherwise buoyant track, and it is not a metaphor.
Danger — Losses in this market have led to real harm, and the culture's habit of laughing them off makes it harder to ask for help. If a loss is affecting your health or your sleep, treat that as the emergency rather than the balance. Position sizing exists for this reason before any financial one.
See also — rekt, Manual Part Four §7.
Define — A bull market is an extended period of rising prices; a bear market is its opposite.
Decode — Waiting framed as an act of endurance rather than passivity, which is closer to how it actually feels.
Danger — Bear markets last years, not weeks. Position size is what determines whether you can wait through one — conviction is not a substitute for having sized it so you can.
See also — bear-market, diamond-hands, hodl.
Decode — A flat statement of expectation. In a market with no gatekeeper, assuming honesty is the unusual position.
Danger — The next two tracks are the album making this line concrete. Anonymous teams, unverifiable claims, and no recourse mean the default posture has to be verification rather than trust.
See also — rug-pull, dyor, track 8.
Define — The ledger is public and cannot be edited, so what happened on it is checkable by anyone.
Decode — The album's cleanest statement of why any of this matters. Not that people are honest — that the record is.
Danger — It makes the ledger honest, not the people using it. Everything off-chain — the team, the promises, the roadmap, the audit that was never done — is exactly as unverifiable as it is anywhere else.
See also — blockchain, immutable, on-chain, roadmap.
Decode — Placed one line after "sinners lie", which cannot be an accident. The album keeps putting the promise and the warning side by side.
Danger — Nobody can promise a return. Read as a lyric it is bravado; read as a financial promotion it would be illegal in most places. The annotations never make claims like this, and neither should anyone asking for your money.
See also — ponzi, fake-guru, the standing disclaimer.
Define — A satoshi is one hundred-millionth of a Bitcoin. Stacking sats is accumulating small amounts steadily.
Decode — The most practically useful idea on the track: the asset is divisible, so you never needed a whole coin.
Danger — People stack on an exchange for years and never move anything into their own wallet. That is accumulating a claim against a company, not the asset.
Do — Once you have accumulated any meaningful amount, practise withdrawing a small part of it to a wallet you control. Do it early, while the amount is small enough that a mistake is a lesson.
See also — stacking-sats, hold-your-own-keys, exchange, Manual Part Two.
Define — Staking is locking up coins to help secure a network in return for a reward.
Decode — Presented as easy money, which is roughly how it is marketed.
Danger — Staked funds are frequently unavailable for days or weeks, which is precisely when you may want them. And a headline rate paid in a token that falls further than the yield is not a gain.
Do — Before staking anything, find the unbonding period and write it down. If you would be uncomfortable being unable to touch the funds for that long, do not stake them.
See also — staking, defi, liquidity-pool.
Decode — Chart-watching as relaxation. Honest, recognisable, and the thing most likely to cost the listener money.
Danger — Continuous markets plus a phone means there is no natural end to this. It converts noise into apparent signal and manufactures reasons to act where none exist.
Do — Set a fixed interval to look, and hold to it. For anyone holding for years, weekly is generous.
See also — candlestick, fomo, Manual Part Four §7.
Decode — Position as a role on a team and as a holding, at once. Playing your position means knowing what yours actually is.
Do — Write down, on one page: what you hold, why, what would make you sell, and what you could afford to lose entirely. That page is the closing exercise of this book's manual, and it is worth more than any chart.
See also — Manual Part Five, take-profits.
7. All In
Act II — The World · High / pivot
Seed phrases, generational wallets, risk tolerance
Lyrics
Annotations
Decode — The hook, and the album's hinge. Everything before this track is acquisition; everything after is consequence.
Danger — "All in" is a poker term describing a position from which there is no next hand. Applied to money you need, it removes every option you have, including the option to wait — which is the one that usually matters most.
See also — bear-market, take-profits, Manual Part Four §7.
Define — Market cap is price times circulating supply.
Decode — The falling price treated as the reason to commit harder. This is averaging down, stated as a personality.
Danger — Adding to a losing position without a limit decided in advance is the most reliable route from a survivable loss to a total one. Sometimes a falling market is repricing something permanently, and there is no rule that says it comes back.
See also — market-cap, buy-the-dip, dip, bear-market.
Decode — The motivational line, and the most quotable on the track.
Danger — It is also the sentence used to talk people out of caution, including by other people who benefit from their buying. Fear after a loss is often accurate information rather than weakness. The useful question is not whether you are scared but whether the position is sized so that being wrong is survivable.
See also — fomo, rekt, paper-hands.
Define — A dip is a short-term fall within a larger trend.
Decode — The restaurant pun runs the whole bar: dips, server, tips. Track 1 did the same joke with hors d'oeuvres, and the callback is deliberate.
Danger — "Biggest dips" means the assets that have fallen furthest, which are disproportionately the ones falling for a reason. Whether it is a dip or a decline is only knowable afterwards.
See also — dip, buy-the-dip, retrace.
Define — Phishing is tricking someone into handing over credentials or approving a transaction by impersonating something they trust.
Decode — The album's second explicit attack, and the first said in the first person. The narrator now has a hacker on staff.
Danger — Phishing is the highest-volume attack in crypto by a wide margin. It arrives as a support account that messages first, an airdrop notification, a fake wallet extension, or a sponsored search result above the real site. None of it requires breaking any cryptography.
Do — Reach every site from your own bookmarks, never from search results, links, or messages. Nobody legitimate messages you first about your wallet.
See also — phishing, wallet-drainer, fake-guru, Manual Part Four §2.
Decode — Genuinely good advice, and rare in the genre: losses are part of the activity, not evidence of failure.
Danger — It becomes harmful the moment it is used to justify not having a limit. Accepting losses and refusing to cap them are different things, and the line can be read as either.
See also — rekt, take-profits, paper-hands.
Define — Vesting releases tokens to founders and early backers gradually rather than all at once.
Decode — Mentioned as a neutral fact about the purchase. It is the most consequential thing in the bar.
Danger — Each unlock puts new supply into the market regardless of demand. Buying before a large unlock means buying immediately before the people who paid far less are able to sell.
Do — Look up the vesting schedule before buying anything with one. It is published, it is free, and a large unlock next month is entirely predictable.
See also — vesting, angel-investor, market-cap.
Define — Your keys — in practice the recovery words — are what control the wallet. Whoever has them has the funds.
Decode — Direct address to the newcomer, by name, in the middle of a boast. The album keeps stopping to make sure you heard the important part.
Danger — "Save keys" is doing enormous work in three syllables. Saved in a photo, a note app, an email, or a cloud document is how most people are robbed, and none of it involves attacking a blockchain.
Do — Write the words on paper. Two copies, two locations. Never a photo, never typed into any website, never shared with anyone claiming to be support.
See also — recovery-keys, seed-phrase, seed-phrase-loss, Manual Part Two §5.
Define — A generational wallet is one set up so someone else — a child, a partner, an heir — can reach it later.
Decode — The turn the whole album hangs on. Two bars after buying a meme coin, the same narrator is setting up wallets for his children. Greed becomes consequence in the space of one line, and the record goes dark from here.
Danger — Crypto has no next of kin process, no probate route, and no support desk. Without a plan the funds simply cease to exist for your family — this is not a rare edge case, it is the default outcome.
Do — Write down where things are and how to reach them, and keep that separate from the keys themselves. Tell one person you trust that the document exists and where to find it.
See also — generational-wallet, seed-phrase-loss, multisig, Manual Part Two §6.
Decode — The inheritance thought completed. It is about what is transferred alongside the money, which is the same subject track 10 closes on.
See also — track 10, Manual Part Five.
Decode — Defiance as the answer to being targeted. It is the posture the next two tracks exist to dismantle.
Danger — Attention is not a defence, it is the exposure. Being known as someone who holds is the precondition for nearly every targeted attack, including the physical one in track 9.
See also — opsec, doxxing, coercion, track 9.
Decode — The artist naming himself, and reframing the technology as an instrument rather than an identity. It is a quieter claim than most of the record makes, and closer to the book's own position.
See also — blockchain.
Define — A liquidity pool is a shared pot of two tokens that people trade against, funded by depositors who earn a share of the fees. The album is named after it.
Decode — The title concept, arriving at track 7 as an invitation. "Join the pool" is how these are recruited for, almost word for word.
Danger — Depositing exposes you to impermanent loss: if the two tokens move apart in price, withdrawing can leave you with less value than simply holding would have. The advertised fee yield frequently does not cover it.
Do — Before depositing into any pool, read what impermanent loss means for that specific pair. If one side is volatile and the other is not, the effect is largest.
See also — liquidity-pool, liquidity-locked, defi, Manual Part Five §1.
Decode — The two halves of the bar contradict each other, and the rhyme is the joke. Rushed and trustworthy, in sequence, with a straight face.
Danger — A rushed launch is where unaudited code, unlocked liquidity, and anonymous teams all cluster. "A project you can trust" is a claim no project can make about itself, and the ones that say it loudest tend to have the least behind it.
Do — Slow down. Nothing legitimate requires you to buy within the hour, and the urgency is manufactured precisely because checking kills the sale.
See also — rug-pull, code-audit, liquidity-locked, track 8.
Define — Solidity is Ethereum's contract language; Rust is used on Solana and several other chains.
Decode — A working detail: one language is not enough once you move between chains. It also quietly tells you the narrator is building on more than one.
See also — rust, solidity, sol.
Decode — Analytics as a flex. Watching who is watching.
Danger — It cuts the other way too. Site visits, wallet connections, and social activity are all trackable, and the same tools that measure an audience can profile a holder.
See also — opsec, doxxing, vpn.
Define — A contract approval is permission you grant a smart contract to move tokens from your wallet. It persists until revoked, and it is often unlimited in amount.
Decode — The single most useful defensive line on the album. Read carefully, it is exactly right: sign only what should be signed.
Danger — This is the slow-motion drain nobody sees coming. An approval granted months ago to a site you have forgotten remains live, and if that contract is malicious or later compromised, it can empty the wallet without any further action from you.
Do — Review your approvals periodically with a revocation tool and remove the ones you no longer use. Do it now rather than after something happens — revoking is cheap, and it is the only defence that works retroactively.
See also — contract-approval, wallet-drainer, phishing, Manual Part Four §3.
Decode — The dog-coin joke, closing the verse. It also closes the album's second act — the last light-hearted bar before the villain arrives.
See also — shiba, doge, track 8.
8. Rug Pulls Pay My Rent
Act III — The Antagonist · Dark / mid
The scam economy in its own voice
Lyrics
Annotations
This track is written from the attacker's point of view. Every annotation below carries a Danger field, and the facing Defense Sheet maps each technique to its countermeasure.
Define — A rug pull is when a project's operators withdraw the funds backing a token and disappear, leaving holders with something they cannot sell.
Decode — The album's villain introduces himself by naming his own trade and calling it tragic. The distance between "magic" and "tragic" is one rhyme and the entire moral of the record.
Danger — This is the most common way money is taken in new token markets. It requires no hacking: the operators simply use access they always had. Track 5's narrator lost a wallet to strangers; this is the voice of the stranger.
See also — rug-pull, liquidity-locked, Defense Sheet row 1, Manual Part Four §4.
Define — To mint is to create a new token on a chain — usually the first sale of an item in a collection.
Decode — The pun is the pitch. "Fresh as a mint" is a solicitation, and the whole hook is written as an advertisement.
Danger — Fake mint pages are the most common launch-day attack. The transaction they ask you to sign is not a purchase — it is an approval that lets the contract take what you already hold.
Do — Never mint from a link in a chat, reply, or message. Reach the project's real site independently and read what the transaction actually does before signing.
See also — mint, wallet-drainer, contract-approval, Defense Sheet row 2.
Decode — Target and timing, stated outright. Newcomers, at the moment they are most anxious.
Danger — This is real targeting logic. Scam volume rises during downturns, because fear makes recovery offers and guaranteed yields far more persuasive than they are in a calm market.
Do — Treat any opportunity that arrives during a crash with more suspicion, not less. Urgency plus a falling market is the exact combination this bar describes.
See also — normie, fomo, bear-market, Defense Sheet row 3.
Decode — Anonymity as operational necessity rather than principle. The same property that protects a legitimate developer protects him.
Danger — Anonymity is not itself a red flag — Bitcoin's author was anonymous. It becomes one when combined with custody of other people's funds and no verifiable delivery history.
Do — Judge the checkable things instead: is the contract verified, is liquidity locked and until when, is there an audit naming a firm and a date, and has this team shipped anything before.
See also — anon, code-audit, liquidity-locked, Defense Sheet row 4.
Define — A cold wallet keeps keys on a device that has never touched the internet. Encryption scrambles data so only a key holder can read it.
Decode — The attacker practises excellent security on his own holdings. That is not irony — it is how this actually works, and it is why the defensive advice in this book is worth taking.
Danger — Note what he protects and what he does not. Good custody hygiene protects the person holding it, whoever they are; it says nothing about whether they are honest.
Do — Take his side of it. Buy hardware direct from the maker, never from a marketplace reseller, and generate the recovery phrase yourself on the device.
See also — cold-wallet, encryption, Manual Part Two §4.
Define — A honeypot is a token you can buy but cannot sell — the restriction is written into the contract.
Decode — Kept at home, plural, like stock. This is inventory, not a one-off.
Danger — The chart looks healthy the entire time, because buys succeed and only sells fail. Everyone still holding is someone who has not yet tried to leave. You find out at the exact moment you need out.
Do — Before buying anything obscure, check whether anyone has successfully sold it. Buys with no corresponding sells is the visible shape of this trap.
See also — honeypot, token-tax, Defense Sheet row 5, Manual Part Four §4.
Define — WAGMI — "we're all gonna make it." A rallying phrase.
Decode — "From the sound of it" is the tell. He is using the community's own language as camouflage, and admitting it in the same breath.
Danger — Shared optimism is not information, and it is trivially manufactured. A channel where everyone agrees is usually a channel where everyone holds the same thing — including the people who sold it to them.
See also — wagmi, fomo, normie.
Decode — Counterfeit supply moved through a trusted contact. The "plug" is the introduction that makes it credible.
Danger — Fake tokens impersonating real projects are everywhere, using identical names and logos. Buying from a link someone trusted sent you is a standard route into one, and a warm introduction is exactly what makes people skip verification.
Do — Get contract addresses from the project's own official channel, never from a forwarded message, and compare them character by character.
See also — rug-pull, phishing, Defense Sheet row 6.
Define — Paper hands is an insult for selling quickly, usually out of fear. A bear market is an extended period of falling prices.
Decode — The attacker deploying the culture's own shaming vocabulary. He needs people not to sell.
Danger — This is the insult working as a tool. Anyone who benefits from you holding has a reason to call selling weakness. Taking profit is not weakness, and pressure not to sell should be read as information about the person applying it.
See also — paper-hands, take-profits, diamond-hands, Defense Sheet row 7.
Define — MetaMask is a widely used browser and phone wallet. It is taught fully at track 9; here it is simply the wallet being stolen from.
Decode — Trading from someone else's wallet, and calling it a rarity trait. The collectible vocabulary applied to theft.
Danger — A wallet is "stolen" when someone obtains the recovery phrase — most often from a fake wallet extension installed via a search advert, or a phrase typed into a convincing fake site. No cryptography is broken.
Do — Install wallet software only from the official site reached by your own bookmark, never a search result. No legitimate service will ever ask for your recovery phrase.
See also — metamask, phishing, recovery-keys, Defense Sheet row 8.
Decode — Money as the betrayer, so he does not have to be. It is the standard self-justification, and the album lets him make it without endorsing it.
Danger — Worth naming plainly: the people harmed here are described as friends. Most crypto fraud is committed by someone the victim already trusted, not by a stranger. Affinity fraud is the dominant pattern.
See also — ponzi, pooled-funds, Manual Part Four §5.
Decode — The title line. Not a fortune, not a yacht — rent. The scam economy as an ordinary job, which is the most unsettling thing on the record and the reason the track works.
Danger — This is accurate. Much of this activity is industrialised and routine, run by people treating it as work with volume targets. It is not rare, dramatic, or personal, and it is not aimed only at the wealthy.
See also — rug-pull, Defense Sheet, Manual Part Four §1.
Define — Taking profits means selling a portion while up, converting a paper gain into a real one.
Decode — The villain's own risk management, and it is better than the hero's. He sells. Everyone he sells to does not.
Danger — Read alongside a09, this is the whole asymmetry: he takes profits while telling everyone else that selling is weakness. Both bars are in the same verse.
Do — Decide in advance what would make you sell a portion, and write it down. Any rule beats none, because the alternative is deciding under emotion.
See also — take-profits, paper-hands, Manual Part Five.
Decode — Sell into strength, buy into weakness. Stated flatly, it is unremarkable discipline — and it is the opposite of what the crowd is doing in every other track.
Danger — Sound as a principle and dangerous as a slogan. "Buy the dip" with no limit is how people average down into something that never recovers. He has an exit; the people following the slogan do not.
See also — buy-the-dip, green-candle, dip.
Define — Bored Ape is a well-known profile-picture NFT collection launched in 2021, which became the reference point for the category.
Decode — The status symbol of the last cycle, invoked as shorthand for the whole scene.
Danger — It was the exception, not the template. Most collections that copied it are now worth close to nothing, and reasoning from its peak prices to any other collection is how a great deal of money was lost.
See also — bored-ape, floor-price, mint, Manual Part Five §3.
Define — A candlestick shows the open, close, high and low over one period.
Decode — The question everyone asks at the same moment, and nobody can answer.
Danger — Candlestick patterns are widely sold as predictive. A chart records what already happened; it is a description, not a forecast. Anyone charging for the ability to read the future in them is selling confidence.
See also — candlestick, fake-guru, retrace.
Decode — "This game ain't honest" is offered as the justification: everyone does it, so doing it is neutral.
Danger — The reasoning is worth naming because it is the standard one, and because it is how people talk themselves across the line. The market having bad actors is not a defence for being one, and it is not a reason to assume everyone is.
See also — rug-pull, dyor.
Decode — The boast is about impunity, not wealth. He has not been caught, and he expects not to be.
Danger — Largely accurate, and the reason self-defence matters more here than elsewhere. Cross-border, pseudonymous, low individual loss amounts — most of this is never prosecuted, and there is no chargeback. Prevention is effectively the only remedy.
See also — rug-pull, immutable, Manual Part Four §1.
Define — Doxxing is publishing someone's real identity, address, or workplace, usually to intimidate them.
Decode — The escalation from financial attack to personal attack, and the moment track 8 hands off to track 9.
Danger — On a public ledger, linking a name to an address exposes a balance permanently and to everyone. That link is what turns a holder into a target, and it cannot be undone once made.
Do — Keep public activity separate from the wallets holding savings. Do not publish addresses next to your name, and check what photographs reveal about where you live.
See also — doxxing, opsec, coercion, Defense Sheet row 9, track 9.
Decode — The first physical threat on the album. It is glancing, and it is the door track 9 walks through.
Danger — Robbery of crypto holders in person is a documented and growing category. It bypasses every technical defence, because cryptography protects keys from computers and does nothing about a person in the room.
See also — coercion, duress-wallet, multisig, track 9.
Decode — Advice, from the attacker, and it is correct. He is telling you what he does and expecting it to change nothing.
Danger — Comfort is the actual vulnerability. Most people are careful with their first transaction and careless by their fiftieth, and that is precisely when the loss happens.
Do — Keep the same routine at transaction one thousand as at transaction one: bookmark, verify the address, small test amount, read what you are signing.
See also — rug-pull, contract-approval, Manual Part Four.
Define — Two different things share this word. Token tax is a fee written into a token's own code taking a cut of every buy or sell. Government tax is what this bar means.
Decode — The mundane consequence nobody puts in a song, dropped in by the villain as a parting unpleasantness.
Danger — Both apply. A contract's sell tax can often be raised after launch, to near-total, once enough people are in. And in most countries every disposal is a taxable event, including swapping one token for another — people discover a large bill for trades that netted them nothing.
Do — Read the contract's buy and sell tax before purchasing, and keep a running record of dates, amounts, and values in your own currency from the start.
See also — token-tax, cost-basis, honeypot, Manual Part Three §6.
Define — Pooled funds — several people's money combined, with one party controlling the wallet.
Decode — The Robin Hood inversion is the joke: taking from those he was supposed to be managing for.
Danger — This is affinity fraud, the most common serious loss pattern in retail crypto. Someone trusted offers to manage funds for family or friends, holds a single wallet, and can leave with everything whatever was agreed.
Do — Never hand funds to an individual to manage. If money must be pooled, use a multisig with independent signers so no one person can move it alone.
See also — pooled-funds, multisig, ponzi, Defense Sheet row 10.
Decode — Targeting an older relative, and admitting the compulsion in the same line. It is the closest the character comes to self-awareness.
Danger — Older people are targeted deliberately and disproportionately, most often through romance approaches, fake support calls, and "recovery" services that promise to retrieve funds already lost. The recovery scam is a second theft aimed at people who have already been robbed once.
Do — Tell the older people in your life two rules: nobody legitimate asks for a recovery phrase, and nobody who contacts you first can get your money back.
See also — fake-guru, phishing, Manual Part Four §5.
Define — Gas is the fee to have a transaction processed; it rises with demand for block space.
Decode — The two conditions together, named as the moment of maximum chaos.
Danger — This is the trap in one bar. Prices crash and fees spike simultaneously, so the moment you most want to move funds is the moment it is most expensive and least reliable. Transactions stall or fail, and people panic into worse decisions.
Do — Rehearse any emergency transfer while the network is quiet, with a small amount, so you know the steps and the cost before you need them.
See also — gas-price, network-congestion, layer-2.
Decode — He knows exactly why. The victim cannot transact because the contract does not permit it, and the feigned incuriosity is the cruelty.
Danger — This is the honeypot from the inside. The balance is visible, the wallet is intact, and the sell simply fails. Nothing was stolen in a way any explorer will show as theft.
Do — Check that sells are going through for any token before you buy it. A token with buys and no sells is this bar.
See also — honeypot, token-tax, Defense Sheet row 5.
Decode — The victim, later, holding a fraction of what they put in. This is the outcome the whole track has been describing, seen from the other side.
Danger — "A fraction" is the realistic result, not zero and not recovery. People stay in a position that has lost most of its value because selling makes the loss final, and the fraction erodes further while they wait.
See also — rekt, bear-market, take-profits.
Define — The seed phrase is the list of words that restores a wallet. Lose it and the funds are unreachable permanently; there is no reset and no appeal.
Decode — The album's darkest joke, and the last line of the verse. Not stolen — mislaid. Written on a napkin, and the napkin thrown away.
Danger — This is not a hypothetical. A substantial share of all Bitcoin is already permanently unreachable this way. Fire, flood, a house move, and a tidy-up end more wallets than attackers do, and there is nobody to appeal to.
Do — Write the words on paper or stamped metal, never a napkin, note app, photo, or cloud document. Two copies, two separate buildings. Then test a recovery with a small amount, so you know the copy actually works before you need it.
See also — seed-phrase-loss, recovery-keys, generational-wallet, Manual Part Two §5.
Defense Sheet
This track is written from the attacker's point of view. Everything described here is a real technique with real victims. Read the left page for the attack. Read this page for the defence.
The attacks, and what stops them
| # | The attack (from the lyric) | How it actually works | What stops it |
|---|---|---|---|
| 1 | "Rug pulls pay my rent" | The operators withdraw the funds backing the token and disappear. No hacking — they use access they always had. The token stays in your wallet with nothing left to sell it against. | Check that liquidity is locked and read the unlock date before buying. It is public and free to check. A lock expiring next week is not a lock. |
| 2 | "Invest with me, I'm fresh as a mint" | A fake mint page, promoted on launch day. The transaction is not a purchase — it is an approval letting the contract take what you already hold. | Never mint from a link in a chat, reply, or message. Reach the project's real site independently. Read what the transaction actually does before signing. |
| 3 | "Will scam a normie, when the market dips" | Deliberate targeting of newcomers during downturns, when fear makes guaranteed yields and recovery offers persuasive. | Treat opportunities arriving during a crash with more suspicion. Urgency plus a falling market is the exact combination being described. |
| 4 | "Anonymous. That's the way that I'm livin" | Anonymity plus custody of other people's funds, with no delivery history to check. | Judge the checkable things: verified contract, locked liquidity with a date, an audit naming firm and version, and what the team shipped before. Anonymity alone is not the red flag — anonymity plus custody is. |
| 5 | "Honey pots in my Shiba crib" · "you won't make transactions" | The contract permits buying and blocks selling. The chart looks healthy throughout because only sells fail. | Before buying anything obscure, check that sells are going through. Buys with no corresponding sells is the visible shape of the trap. |
| 6 | "Hit my plug with straight counterfeit" | Fake tokens impersonating real projects — identical name, identical logo — passed through a trusted introduction so verification gets skipped. | Get contract addresses from the project's own official channel, never a forwarded message, and compare them character by character. |
| 7 | "Paper hands will never last thru the bear" | The culture's shaming vocabulary used to stop holders selling, by someone who benefits from them holding. | Read pressure not to sell as information about the person applying it. Note that the same verse says "take profits" — he sells; you are told not to. |
| 8 | "Trade from a stolen Metamask" | The recovery phrase is obtained — usually a fake wallet extension from a search advert, or a phrase typed into a convincing fake site. No cryptography is broken. | Install wallet software only from the official site via your own bookmark, never a search result. No legitimate service ever asks for a recovery phrase. |
| 9 | "Got my young hacker doxxing their whole clique" | Real identity published and linked to a wallet address. On a public ledger this exposes the balance permanently, to everyone. | Keep public activity separate from savings wallets. Never publish an address beside your name. Check what photographs reveal about where you live. |
| 10 | "Stole from your family managing Robinhoods" | Affinity fraud. Someone trusted offers to manage funds for family or friends, holds one wallet, and leaves with everything. | Never hand funds to an individual to manage. If money must be pooled, use a multisig with genuinely independent signers so no one person can move it alone. |
| 11 | "Seed phrase lost in the napkin it was wrapped in" | Not theft — loss. The words are mislaid, and there is no reset, no appeal, and nobody to ask. | Paper or stamped metal, two copies, two separate buildings. Never a photo, note app, or cloud document. Then test a recovery with a small amount. |
Threat model summary
The person in this track is not a hacker and does not attack the blockchain. He runs a small business built on ordinary access — he launches tokens, controls their liquidity, and withdraws it. His targets are newcomers, people he already knows, and the elderly, and his advantage is that almost none of this is ever prosecuted: cross-border, pseudonymous, individually small. Realistically, anyone buying a new token from an unverified team is exposed to this, and the exposure is proportional to how new the token is and how little of it can be checked. The defence is not sophistication. It is refusing to skip four free checks — liquidity lock, contract verification, holder concentration, and whether sells work.
The one thing
Before you buy anything, check that liquidity is locked and that other people can still sell — both are free, public, and take about ninety seconds.
9. Keys Please
Act III — The Antagonist · Dark / peak menace
Physical coercion, the wrench attack
Lyrics
Annotations
This track is written from the attacker's point of view. It describes a real category of attack with real victims. Every annotation carries a Danger field, and the facing Defense Sheet maps each technique to its countermeasure. Nothing here is described in more detail than the defence requires.
Define — Rekt — wrecked, having taken a severe loss.
Decode — The dismissal that opens the track. Two words, no sympathy, establishing the voice before the attack begins.
Danger — This indifference is the point. The person on the other side of a coercion attack is not weighing your circumstances, and appeals to fairness or hardship do not work on someone who has already decided.
See also — rekt, coercion.
Decode — The chain as jewellery, worn visibly. The pun runs the whole album's theme through a single accessory.
Danger — Visible wealth is the selection criterion for this attack. The chain here is literal, but the modern equivalent is a public wallet address, a screenshot of a balance, or a post about a good year.
Do — Assume anything you post about holdings is permanent and searchable. The most effective defence against everything in this track is not being identifiable as a holder in the first place.
See also — opsec, doxxing, Defense Sheet row 1.
Define — Paper hands — an insult for selling quickly, usually out of fear.
Decode — The culture's shaming vocabulary turned into a threat. Same words as track 8, delivered with menace instead of mockery.
Danger — Under pressure, people comply to end the situation. That is the correct response — but it is worth understanding in advance that the pressure is designed to produce it, so the preparation has to happen beforehand rather than in the moment.
See also — paper-hands, duress-wallet, coercion.
Define — Coercion is forcing someone to hand over keys through threat or pressure, rather than by breaking anything technical. It is often called a wrench attack — the joke being that no amount of encryption survives a wrench.
Decode — The hook, and the politeness is the horror. "Please" is what makes it a demand rather than a request.
Danger — This attack ignores every technical defence in this book. Cryptography protects keys from computers. It does nothing about a person standing in front of you, and no password strength changes that.
Do — Hand over what is asked for. Nothing on a chain is worth harm. The preparation that matters — a duress wallet with a believable balance, savings behind a multisig — has to exist before the moment, because in the moment there are no options left.
See also — coercion, wrench-attack, duress-wallet, multisig, Defense Sheet.
Define — MetaMask is one of the most widely used browser and phone wallets. For most people it is the first wallet they hold their own keys in.
Decode — The album's best and worst pun: the wallet's name as a literal mask. The software you use to protect yourself, worn by the person coming for you.
Danger — A wallet on a phone or laptop is reachable by anyone who has you and the device. Convenience custody assumes the threat is remote, and this attack is the case where it is not.
Do — Keep only spending money in a hot wallet on a phone or browser. Savings belong in cold storage, and ideally behind a multisig, so that having you and your phone is not sufficient.
See also — metamask, cold-wallet, multisig, Defense Sheet row 2.
Define — Multisig is a wallet requiring several separate keys to approve a transaction — two of three, for example.
Decode — "Every combination" concedes the defence in the act of demanding it. He needs all of them, which means one is not enough.
Danger — This is precisely why multisig matters here. If every key is in one house, or held by one person, the arrangement provides nothing under coercion — it looks like security and functions as a single point of failure.
Do — If you use multisig, split the keys across locations and people. A two-of-three where one key is with a trusted person elsewhere means no single moment of pressure can move the funds.
See also — multisig, decoy-balance, duress-wallet, Defense Sheet row 3.
Decode — The offer, phrased as reassurance. Compliance presented as the route out.
Danger — Compliance is the right choice, and it is also being used as leverage. The reason to prepare in advance is so that cooperating costs you a decoy rather than everything — you can comply fully and still not lose the savings.
Do — Set up a duress wallet holding a small amount with ordinary past activity. It gives you something real to hand over, which is what ends the search.
See also — duress-wallet, decoy-balance, Defense Sheet row 4.
Define — A duress wallet is a separate wallet holding a modest amount, kept specifically so it can be surrendered under threat.
Decode — The single most important bar on the album. The defence appears inside the attack — the victim had a decoy, used it, and the attacker noticed.
Danger — The failure mode is named exactly: the decoy did not hold up. An empty wallet, or one with no transaction history, reads as staged and invites another round of questions.
Do — Make the duress wallet real. Fund it with an amount that is plausible for you, use it occasionally so it has genuine history, and keep it on the device someone would actually find.
See also — duress-wallet, decoy-balance, seed-phrase, Defense Sheet row 4.
Decode — Stated plainly and without relish. It is the most honest line in the track.
Danger — There is no physical defence being recommended here, and this book does not suggest resistance. The asymmetry is real, and the only defences that work are the ones already in place before anyone arrives.
Do — Move the contest earlier. Do not be identifiable as a holder, keep savings where handing over a phone does not reach them, and keep a decoy for the moment itself.
See also — coercion, opsec, multisig, Defense Sheet.
Define — SOL is the native coin of Solana, a fast, low-fee chain. A seed phrase is the handful of ordinary words that restore a wallet — they are the money.
Decode — The pun on soul and SOL is the track's cruellest, and the transaction is complete in one line: he curses them, and he hands it over anyway.
Danger — Once a seed phrase is spoken, it is gone permanently. There is no revocation, no password change, and no way to make those words stop working. This is the difference between a compromised bank account and a compromised wallet.
Do — Never store a phrase anywhere it could be read from a screen or a photograph, and never type it into any website. If a phrase is ever exposed, move the funds to a newly generated wallet immediately — that is the only remedy that exists.
See also — sol, seed-phrase, recovery-keys, Manual Part Two §3.
Decode — The proceeds, stated with a timeline. A weekend's work.
Danger — The speed is the practical point. Once keys are handed over, funds move within minutes and are frequently swapped across chains before anyone is in a position to report anything. There is no freeze, no reversal, and no recovery service that can undo it — anyone promising otherwise is running the second scam.
Do — Understand that reporting after the fact will not return the funds. That asymmetry is the entire argument for the Defense Sheet on the facing page.
See also — coercion, immutable, fake-guru, Defense Sheet.
Decode — Prey and pray, closing the verse. The album's villain at his most explicit, and the last thing said before the record turns toward its resolution.
Danger — Worth stating plainly and proportionately: most readers are not likely targets of physical violence. The realistic risk profile is narrow — people who post about holdings publicly, people known locally as traders, people who attend events wearing it. That is who this happens to.
Do — The defence is boring and it works: be unremarkable. Do not announce what you hold, do not publish addresses beside your name, and keep savings behind something that a single confrontation cannot reach.
See also — coercion, opsec, doxxing, Defense Sheet, Manual Part Four §6.
Defense Sheet
This track is written from the attacker's point of view. Everything described here is a real technique with real victims. Read the left page for the attack. Read this page for the defence.
This is the attack that ignores everything else in this book. Cryptography protects keys from computers. It does nothing about a person standing in front of you. Security people call it the wrench attack, from the observation that no encryption strength survives someone with a wrench — and it is the one threat where the countermeasures have to be in place beforehand, because in the moment there are no options left.
The attacks, and what stops them
| # | The attack (from the lyric) | How it actually works | What stops it |
|---|---|---|---|
| 1 | "Block chain matches my belt" | Target selection. Visible wealth is the criterion — historically jewellery, now a public wallet address, a balance screenshot, or a post about a good year. | Do not be identifiable as a holder. This is the largest defence by a distance, and the only one that operates before anyone chooses you. |
| 2 | "Metamask on my face, when we run in his place" | A hot wallet on a phone or laptop is reachable by anyone who has both you and the device. Convenience custody assumes the threat is remote. | Keep only spending money in a phone or browser wallet. Savings go to cold storage, so that having you and your phone is not sufficient. |
| 3 | "And we need every combination to the safe" | He needs all the keys — which concedes that one is not enough. Multisig defeats this, but only if the keys are genuinely separated. | Two-of-three multisig with one key held by a trusted person elsewhere. If every key is in one house or with one person, it looks like security and functions as a single point of failure. |
| 4 | "Gave me his phrase but his keys were fake" | The victim had a decoy and it did not hold up. An empty wallet, or one with no transaction history, reads as staged and invites another round. | A duress wallet with a believable balance and genuine past activity, on the device someone would actually find. It has to be real enough to end the search. |
| 5 | "if he cooperates, everyone safe" | Compliance offered as the route out — and it is the right choice. The leverage works precisely because complying is correct. | Prepare so that complying costs a decoy rather than everything. You can cooperate fully and still not lose the savings. |
| 6 | "He cursed our SOL but gave me his seed phrase" | Once spoken, a seed phrase cannot be revoked. There is no password change and no way to make those words stop working. | Never store a phrase where it can be read from a screen or photographed, and never type it into a website. If one is ever exposed, move the funds to a newly generated wallet immediately — that is the only remedy that exists. |
| 7 | "We made a million dollars by Sunday" | Funds move within minutes and are swapped across chains before anything can be reported. No freeze, no reversal. | Nothing after the fact. This row has no defence and that is the point — which is why rows 1 to 4 are the whole of it. Anyone promising to recover stolen crypto is running the second scam. |
Threat model summary
Be honest about proportion: most readers are not plausible targets of physical violence, and telling people otherwise makes them stop listening. This happens to a narrow and identifiable group — people who post publicly about what they hold, people known locally as traders, people who turn up to events visibly wearing it, and people whose address has been linked to a name. If none of that describes you, the realistic risk is low and rows 1 and 2 are sufficient. If some of it does, rows 3 and 4 are proportionate and neither is expensive. Nobody needs a safe deposit box or a security detail.
There is no physical defence recommended anywhere on this page. Resistance is not the advice. Hand over what is asked for — nothing on a chain is worth harm, and the preparation exists so that handing it over is survivable.
The one thing
Do not let anyone learn what you hold — and keep enough in a believable decoy that handing it over ends the conversation.
10. Dying Rich
Act IV — Resolution · Anthemic close
Patience, self-custody, community, what money isn't
Lyrics
Annotations
Define — Buying the dip means buying after a fall, on the view that the fall is temporary.
Decode — The album's most repeated instruction, used here as a refrain rather than a bar. Track 1 made the same joke about hors d'oeuvres; by track 10 it has become a discipline.
Danger — Some falls are the market repricing something permanently. Averaging into those, without a limit set in advance, is how a small loss becomes the whole position. "Buy the dip" is a slogan, and slogans have no exit condition.
See also — buy-the-dip, dip, retrace, bear-market.
Decode — Endurance as the closing theme. After the villain act, the record's answer is patience rather than cleverness.
Danger — There is a real distinction between not panicking and not thinking. Bear markets run for years, and "don't quit" is only survivable if the position was sized so that waiting is possible. Conviction does not pay rent.
See also — bear-market, diamond-hands, paper-hands.
Decode — The title, and it is deliberately ambiguous for the whole track. It reads as a boast about money until the last line of verse 2 redefines it. The album's final move is to change what this sentence means.
See also — dying-rich-a27, track 4.
Define — FOMO — fear of missing out, the pressure to act because others appear to be profiting.
Decode — Two of the album's own tracks named in four words. It is a summary of the record's second act, delivered from the far side of it.
Danger — "They'll regret it" cuts both ways and the bar does not say which. Peak attention and peak price arrive together, so acting on FOMO reliably means arriving after the people you are copying.
See also — fomo, track 7, moon.
Decode — Past tense, and stated as routine. The resolution track treats attack as an ordinary condition of participating rather than a dramatic event.
Danger — That framing is correct. Attempts are constant and automated — phishing messages, fake support, drainer sites — and treating them as exceptional is what makes people careless by their fiftieth transaction.
Do — Build the routine that survives boredom: bookmarks not links, verify addresses, small test transfers, read what you sign, revoke old approvals.
See also — phishing, wallet-drainer, contract-approval, Manual Part Four.
Decode — Being right about the direction and losing anyway. It is the most sophisticated admission on the album.
Danger — This is genuinely common and rarely discussed. Correct thesis, wrong timing or wrong size, same outcome. It is why position sizing matters more than analysis, and why "I was right eventually" is not a result.
See also — retrace, take-profits, Manual Part Four §7.
Decode — The album's plainest statement of belief, in its plainest words.
Danger — This annotation does not endorse it. Nothing in this book recommends buying any asset, and "it's the future" is a claim about the world, not a mechanic that can be checked. The songs are art and art is allowed opinions; the annotations are not.
See also — bitcoin, the standing disclaimer.
Decode — Mansa Musa, the fourteenth-century ruler of Mali, is often described as the wealthiest individual in recorded history, and is remembered as much for giving wealth away. Choosing him over any modern billionaire is the track's thesis in one reference: the measure is what was distributed, not what was accumulated.
See also — dying-rich-a27.
Decode — The two responses to a downturn, set against each other.
Danger — There is a third the bar omits, and it is the most common: people who quietly stop looking. Disengaging after a loss leaves funds on exchanges, approvals unrevoked, and seed phrases unchecked for years. Walking away from the screen is fine; walking away from the custody is not.
See also — contract-approval, seed-phrase-loss, hold-your-own-keys.
Define — To be doxxed is to have your real identity published. Here it is voluntary — the artist is publicly identifiable.
Decode — A deliberate contrast with track 8's anonymous operator. Being nameable is offered as a form of accountability.
Danger — It is also the exposure track 9 is entirely about. Being publicly identifiable as a holder is the selection criterion for coercion, and this is a genuine trade-off the album makes visible rather than resolving.
Do — If you choose to be public, separate the identity from the holdings: never publish an address beside your name, and keep savings behind multisig or cold storage.
See also — doxxing, opsec, multisig, track 9.
Define — GM — "good morning", the standard greeting across crypto communities.
Decode — The small daily ritual that is, genuinely, most of what is said in some channels. Placed here it reads as community rather than noise, which is the resolution track's whole disposition.
See also — gm, wagmi.
Decode — A direct rejection, unhedged, in a genre that usually treats every token as fair game for a joke.
Danger — Worth stating plainly: tokens using racist imagery are a real and recurring category, frequently launched to farm outrage attention before a rug pull. The offensiveness is the marketing, and the exit is the plan.
See also — rug-pull, pump-and-dump.
Decode — The album asking whether the technology caused any of this. The answer it gives — nothing has changed — is that the behaviour predates the tools. It is the same position the manual takes: the ledger is honest, the people are not, and that was always true.
See also — blockchain, Manual Part Four §1.
Define — A wallet drainer is malicious code that, once you approve its request, empties the wallet you connected.
Decode — Sympathy rather than mockery. After two tracks in the attacker's voice, the record returns to the victim's side deliberately.
Danger — The request looks like an ordinary pop-up, and approving it can grant blanket permission to move your tokens. Nothing was broken — you authorised it, which is also why nothing can be reversed.
Do — Reach sites from bookmarks, read what you are signing, keep a separate wallet for connecting to sites, and revoke old approvals periodically.
See also — wallet-drainer, contract-approval, phishing, Manual Part Four §2 and §3.
Decode — Loss placed before gain, in the sentence and in the sequence. It is the closing statement of the album's pedagogy: you learn how to lose money before you learn how to move it, which is also why this book's safety chapter comes before its tutorial.
See also — Manual Part Four, Manual Part Five.
Decode — Paid promotion again, now from the selling side. Track 2 paid for it; here it is being offered.
Danger — Much of what reads as organic enthusiasm is purchased placement. Trending is a product with a price list, and undisclosed paid promotion is the engine of most coordinated buying.
Do — If you cannot tell why something is in front of you, assume someone paid for it to be. Check whether promotion is disclosed as paid.
See also — pump-and-dump, fake-guru, track 2.
Define — Holding your own keys means keeping funds in a wallet you control rather than on a company's platform.
Decode — The album's central instruction, shouted, in its closing track. Everything from track 2's "you need a wallet" arrives here.
Danger — Self-custody transfers the risk rather than removing it. Nobody can freeze your funds, and nobody can recover them either. The failure mode changes from counterparty collapse to seed phrase loss, and the second is at least as common.
Do — Move a small amount to your own wallet and practise restoring it from the written phrase. Doing that once, while the amount is trivial, is what makes self-custody safe rather than merely principled.
See also — hold-your-own-keys, self-custody, seed-phrase-loss, Manual Part Two.
Define — HODL began as a misspelling of "hold" in a 2013 forum post and was later backfitted to "hold on for dear life".
Decode — The backronym spelled out in full, then immediately questioned. "Who's the last man standing?" is not a confident line.
Danger — Survivorship is the trap in the question. The people still standing are the ones who write the history, which makes holding look more reliable than the full record supports.
See also — hodl, diamond-hands, rekt.
Define — A backdoor is a hidden route into a system or contract that bypasses the normal rules. In a smart contract it can let one address mint, freeze, or withdraw at will.
Decode — Named as an attack from outside, though the more common version is built in from the start by whoever wrote the contract.
Danger — Published code is not necessarily the code that is running, and it need not stay the same. Behind an upgradeable proxy, whoever holds the upgrade key can change what the contract does after you have committed funds.
Do — Prefer contracts that are verified on a block explorer, audited, and either not upgradeable or upgradeable only by a multisig with a time delay. Check who holds the admin keys.
See also — backdoor, proxy, code-audit, smart-contract.
Define — A firewall controls what may reach your device over a network.
Decode — Ordinary computer security, named among the crypto-specific defences. It belongs there.
Danger — Most crypto losses begin with an ordinary compromised device — an unpatched browser, a malicious download, a reused password — not with anything exotic.
Do — Update your operating system and browser. It is dull, and it prevents more losses than any clever measure in this book.
See also — firewall, encryption, dark-web, Manual Part Four §2.
Define — A 51% attack is when one party controls the majority of a network's mining or staking power and can reorder or reverse recent transactions.
Decode — The most technical term on the album, dropped in without explanation. It is the theoretical worst case for a chain itself.
Danger — It is not a realistic threat to large chains, where the cost is prohibitive, but small chains have genuinely suffered it. The practical relevance is that a chain's security is proportional to how much work or stake defends it — a new chain with few participants is not the same asset class as an old one.
See also — 51-percent-attack, node, decentralized.
Define — A token tax is a fee written into a token's own code that takes a cut of every buy or sell.
Decode — No trading volume, and a tax on what little there is. It is a description of a token in its final state.
Danger — The rate can often be changed after launch. A token can be built so the sell tax is raised to near-total once enough people are in, which is a honeypot arrived at gradually rather than at the outset.
Do — Read the contract's buy and sell tax, and check whether the rate can be modified, before buying.
See also — token-tax, honeypot, rug-pull.
Define — Pooled funds — several people's money combined, with one party controlling the wallet.
Decode — Cause and effect in five words. Pooling, then skimming, presented as the natural sequence.
Danger — Whoever holds the keys can leave with everything, whatever was agreed, and group buys run from one personal wallet on trust are a standard loss pattern. Track 8 said the same thing from the other side.
Do — If funds must be pooled, use a multisig with genuinely independent signers so no one person can move the money alone. Otherwise hold your own share.
See also — pooled-funds, multisig, ponzi, track 8.
Define — Probably nothing is sarcasm — used when posting something the speaker considers highly significant.
Decode — The grin is the giveaway. The phrase is a hype device dressed as understatement, and the bar shows it being deployed knowingly.
Danger — React to the underlying fact rather than the framing. Usually there is no verifiable claim attached at all — just a screenshot and an implication.
See also — probably-nothing, fud, dyor.
Define — A token burn permanently destroys tokens by sending them to an address nobody holds the keys to, reducing supply.
Decode — "We know the speech" is the weariness of someone who has heard the promise many times. Burns are announced far more often than they are performed.
Danger — A burn announcement is not a burn. And a burn that reduces supply by a fraction of a per cent is a press release, not a mechanic.
Do — Look up the burn transaction on a block explorer. It is public, and either it exists with an amount attached or it does not.
See also — token-burn, block-explorer, roadmap.
Define — A seed phrase is the set of words that restores a wallet. Lose it and the funds are unreachable permanently.
Decode — Offered here as friendship — the narrator as the person you can call. Read as a lyric, it is warmth.
Danger — Read as a message from a stranger, this exact sentence is the recovery scam, and it is one of the most common frauds in this space. It targets people who have already been robbed once. Nobody can recover a lost seed phrase — not a company, not a service, not a specialist. Anyone who says they can will ask for a fee, or for the phrase itself, and take what is left.
Do — Treat any unsolicited offer to recover lost crypto as a second attack. No legitimate service asks for a recovery phrase, and no one who contacts you first can return your funds.
See also — seed-phrase-loss, fake-guru, phishing, Manual Part Four §5.
Decode — A plan existed, and it was made together. Two bars later it is broken. This is the album's last piece of teaching, and it is about process rather than assets.
Danger — The failure described is not selling — it is abandoning an agreed plan mid-position. Whichever way you deviate, the deviation is the error, because a plan changed under pressure was never a plan.
Do — Write down what you hold, why, what would make you sell, and what you could lose entirely. One page, on paper, before it is needed. That page is the manual's closing exercise.
See also — take-profits, paper-hands, Manual Part Five.
Decode — The last line of the verse, and the point of the whole record. "Dying rich" has been running as a boast about money since track 4's "Imma die rich. I won't go broke" — and it is redefined here, at the end, as being about something other than the balance.
It is the only line on the album that lands on a value rather than a trade, which is why this track closes both the record and the book. Everything before it teaches you how to hold an asset. This teaches you what holding it is for.
See also — dying-rich-a03, dying-rich-a08, track 4, Manual Part Five.
Part One — Why
Anchor tracks: I Love My Blockchain, Buy Bitcoin (BTC), Buy Ethereum (ETH)
The reader's question: why does any of this exist?
1. Who holds the ledger
Every money system in history is a record of who owns what.
That is all a bank balance is. There is no pile of notes with your name on it in a vault somewhere. There is a line in a database saying you are owed a number, and the bank's promise to honour it. The notes in your pocket are the same thing in a more portable form — valuable because a government says so and everyone agrees to go along with it.
So the interesting question about any money system is never "what is the money made of." It is: who keeps the record, and who is able to change it?
For almost all of history the answer has been a trusted institution. A bank, a clearing house, a government. That arrangement works well most of the time, and it is the reason you can dispute a fraudulent charge and get your money back. It also means the record can be edited by whoever holds it — frozen, reversed, or lost — and that you need their permission to participate at all.
Bitcoin proposed a different answer: keep the record in public, give everyone a copy, and make changing it require agreement from a majority of participants rather than permission from one of them.
Everything else in this book follows from that one substitution.
2. What a blockchain actually does
A blockchain is a shared record of transactions that everyone can check and no single party controls.
Three properties make it work.
It is shared. Thousands of computers — called nodes — each keep a full copy and independently check every rule. There is no head office. If your copy and mine disagree, the network's rules decide which is right, and it is not settled by whoever is more important.
It is public. Anyone can read it, without an account and without asking. You can look up any transaction that has ever happened on it, right now, for free, using a block explorer. This is genuinely unusual, and it is the single most useful habit this book will try to give you: when someone tells you money moved, you can go and look.
It is ordered. Transactions are gathered into blocks, and each block carries a fingerprint of the one before it. Change anything in an old block and every fingerprint after it stops matching — visibly, to everyone. That chain of fingerprints is what the word blockchain describes, and it is why rewriting history is impractical rather than merely forbidden.
What it does not do is make anything true. The ledger honestly records that an amount moved from one address to another. It has no opinion about whether the person receiving it was honest, whether the token is worth anything, or whether you were tricked.
The ledger is honest. The people using it are not necessarily. Hold onto that distinction — most of Part Four depends on it.
3. Why permanence cuts both ways
Once something is written to a chain it cannot be edited or deleted. The word for this is immutable.
This is the feature. It is why nobody can quietly reverse a payment you received, freeze your account during a dispute, or edit the record to say something else happened.
It is also the danger, and it is the same property. There is no undo button, no chargeback, no fraud department, and no support line.
Send funds to the wrong address and they are gone — not because someone is refusing to help you, but because the mechanism to reverse it does not exist. Approve a malicious transaction and it executes. Lose the words that control your wallet and the funds sit there, visible on the public ledger forever, unreachable by anyone including you.
People arriving from online banking consistently underestimate this, because every other financial system they have used had a human being somewhere in it who could fix things. Here there is not one. The absence of that person is the product.
The practical consequence: slow down at exactly the two moments where slowing down feels most annoying — sending to a new address, and approving a transaction. Send a small test amount first. Read what you are signing. Those two habits prevent most irreversible mistakes, and they cost a few seconds and a small fee.
4. Fixed supply
Bitcoin has a fixed supply: 21 million coins, ever.
That number is not a promise made by a company. It is a rule enforced by every node on the network. A block creating more would simply be rejected by everyone — the way a chess move that teleports a rook is not a controversial move but not a move at all.
This matters because the alternative, money that can be created at will, is the norm, and its consequences are why many people came to this in the first place. Whether capped supply is good economics is a real argument with serious people on both sides, and this book takes no position on it.
What this book does insist on is the reasoning. Scarce does not mean valuable. Something is only worth something if people want it, and there are thousands of tokens with strictly limited supply that are worth nothing at all. Scarcity is a necessary condition for one kind of value argument, never a sufficient one.
The related idea worth learning early is divisibility. One Bitcoin divides into 100 million units called satoshis, or sats. You never needed a whole coin. The belief that you did has kept a lot of people out of something they could have joined for the price of a coffee.
5. Programmable money
Bitcoin moves value. Ethereum added the ability to run programs.
A smart contract is a program stored on a blockchain that runs exactly as written whenever someone calls it. Nobody chooses to honour it and nobody can decline to. Once deployed, it does what it says.
That opens up everything the rest of this book covers: tokens anyone can issue, marketplaces with no company behind them, lending between strangers, and collectibles that live on a ledger instead of in a company's database.
It also opens up the failure modes.
"Contract" is a badly chosen word, because it implies a legal protection that is not present. There is no arbitrator, no court, and nobody enforcing it on your behalf. If the code permits your funds to be taken, they are taken, and the contract worked as designed. The code is the agreement in full, including the parts nobody told you about.
This is why code audit appears throughout the book. An audit is a paid review by outside security specialists, published as a report — the closest thing this field has to a safety inspection. It is genuinely useful and routinely misrepresented. "Audited" as a word on a website means nothing. An audit report naming the firm, the date, and the specific version reviewed means something, and that is what to look for.
One more wrinkle, because it catches careful people. Many contracts sit behind a proxy — an arrangement letting the logic be replaced later. It is how projects ship fixes. It also means the safe contract you read today can become a different contract tomorrow, if someone holds the key to change it. When you look at a project, ask who can upgrade it.
Written outcome
You can explain a blockchain to a friend in under a minute without using "revolutionary," "disrupt," or "the future of money."
Try it now, out loud. If your explanation includes who keeps the record, why it cannot be edited, and what that costs you as well as what it gets you, it is a good explanation.
Next: Part Two is the most important chapter in this book. Everything downstream depends on it.
Part Two — Keys
Anchor tracks: You Need A Wallet, All In
The reader's question: what am I actually holding?
This is the most important chapter in the book. Everything downstream depends on it.
⚠️ No legitimate service will ever ask for your seed phrase. Not support. Not a wallet company. Not an exchange. Not anyone claiming to help you recover funds. Nothing in this book asks you to type a seed phrase anywhere, and no exercise in any workshop will either.
1. A wallet is not an account
Start by unlearning the word.
A wallet does not hold coins. Your coins are entries on the public ledger, and they stay there. What the wallet holds is the key that proves those entries are yours and authorises moving them.
That distinction sounds academic until you notice what follows from it.
There is no account. There is no username. There is no password to reset, because there is no company holding a record of you. Nobody issued the wallet, nobody can suspend it, and nobody knows it belongs to you. If you lose access, there is no "forgot password" link, because there is nobody on the other end of it to ask.
A bank account is a relationship with an institution. A wallet is a fact about mathematics. The institution can help you; the mathematics cannot.
This is the whole ballgame, as track 2 puts it. Everything people find shocking about crypto losses traces back to expecting the first thing and having the second.
2. Public and private keys
Your wallet contains a pair.
The public key produces your address — the string you give people so they can send you funds. Share it freely. It is designed to be public, and it reveals nothing that lets anyone spend.
The private key is what authorises spending. Never share it, never type it anywhere, never photograph it. Anyone who has it has your funds, immediately and irreversibly.
The relationship between them is one-way: the address can be derived from the key, and the key cannot be worked backwards from the address. That asymmetry is the entire security model.
One consequence people find surprising: your address is public and so is your balance. Anyone with your address can see everything you hold and every transaction you have ever made. Nothing is hidden. If someone links your name to your address, they have linked your name to your net worth, permanently. Part Four returns to why that matters.
3. The seed phrase
In practice you will rarely handle a raw private key. You will handle a seed phrase — usually 12 or 24 ordinary words, in a specific order.
Those words are not a hint, a backup, or a password. They are the wallet. From them, every key can be regenerated on any device, anywhere, by anyone.
Read that again, because it is the sentence this chapter exists for. Whoever has the words has the money. No second factor, no identity check, no delay, no confirmation email. The words are sufficient.
This is why the safety notice at the top of this chapter is not boilerplate. Every legitimate wallet shows you the phrase once, during setup, and never asks for it again. Any prompt to enter your phrase — into a website, an app, a support chat, a form, a "wallet validation" tool, a "recovery service" — is theft in progress, with no exceptions, ever.
If you take one thing from this entire book, take that.
4. Hot, cold, hardware
Wallets differ in one respect that matters: whether the keys have ever touched an internet-connected device.
Hot wallets are apps and browser extensions on a device that is online. Convenient, free, and appropriate for spending money. If that device is compromised, so is the wallet.
Cold wallets keep keys on something that has never been online. An attacker who fully controls your computer still cannot sign a transaction, because the key is not there to steal.
Hardware wallets are the practical form of cold storage — a small dedicated device that signs transactions internally and never exposes the key, even to the computer it is plugged into.
The marketing around these is heavy. The honest summary is short: keep spending money hot and savings cold. Use a hot wallet for the amounts you would be annoyed to lose and a hardware wallet for the amounts you could not afford to lose. Most people need exactly this and nothing more elaborate.
Two purchasing rules, both learned expensively by other people:
- Buy direct from the manufacturer. Never a marketplace reseller, never second-hand. Tampered devices are a real attack.
- Generate the phrase yourself, on the device. If a device arrives with a phrase already printed in the box, it is a trap and the funds will be taken the moment you use it. Legitimate devices never ship with a pre-set phrase.
5. Storing it
The phrase has two failure modes, and they pull in opposite directions. It can be stolen, which argues for hiding it. It can be lost, which argues for copies. Good storage solves both at once, and most bad storage solves one by making the other worse.
Where not to put it — this list is not theoretical. These are the most common ways people are robbed:
- A photo on your phone (which syncs to the cloud automatically)
- A note in a notes app (which also syncs)
- An email to yourself
- A password manager entry, a cloud document, a screenshot
- A text message to a partner
- Anywhere it can be read from a screen someone might see or photograph
The pattern is the same in every case: the phrase ends up somewhere that is convenient because it is accessible, and accessible is the problem. None of these require an attacker to break any cryptography. They require an attacker to breach one cloud account, and cloud accounts are breached constantly.
Where to put it:
- Written on paper, by hand
- Stamped into metal if the amount justifies it — paper does not survive fire or flood
- Two copies, in two separate buildings. One copy is a single point of failure; that is how house moves, floods, and tidy-ups end wallets
- Somewhere you would not casually mention
Then do the part almost nobody does: test it. Set up a wallet, write down the phrase, send a trivial amount, then wipe the wallet and restore it from your written copy. If the restore works, you have a real backup. If it does not, you have found out while it cost you nothing.
An untested backup is an assumption, not a backup.
6. Wallets for other people
Two situations that most guides skip entirely.
Setting one up for a child or a parent. The wallet is easy; the phrase is the whole problem. A phrase a child can reach is a phrase a child can lose or show someone. A phrase they cannot reach is one they do not really control. For a young child, hold it yourself and treat it as part of your own estate. For a parent or a less technical adult, set it up together, write the phrase together, and be explicit that you will never call and ask for it — so that when someone else does, the call is obviously wrong.
The inheritance problem. This is the one nobody plans for and it is entirely predictable.
Crypto has no next of kin process. No probate route, no death certificate to present, no institution to write to. If you die without a plan, your funds do not go to your family — they simply cease to exist for everyone. This is not a rare edge case. It is the default outcome.
A workable plan has three parts and does not require a lawyer:
- A written record of what exists and where — which wallets, which devices, which exchanges. Not the phrase itself. Just the map.
- The phrase stored separately, with instructions for how to reach it that make sense to someone who does not know what a seed phrase is.
- One trusted person who knows the map exists and where to find it.
For larger amounts, a multisig wallet requiring two of three keys is the cleaner answer — you hold one, a trusted person holds one, and the third sits somewhere safe. No single key loss ends it, and no single person can take it alone.
Whatever you choose, write it in plain language for someone with no background. The instructions have to work for a person who is grieving and has never heard of any of this.
Hard constraint
Nothing in this chapter ever instructs the reader to type a seed phrase anywhere. Demonstrations use testnet or view-only wallets. No exceptions, including in live workshops.
Written outcome
You have a wallet, you have stored the phrase somewhere you can defend, and you can say out loud what happens if you lose it.
If you cannot answer that last one without hedging, go back to section 5 before moving on.
Next: Part Three is how funds get in and out — and what you are trusting at each step.
Part Three — Doors
Anchor tracks: Cryptocurrency, Buy The Floor
The reader's question: how do I get in and out?
1. Exchanges — what they are and what they aren't
An exchange is a business where you swap ordinary money for crypto and back again. It is where nearly everyone starts, and there is nothing wrong with that.
The thing worth understanding on day one is what you actually have while your funds sit there.
A centralised exchange — a CEX — holds the keys. It runs an internal database of who is owed what, and most of the trading you do never touches a blockchain at all; it adjusts numbers in that database. The chain only becomes involved when you withdraw.
So a balance on an exchange is an IOU. It is a claim against a company, not coins you hold.
The interface makes this hard to feel. It looks like online banking, it has a login and a password reset and a support form, and it says you own 0.4 ETH. But there is no deposit insurance behind it, and the resemblance to a bank is a design choice rather than a legal reality.
Track 5 says it more directly than this chapter can: you'll give your crypto away to strangers. That is the accurate description of a deposit.
2. Counterparty risk
Counterparty risk is the risk that the party holding your money fails, freezes, or absconds.
Here is the fact that ought to reframe this whole subject:
Every major collapse in this industry was a company failing, not a blockchain failing.
Mt. Gox in 2014. Celsius, Voyager, and Three Arrows in 2022. FTX in 2022, which was among the largest and most reputable-seeming venues in the field, with celebrity endorsements and a stadium named after it. In each case the chains kept producing blocks the entire time, exactly as designed. The people who lost money had handed it to a business.
This is worth naming because the public story of crypto risk is about volatile prices and shadowy hackers, and the actual dominant loss mechanism has been ordinary corporate failure — sometimes fraud, sometimes incompetence, always with a familiar-looking website up until the week it stopped.
The phrase the culture uses is not your keys, not your coins. It is not a slogan. It is a description of the legal and technical reality.
What to do about it, proportionately: exchanges are genuinely useful for buying, selling, and converting. Use them for that. Decide a maximum you are willing to have sitting on any platform at any time, and move the rest to a wallet you control. The right maximum for most people is "the amount I am actively trading with," not "everything."
3. KYC
KYC means Know Your Customer. Almost any exchange dealing in ordinary money will require it: photo identification, proof of address, sometimes a selfie or a video check.
This is not optional and it is not a scam. It is anti-money-laundering law, and it applies to banks in the same way.
What it means practically:
- Your identity is linked to your withdrawal addresses. The exchange knows which chain addresses you sent funds to, and that record persists.
- The data is held by the exchange, which makes it a target. Exchange customer databases have leaked, and those leaks have been used for targeted phishing and, in a small number of cases, for physical targeting.
- Verification takes time. Doing it when you are calm rather than when you urgently need to sell is simply practical.
Use a strong unique password and app-based two-factor authentication on any account with your identity documents attached. Not SMS — see Part Four.
4. Fees, gas, and congestion
Every transaction on a chain costs a fee, called gas on Ethereum and quoted in gwei.
The fee is not a fixed price. It is an auction for limited space in the next block. Offer more, get included sooner; offer too little, wait or fail.
Two consequences catch people out.
A fee can exceed the amount you are moving. Sending twenty dollars of a token can genuinely cost thirty dollars during a busy period. There is nothing to appeal to; the network does not know or care that the fee is absurd relative to your transfer.
Congestion arrives exactly when you want to act. Fees spike during crashes and popular launches — the two moments when everyone tries to transact at once. If your plan is "I'll move my funds if things go wrong," you have scheduled that move for the most expensive and least reliable moment available.
What to do:
- Check the fee in your own currency before confirming. Every time.
- For anything non-urgent, wait. Fees fall when activity does, and a fee tracker costs nothing.
- Keep a small amount of the chain's native coin in every wallet. People routinely get stuck holding tokens they cannot move because they have no ETH left to pay the fee with. The tokens are not lost; they are just immobile until you send more ETH in.
- Rehearse the transfer you might need in an emergency, now, with a small amount, while the network is quiet.
5. Layer 2s
A Layer 2 is a separate, faster, cheaper network that batches its activity back down to the main chain, inheriting the main chain's security. The most common design is a rollup, which rolls many transactions into a single record posted below.
For everyday amounts this is the difference between usable and not. Fees are frequently a small fraction of the main chain's.
The tradeoffs are real and worth knowing before you use one:
- Addresses look identical across layers. Sending to the right address on the wrong network is a common and often unrecoverable mistake. Always confirm which network the recipient expects.
- Withdrawals can be delayed. Some rollups hold withdrawals to the main chain for days by design. That is a security feature, and it is also a surprise if you did not read about it first.
- You are trusting more moving parts. The security argument is strong but not identical to the main chain's.
Before your first Layer 2 transfer: confirm the network, send a small test amount, and look up the withdrawal period.
6. Getting out
The off-ramp is the part people plan least and need most.
Getting money out generally means selling on an exchange and withdrawing to a bank account — which means an account that has passed KYC, a bank that will accept the transfer, and a record of what you paid.
Three things to sort out early, while nothing is urgent:
Have a working route before you need one. Verify the account, link the bank, and do one small withdrawal end to end. Discovering that your bank rejects crypto-related transfers, or that verification takes eleven days, is much better as a dull Tuesday than as an emergency.
Know your tax position. In most countries a disposal is a taxable event, and that includes swapping one token for another — not only cashing out. This is why cost basis matters, and why the advice in Part One was to record the date, the amount, and the value in your own currency from your very first purchase. People trade for a year, discover they cannot prove what anything cost, and are taxed on the full proceeds rather than the gain.
Understand that limits exist. Withdrawal limits, daily caps, and holds after adding a new bank account are all normal, and all of them are discovered at the worst time by people who never tested the route.
Written outcome
You can move a small amount on and off an exchange to your own wallet, and you know what you are trusting at each step.
Do it once with an amount you would not mind losing. The rehearsal is the lesson.
Next: Part Four comes before the tutorial chapter, deliberately. You learn how to lose money before you learn how to move more of it.
Part Four — Danger
Anchor tracks: Rug Pulls Pay My Rent, Keys Please
The reader's question: how do I not get robbed?
This chapter comes before the tutorial chapter. That ordering is the book's central claim about how this should be taught.
1. Thinking like an attacker
Security is always taught from the other side. Not because it is edgy, but because it is the only thing that works.
You cannot defend against an attack nobody has ever described to you. A list of rules — use strong passwords, don't click links — produces compliance without understanding, and compliance collapses the moment the attack does not look like the example. Understanding why someone is doing something lets you recognise a version you have never seen.
Security professionals call this threat modelling: who would realistically come after someone like me, what are they actually after, and what would they have to do to get it? That framing is why this album has a villain, and why he gets two tracks and speaks in the first person.
Three things worth internalising before the specifics.
Almost none of this is an attack on the blockchain. The cryptography is not what fails. Nearly every loss in this chapter is someone being persuaded to hand over a phrase, approve a transaction, or trust a company. The chain does exactly what it was told.
There is no recovery. No chargeback, no fraud department, no reversal. Most of this is never prosecuted — it is cross-border, pseudonymous, and individually small. Prevention is not the best remedy; it is effectively the only one.
Most of it is boring and industrial. Track 8's line is rug pulls pay my rent — not a fortune, rent. This is routine work with volume targets, run by people who do not know or care who you are. You do not have to be wealthy or interesting to be included.
2. Phishing and drainers
This is the highest-volume attack by a wide margin.
Phishing is tricking you into handing over credentials or approving a transaction by impersonating something you trust. A wallet drainer is the code on the other end: once you approve its request, it empties the wallet you connected.
Drainers are sold ready-made, as a service, to people with no technical skill. That is why they are everywhere.
What it actually looks like:
- A sponsored search result sitting above the real site, for a wallet or an exchange
- A fake browser extension with good reviews and a plausible name
- A "support" account that messages you first, after you post a problem publicly
- An airdrop notification telling you to connect and claim
- A mint link in a reply, on launch day, when everyone is rushing
- A message from a friend's compromised account
The request itself looks entirely ordinary. It is a pop-up asking you to sign. What you are signing may be a blanket permission to move your tokens, and once approved, nothing was broken — you authorised it, which is also why nothing can be undone.
The defences, in order of how much they buy you:
- Reach sites from your own bookmarks. Never from search results, links, or messages. This one habit removes most of the attack surface, and it is free.
- Read what you are signing. Wallets show you what a transaction does. It is dull and it is the moment that matters.
- Keep a separate wallet for connecting to sites, holding only what you can afford to lose. Savings stay in a wallet that never connects to anything.
- Nobody legitimate messages you first about your wallet. Support does not DM. Ever.
3. Contract approvals
This is the slow-motion drain, and it is the one careful people still get caught by.
A contract approval is permission you grant a smart contract to move tokens from your wallet. You grant these constantly and normally — every decentralised exchange needs one to swap on your behalf.
Two properties make it dangerous:
Approvals are usually unlimited. The default request is often permission to move your entire balance of that token, not the amount you are swapping.
Approvals persist. They stay live until you revoke them. An approval you granted eighteen months ago, to a site you have forgotten, to a project that no longer exists, is still active right now.
So the attack does not need to happen while you are watching. If that contract was malicious, or is later compromised, or the team's keys are stolen, it can empty that token from your wallet with no further action from you. People have been drained by approvals granted years earlier.
What to do: review your approvals periodically using a revocation tool and remove everything you no longer use. Do it now rather than after something happens.
This is the only defence in this entire chapter that works retroactively — it can close a hole you already opened. Track 7 gets it exactly right: I'm not signing contracts unless they should be approved.
4. Rug pulls
A rug pull is when a project's operators withdraw the funds backing a token and disappear.
There is no hacking involved. They use access they always had. Afterwards the token is still in your wallet, showing a balance, and there is nothing left to sell it against — the number is visible and unreachable.
Four checks, all free, all public, all taking about ninety seconds:
Is liquidity locked, and until when? A liquidity pool is the shared pot people trade against. If the operators can withdraw it, they can end the token whenever they choose. "Liquidity locked" is claimed far more often than it is true — open the lock contract and read the unlock date. Locked until next Tuesday is not locked.
Can people actually sell? A honeypot is a token you can buy but not sell, with the restriction written into the contract. The chart looks healthy the whole time, because buys succeed and only sells fail. Everyone still holding is someone who has not yet tried to leave. Check that sell transactions are going through.
How concentrated are the holdings? If a handful of wallets own most of the supply, a few people can end it at will. This is visible on any block explorer.
Is the contract verified, and can it be changed? Look for verified code, a real audit naming firm and version, and who holds the upgrade key. A token tax written into the code can often be raised after launch — to near-total — once enough people are in.
Anonymity, on its own, is not the red flag people think. Bitcoin's author was anonymous. Anonymity combined with custody of other people's funds and no delivery history is the red flag.
5. Social engineering
The attacks that work best do not target your software. They target the fact that you are a person having a day.
The support account that DMs first. You post a problem in a public channel; within minutes someone helpful appears. Real support does not initiate contact, and no support anywhere needs your seed phrase.
The recovery scam. This targets people who have already been robbed once, which is what makes it the ugliest thing in this chapter. Someone offers to trace and return your stolen funds, for a fee, or for your phrase. Nobody can recover a lost or stolen seed phrase — not a company, not a specialist, not law enforcement. Anyone claiming otherwise is taking what is left. Track 10 has this line word for word: Need help? Lost your seed phrase? You got me.
Romance and job scams. Long, patient, and often multi-month. A relationship or a job offer leads to a trading platform that shows excellent returns and permits small withdrawals — until the withdrawal you actually need is blocked pending a "tax" or "fee." The early withdrawals are the mechanism, not evidence against it.
Affinity fraud. The most common serious loss pattern, and the least discussed. Someone you know offers to manage funds for family or friends, holds a single wallet, and can leave with everything whatever was agreed. Track 8: stole from your family managing Robinhoods. If money must be pooled, use a multisig with genuinely independent signers so no one person can move it alone.
SIM porting. An attacker moves your phone number to their device, and every code sent by SMS goes to them — including the ones protecting your email, which protects everything else. Move two-factor authentication off SMS onto an app or hardware key, starting with your email account, and ask your provider for a port-out PIN.
Older relatives are targeted deliberately. Give them two rules that cover most of it: nobody legitimate asks for a recovery phrase, and nobody who contacts you first can get your money back.
6. Physical coercion
Sometimes there is no software involved at all.
Coercion — often called the wrench attack, from the observation that no encryption strength survives someone with a wrench — is forcing a person to hand over keys through threat or pressure. Cryptography protects keys from computers. It does nothing about a person standing in front of you.
Be honest about proportion. Most readers are not plausible targets, and telling people otherwise makes them stop listening. This happens to an identifiable group: people who post publicly about what they hold, people known locally as traders, people who turn up to events visibly wearing it, people whose home address has been linked to their name. Nobody needs a safe deposit box or a security detail.
The countermeasures, in order:
Do not be identifiable as a holder. This is the largest defence by a distance, and the only one that works before anyone chooses you. Do not publish addresses beside your name — on a public ledger that links your identity to your balance permanently. Do not post gains. Check what your photographs reveal about where you live.
Keep savings where a phone does not reach them. Only spending money belongs in a hot wallet. If having you and your device is sufficient, the rest of this is theoretical.
Multisig, genuinely separated. Two-of-three where one key sits with a trusted person elsewhere means no single moment of pressure can move the funds. Keys all in one house is not multisig in any meaningful sense.
A duress wallet with a believable balance. Something real to hand over, with genuine past activity, on the device someone would actually find. Track 9 names the failure mode precisely — gave me his phrase but his keys were fake. An empty or obviously staged wallet reads as staged and invites another round.
If it happens: comply. Hand over what is asked for. Nothing on a chain is worth harm. This book does not suggest resistance anywhere. The preparation exists so that complying costs you a decoy rather than everything.
7. Your own head
The attacker who is already inside, and statistically the most expensive one in this chapter.
FOMO. Peak attention and peak price arrive together. The moment something is most talked about is the moment earlier buyers have someone to sell to, and the people posting gains bought long before the post. Urgency is manufactured precisely because deliberation kills the sale. Nothing legitimate requires you to act within the hour.
Sunk cost. "I've already lost so much I can't sell now." The money spent is gone regardless of what you do next. The only question is whether you would buy this today at this price.
Revenge trading. After a loss, taking a larger position to make it back. This is how a single survivable loss becomes a pattern, and it is why track 5's empty wallet, left me wit anger is annotated as a danger rather than a feeling.
Identity. The culture supplies labels — diamond hands, paper hands, degen — that convert decisions into character traits. Refusing to reassess is not conviction; it is a decision made once and then defended. Anyone who benefits from you holding has a reason to call selling weakness.
The defence is a plan written in advance, on paper, while calm: what you hold, why, what would make you sell some, and what you could lose entirely. Any rule beats no rule, because the alternative is deciding under emotion at the worst available moment.
And the plainest thing in this chapter, from track 6: grief can end lives. Losses here have caused real harm, and the culture's habit of laughing them off makes asking for help harder. If a loss is affecting your health or your sleep, that is the emergency — not the balance. Position sizing exists for that reason before any financial one.
Design note
Both villain-POV tracks get a facing Defense Sheet. Every attack described gets a countermeasure. If there is no countermeasure, it does not go in.
Written outcome
You can name five specific attacks and the specific defence for each.
Try it now without looking. If you can get to five, you are better prepared than most people who have been doing this for years.
Next: Part Five is the tutorial chapter — and it comes after this one for a reason.
Part Five — Rooms
Anchor tracks: Buy The Floor, Dying Rich, and the title track's namesake concept
The reader's question: what's actually out there?
1. Liquidity pools
The album is named after one, so it is worth understanding properly.
A liquidity pool is a shared pot holding two assets — say ETH and a token — that people trade against. Instead of matching buyers to sellers through an order book, you trade with the pot, and a formula sets the price based on the ratio of what is in it.
The pot has to come from somewhere. Liquidity providers deposit both assets and earn a share of the trading fees in return. That is the pitch: deposit idle assets, earn fees. Track 7 puts it exactly as it appears in the wild — my coin's gonna moon, join the liquidity pool.
Here is the part the pitch leaves out.
Impermanent loss is what happens when the two assets move apart in price. The formula automatically rebalances the pot, which means it sells whichever asset is rising and buys whichever is falling. When you withdraw, you can end up with less total value than if you had simply held the two assets and done nothing.
The name is misleading — there is nothing impermanent about it once you withdraw. The loss is real and it is realised.
It is largest when one side is volatile and the other is not, and smallest when both move together. The advertised fee yield frequently does not cover it, which is why a headline percentage on a pool is not comparable to interest.
If you are considering this: work out what impermanent loss would be for that specific pair under a large move, before depositing. The calculators are free. If the numbers are not obvious to you, that is a complete and sufficient reason not to do it.
2. DeFi
DeFi — decentralised finance — is lending, swapping, borrowing, and earning run by smart contracts instead of institutions. No accounts, no approval, no minimum, available to anyone with a wallet.
That is a genuine achievement and it comes with a symmetrical cost: no refunds, no complaints process, no one to call, and no regulator behind it.
The question to ask about any yield, always: where does it come from?
There are only a few honest answers. Trading fees paid by other users. Interest paid by borrowers. Staking rewards issued by the network for securing it. Each is real, each is generally modest, and each stops when the underlying activity stops.
The dishonest answer, dressed up in various ways, is newly issued tokens. A protocol prints its own token and hands it to depositors, calling it yield. The percentage looks extraordinary. It works while new deposits arrive and the token holds value, and it ends when either stops — usually both at once.
The heuristic that survives contact with reality: a high, fixed return that does not vary with market conditions is not a yield. It is a promise, and promises in this space are made by people who need your deposit.
Staking is the most straightforward of these. You lock coins to help secure a network and receive a reward for it. The two things to check before doing it: the unbonding period — staked funds are often unavailable for days or weeks, which is exactly when you may want them — and whether the reward is paid in something whose price fall could exceed the yield.
3. NFTs and collections
An NFT is a token where each unit is distinct rather than interchangeable, used to represent ownership of a specific item — usually an image, sometimes music, occasionally something with a use attached.
What you actually own is a ledger entry pointing at the item. Whether that entry carries any rights depends entirely on what the project granted, which is usually less than buyers assume and occasionally nothing at all. In many cases the image itself is not even stored on the chain — just a link to it.
Floor price is the number everyone quotes: the cheapest item currently listed. It is an asking price, not a bid. That distinction is the whole subject. If nobody is buying, there is no floor — only a list of prices nobody is paying. Track 6's buy the floor and track 3's we hit the floor both treat it as a level, and it is not one.
Rarity premiums evaporate before floors do. In a falling market, rare items do not sell at a discount; they stop selling entirely, which shows on a chart as a high price and is actually no market at all.
Royalties — the resale cut promised to creators — turned out to be largely unenforceable. Marketplaces made them optional, and most trading moved to the ones that did. If a project's model depends on royalty income, that is worth knowing.
What happened to the market should be stated plainly, because the annotations describe mechanics rather than merit and this is a mechanic: trading volumes fell by well over ninety per cent from the 2021–22 peak, and the large majority of collections launched in that period are now worth close to nothing. Bored Ape was the reference point and the exception; reasoning from its peak to any other collection is how a great deal of money was lost.
The category is not gone, and the underlying technology has uses — event tickets, credentials, provenance — that have little to do with profile pictures. But anyone selling you a collection today on the strength of 2021 comparisons is selling a narrative from a previous market.
4. DAOs
A DAO — decentralised autonomous organisation — is group decision-making run on a chain. Members hold tokens, proposals are voted on, and the outcome executes automatically.
The idea is genuinely appealing: a treasury nobody can raid unilaterally, rules that execute as written, and membership open to anyone.
In practice most of them stall, for reasons that are not technical:
Voter apathy. Turnout is frequently in the low single digits. Most token holders never vote.
Concentration. One token, one vote means whoever holds the most tokens decides. A DAO where three wallets hold a majority is a company with extra steps and worse governance.
Legal ambiguity. In most jurisdictions it is unclear who is liable for what a DAO does, and members have in some cases been found personally exposed.
Coordination is hard. The interesting problems in running anything are about people agreeing, and putting the vote on a chain does not help with that.
If you join one, read the token distribution before the manifesto.
5. Where it's going
Three things institutions are actually spending money on, as distinct from what gets discussed:
Stablecoins. Tokens holding a steady value against a currency, and by a wide margin the most-used product in the field — most on-chain volume is stablecoins moving, not speculation. They are genuinely useful for cross-border payment and settlement. The risk is exactly the one from Part Three: "stable" is a promise by an issuer, backed by reserves you cannot personally inspect. Ask what backs it and who audits that.
Tokenised assets. Government bonds, money market funds, and property, issued as tokens. This is where most serious institutional work now sits. It is also the least ideologically interesting version of the technology — it is settlement infrastructure, not a revolution, which is precisely why it is being adopted.
Payments and settlement. Moving value across borders in minutes rather than days, at low cost. Unglamorous, and the clearest case where the technology is straightforwardly better than what it replaces.
Notice what is not on the list. This book de-emphasises NFTs as a category to build a future on, not because they are worthless but because the attention and the budget moved, and honesty about that is more useful to you than enthusiasm.
Closing: your one page
The final pages of this book are the ones you write.
On a single sheet of paper, by hand, before you need it:
- What you hold, and roughly what proportion of your total savings it represents.
- Why you hold it. One sentence per position. If you cannot write the sentence, that is information.
- Where the keys live. Which wallets, which devices, where the phrases are — the map, not the phrase itself.
- Who can reach it if something happens to you, and how they would know where to look.
- What would make you sell some. A number, or a date, or an event. Decided now, while calm.
- What you could lose entirely without it changing your life.
That is the whole exercise. It takes twenty minutes and it is worth more than any chart in this book.
Point 5 is the one people skip and the one track 10 ends on: my degen, we made a plan — but you sold when you made 8 grand. The failure there is not selling. It is abandoning an agreed plan under pressure. A plan changed in the moment was never a plan.
And point 6 is the one that makes everything else survivable. Position size is what determines whether you can wait through a bear market, whether a loss is a lesson or a catastrophe, and whether any of the discipline in this book is possible at all.
Written outcome
You have a one-page personal plan and a defence posture proportionate to what you actually hold.
Not what you hope to hold. What you hold.
The album's last line is "money don't make the man." It is the only moment on the record that lands on a value rather than a trade, and it is the right place to stop. Everything in this book teaches you how to hold something. That line is about what holding it is for.
Glossary
103 terms. Every term used in an annotation appears here.
51% attack attack
When one party controls enough of a network's mining or staking power to rewrite recent history.
Why it matters. It's the theoretical break in the whole model, and it has actually happened to smaller chains.
The mistake. Assuming every chain is as hard to attack as Bitcoin. Small chains are cheap to attack.
Defence. Understand that security scales with network size. Treat small-chain assets accordingly.
Angel investor money
Someone who funds a project very early, usually on terms the public never gets.
Why it matters. Early backers often hold large allocations bought far below the public price.
The mistake. Not asking who got in early and on what terms. If early holders can sell freely at launch, the public is the exit.
Anon culture
Someone taking part under a pseudonym rather than a real name. Also used to address a stranger.
Why it matters. Pseudonymity is normal here and not in itself suspicious — the founder of Bitcoin was anonymous.
The mistake. Confusing anonymity with unaccountability, in either direction. What matters is whether a project's code and funds are verifiable, not whether faces are shown.
Backdoor attack
A hidden route into a system or contract, left deliberately, that bypasses the normal rules.
Why it matters. In a smart contract it can allow one address to mint, freeze, or withdraw at will.
The mistake. Assuming published code is the code that is running, and that it cannot change. Behind an upgradeable proxy, today's safe contract can become tomorrow's backdoor.
Defence. Prefer contracts that are audited, verified on a block explorer, and either not upgradeable or upgradeable only by a multisig with a time delay. Check who holds the admin keys.
Bear market market
An extended stretch of falling prices and thin interest.
Why it matters. These last longer than newcomers expect — often years, not weeks.
The mistake. Sizing a position for the excitement of a rising market and then discovering you cannot sit through a falling one. Position size is what determines whether you can wait.
Bitcoin asset
The first blockchain currency, launched in 2009 by an anonymous author writing as Satoshi Nakamoto.
Why it matters. It set every convention that followed — fixed supply, mining, public ledger, self-custody.
The mistake. Treating the whole field as "Bitcoin." Most of what happens in crypto happens on other chains with very different rules.
Block infra
A batch of transactions bundled together and added to the chain as one unit.
Why it matters. Blocks are why the ledger has an order. Each one points back at the one before it, which is what makes rewriting history impractical.
The mistake. Expecting a transaction to be final the instant it is sent. It is final once it is in a block and enough blocks have followed it.
Block explorer infra
A free website that lets anyone search the chain — any address, any transaction, any token.
Why it matters. It is the receipt printer for the entire system, and it needs no account.
The mistake. Asking someone whether a payment arrived instead of looking it up. The explorer is neutral; the person telling you may not be.
Blockchain infra
A shared record of transactions that everyone can check and no single party controls.
Why it matters. It's the reason you can hold value without a bank agreeing to let you.
The mistake. Assuming "on the blockchain" means safe. The ledger is honest; the people using it are not.
Bored Ape nft
A well-known collection of profile-picture NFTs launched in 2021.
Why it matters. It became the reference point for the whole category, in both its rise and its later decline.
The mistake. Reasoning from its peak prices to any other collection. It was the exception, and most collections that copied it are now worth close to nothing.
Buy the dip market
Buying after a fall, on the view that the fall is temporary.
Why it matters. It is the most repeated instruction in the culture, and it assumes a recovery that may not come.
The mistake. Treating every fall as a dip. Some falls are the market repricing something permanently, and averaging down into those is how small losses become total ones.
Candlestick market
A chart mark showing the opening, closing, highest, and lowest price over one period.
Why it matters. It is the standard way price is displayed everywhere.
The mistake. Reading patterns in them as predictions. A chart records what already happened; it is a description, not a forecast.
CEX market
A centralised exchange — one company holds the keys, runs the order book, and controls withdrawals.
Why it matters. It is the easiest on-ramp and the single largest point of failure in most people's setup.
The mistake. Confusing a familiar interface with safety. The account looks like online banking, but there is no deposit insurance behind it.
Code audit infra
A paid review of a smart contract by outside security specialists, published as a report.
Why it matters. It is the closest thing to a safety inspection this industry has.
The mistake. Seeing the word "audited" and stopping there. Read who audited it, when, which version, and what they flagged — plenty of audited projects were drained anyway, and some "audits" are self-published.
Coercion attack
Forcing someone to hand over keys through threats, pressure, or violence, rather than by breaking anything technical.
Why it matters. Strong cryptography does not protect a person. This is the attack that ignores all of it.
The mistake. Building excellent digital security while telling people what you hold. Every technical defence assumes nobody is standing in front of you.
Defence. Do not make yourself findable as a holder — that is the first and largest defence. Keep a duress wallet with a believable balance, use multisig so no single person present can move savings, and if it happens, hand over the decoy. Nothing on a chain is worth harm.
Cold wallet custody
A wallet whose keys have never touched an internet-connected device.
Why it matters. An attacker who takes over your computer still cannot sign a transaction from it.
The mistake. Buying a hardware wallet from a marketplace reseller, or using a recovery phrase that came pre-printed in the box. Buy direct from the maker, and generate the phrase yourself on the device.
Contract approval attack
Permission you grant a smart contract to spend tokens from your wallet.
Why it matters. Approvals often have no limit and no expiry. One careless click can drain a wallet months later.
The mistake. Approving unlimited spend on a site you used once and never revoking it.
Defence. Set spending limits where possible. Review and revoke old approvals periodically with a revocation tool.
Cost basis money
What you originally paid for something, used to work out gain or loss when you dispose of it.
Why it matters. Tax authorities in most countries treat crypto disposals as taxable events, and they want this number.
The mistake. Not recording it. People trade for a year, then discover they cannot prove what anything cost and owe tax on the full amount.
Counterparty (the protocol) nft
A 2014 layer built on top of Bitcoin that let people issue their own tokens and assets.
Why it matters. It is where tokens and collectibles on Bitcoin actually started, years before the word NFT existed.
The mistake. Confusing it with counterparty risk, which is an unrelated idea about who can fail and take your money with them. Same word, different meaning — check which one is meant.
Counterparty risk attack
The risk that the company holding your money fails, freezes, or steals it.
Why it matters. Every major crypto collapse has been this, not a broken blockchain.
The mistake. Treating an exchange balance as if it were your own coins. It's an IOU.
Defence. Withdraw to self-custody anything you aren't actively trading.
Dark web attack
Sites reachable only through special software that hides both visitor and host.
Why it matters. It is where stolen data and credentials are traded, including data about you.
The mistake. Thinking it is irrelevant because you will never go there. What matters is that your reused passwords and leaked details are already for sale there.
Defence. Use a password manager with a unique password everywhere, turn on two-factor authentication using an app or hardware key rather than SMS, and check whether your email appears in known breaches.
Decentralized infra
Run by many independent participants rather than one company.
Why it matters. It is the property that makes a network hard to shut down, censor, or quietly change.
The mistake. Accepting the label at face value. Ask who can upgrade the contract, who holds the admin keys, and who runs the website. Many "decentralised" projects have a single person able to change everything.
Decoy balance custody
A believable, modest balance kept where someone looking would expect to find it.
Why it matters. The goal is that the search ends, and it ends without escalation.
The mistake. Choosing an amount so small it reads as an insult, or so large it invites another round of questions.
DeFi infra
Decentralised finance — lending, trading, and earning run by smart contracts rather than institutions.
Why it matters. It works without accounts or approval, and equally without refunds or a complaints process.
The mistake. Treating an advertised yield as interest from a bank. The yield comes from somewhere — usually other users' fees or newly issued tokens — and when that source stops, so does the yield.
Degen culture
Short for degenerate. A self-applied badge for high-risk traders.
Why it matters. The album's narrator claims it deliberately. It's a posture, not a strategy, and the book should be honest about that.
The mistake. Adopting the identity and then adopting the position sizes that go with it.
Diamond hands culture
Holding through severe falls without selling.
Why it matters. It is praised as a virtue and treated as identity, which is what makes it dangerous.
The mistake. Letting the label override judgement. Refusing to reassess is not conviction; it is a decision made once and never revisited.
Dip market
A short-term drop in price within a broader trend.
Why it matters. Whether something is a dip or a decline is only knowable afterwards.
The mistake. Calling it a dip while it is still falling, then setting money aside for the next one, repeatedly, without a limit decided in advance.
DOGE asset
Dogecoin, started in 2013 as a joke about crypto speculation.
Why it matters. It shows that attention alone can move a market, with no product underneath.
The mistake. Mistaking a large, active community for a floor under the price. The community is the product, and communities move on.
Doxxing attack
Publishing someone's real identity, address, or workplace, usually to intimidate them.
Why it matters. On a public ledger, linking a name to an address exposes their balance permanently.
The mistake. Reusing one address everywhere and attaching it to a public profile. That single link is enough to connect a real person to a visible balance.
Defence. Keep public activity separate from wallets holding savings. Do not publish addresses next to your name, and take care with photographs and metadata that reveal where you live.
Duress wallet custody
A separate wallet holding a small amount, kept so it can be handed over under threat.
Why it matters. It gives you something real to surrender, which is what someone forcing the issue is looking for.
The mistake. Leaving it empty or obviously staged. A wallet with no history is not convincing. It needs a small balance and ordinary past activity.
DYOR culture
Do your own research — the standard disclaimer attached to any mention of a token.
Why it matters. It is genuinely good advice and also a liability shield for people promoting things.
The mistake. Treating reading community posts as research. Research means the contract, the holder distribution, the audit, the vesting schedule, and the team — not sentiment.
Encryption custody
Scrambling data so only someone with the key can read it.
Why it matters. It protects the files and messages around your crypto, which is often where attackers actually get in.
The mistake. Encrypting the backup and then losing the password to the encrypted backup. That is the same loss, one step removed.
Ethereum asset
A blockchain that runs programs, not just payments.
Why it matters. Almost everything that is not a plain transfer — apps, tokens, marketplaces — was built on Ethereum or a copy of its design.
The mistake. Assuming an app on Ethereum is as trustworthy as Ethereum. The chain is not vouching for the code running on it.
Exchange market
A business where you swap money for crypto and back again.
Why it matters. It is where nearly everyone starts, and where nearly everyone's first mistake happens.
The mistake. Leaving funds there indefinitely. A balance on an exchange is a claim against a company, not coins you hold — and companies holding billions have failed with no warning.
Fake guru attack
Someone selling signals, courses, or picks, whose actual income is your subscription and undisclosed promotion.
Why it matters. They are paid for confidence, not accuracy, and their results are never independently checked.
The mistake. Mistaking a large following and a visible lifestyle for a track record. Both are purchasable.
Defence. Ask for a complete, timestamped record including losses, and check whether promotions are disclosed as paid. Never grant anyone access to your wallet or accounts to "manage" funds.
Fiat money
Government-issued money like the dollar, euro, or pound — valuable because a state says so and people agree.
Why it matters. It is the thing crypto is usually measured against, and the thing you return to when you cash out.
The mistake. Framing it as fiat versus crypto. Almost everyone holds both, and the exchange rate between them is where most losses actually happen.
Firewall infra
Software that controls what may reach your device over a network.
Why it matters. It is ordinary computer hygiene, and crypto losses usually begin with an ordinary compromised device.
The mistake. Investing in exotic crypto-specific security while running an unpatched machine. Update your operating system and browser first; it prevents more losses than anything clever.
Fixed supply asset
A hard cap on how many coins can ever exist, written into the rules and enforced by every participant.
Why it matters. No one can quietly print more, which is the whole argument for the design.
The mistake. Hearing "scarce" and concluding "valuable." Scarcity only matters if demand exists; plenty of capped tokens are worth nothing.
Floor price market
The cheapest item currently listed for sale in a collection.
Why it matters. It is the headline number for anything sold as a set, and the one people quote.
The mistake. Reading it as what you could sell for today. It is an asking price. If nobody bids, there is no floor — only a list.
FOMO culture
Fear of missing out — the pressure to act because others appear to be profiting.
Why it matters. It is the most reliable way people are separated from their money, and it needs no attacker.
The mistake. Buying at the moment something is most talked about. Peak attention and peak price arrive together, and the people posting gains bought much earlier.
FUD culture
Fear, uncertainty and doubt — usually meaning negative claims the speaker rejects.
Why it matters. The label is used both against genuine manipulation and against entirely legitimate criticism.
The mistake. Using it to dismiss a specific, checkable claim. If someone names a real problem, verify it. "That's FUD" is not a rebuttal.
Gas infra
The fee paid to get a transaction processed.
Why it matters. Fees rise when the network is busy, and a small transaction can cost more than it's worth.
The mistake. Trying to move a tiny amount during peak congestion and losing most of it to fees.
Gas price infra
What you are willing to pay per unit of computation to get your transaction processed.
Why it matters. It is an auction. Offer more and you are included sooner; offer too little and you wait, or the transaction fails.
The mistake. Paying a fee larger than the amount being moved. Always check the fee in your own currency before confirming, especially on small transfers.
Generational wallet custody
A wallet set up so someone else — a child, a partner, an heir — can reach it later.
Why it matters. Crypto has no next of kin process. Without a plan, the funds simply stop existing for your family.
The mistake. Leaving no instructions at all, or leaving instructions that hand the keys to whoever opens the envelope first. Write down where things are and how to reach them, and keep that separate from the keys themselves.
GM culture
The standard greeting across crypto communities, short for "good morning".
Why it matters. It is a small ritual that signals belonging, and it is genuinely most of what is said in some channels.
The mistake. Mistaking an active chat for an active project. Volume of greetings is not progress.
Green candle market
A period that closed higher than it opened.
Why it matters. It is the visual shorthand for "up," and it drives more buying than any argument does.
The mistake. Buying because the chart is green. Acting on colour is acting on what has already happened to everyone else.
Gwei infra
The unit network fees are quoted in on Ethereum — one billionth of one ETH.
Why it matters. Fees are quoted in gwei everywhere, so the number is meaningless until you know the unit.
The mistake. Confusing the fee unit with the amount being sent, and approving a transaction without reading the total in real money first.
HODL culture
Holding rather than selling. Originally a typo, now a stance.
Why it matters. It names the discipline problem at the centre of the whole thing.
The mistake. Treating "hodl" as a strategy rather than a slogan. It is not a substitute for a plan.
Hold your own keys custody
Keeping funds in a wallet you control instead of on a company's platform.
Why it matters. It is the difference between owning the asset and holding a claim against a business that can fail.
The mistake. Moving everything into self-custody in one step, with no rehearsal. Practise a small recovery from the phrase before it matters.
Honeypot contract attack
A token you can buy but cannot sell, by design.
Why it matters. The chart looks perfect on the way up because nobody is able to sell.
The mistake. Seeing a token only going up and reading that as strength.
Defence. Test with a tiny amount and confirm you can sell before committing more. Use a contract scanner.
Immutable infra
Once written, it cannot be edited or deleted.
Why it matters. There is no undo button and no customer service line.
The mistake. Sending to a wrong address and expecting a reversal. There is none.
Lambo culture
A Lamborghini — shorthand for sudden wealth. "When lambo?"
Why it matters. It is the culture's joke about its own motivation, repeated until it becomes the motivation.
The mistake. Setting the goal as an object rather than an amount and a date. Vague targets are never reached, because there is no point at which you stop.
Layer 2 infra
A separate faster, cheaper network that batches its activity back down to the main chain for security.
Why it matters. It is how the same chain becomes usable for small amounts.
The mistake. Sending funds to an address on the wrong layer. The address often looks identical, and the funds can be unrecoverable.
Liquidity locked infra
The pool's funds are held in a contract that stops anyone withdrawing them until a set date.
Why it matters. It is the single most checkable defence against the pool being emptied overnight.
The mistake. Believing a claim of locked liquidity without opening the lock contract and reading the unlock date. "Locked" for one week is not locked.
Liquidity pool infra
A shared pot of two tokens that people trade against, funded by depositors who earn a share of the fees. The album is named after it.
Why it matters. It is how most tokens are tradable at all without a company running an order book.
The mistake. Depositing without understanding impermanent loss — if the two tokens move apart in price, withdrawing can leave you with less value than simply holding would have.
Market cap market
Price per token multiplied by the number in circulation.
Why it matters. It is the only way to compare tokens sensibly. A low price per coin means nothing on its own.
The mistake. Reasoning that a cheap-looking token could "easily reach a dollar" without checking what that would imply for the total. Sometimes it implies a value larger than every company on earth.
Maxi culture
A maximalist — someone who believes one chain is the only one that matters.
Why it matters. Much of the loudest commentary comes from people with a fixed position to defend.
The mistake. Taking a maxi's account of a competing chain as a technical assessment. It is advocacy, and it is usually held alongside a position.
MetaMask custody
A widely used browser and phone wallet for Ethereum and similar chains.
Why it matters. For most people it is the first wallet they hold their own keys in, so its habits become their habits.
The mistake. Installing it from a search advert. Fake wallet extensions rank highly and steal the phrase during setup. Install from the official site, and reach it from a bookmark.
Mint nft
Creating a new token on a chain, usually the first sale of an item in a collection.
Why it matters. It is the moment supply is created and the point at which most collection money changes hands.
The mistake. Minting from a link posted in a chat or a reply. Fake mint pages are the most common launch-day attack, and the transaction they ask you to sign is not a purchase.
Moon culture
To rise sharply in price. "Mooning," "to the moon."
Why it matters. It is the field's shorthand for the only outcome much of the marketing discusses.
The mistake. Building a plan around it. A strategy with no exit and no downside case is not a strategy.
Multisig custody
A wallet that needs several separate keys to approve a transaction — say two of three.
Why it matters. No single stolen key, and no single moment of pressure, is enough to move the funds.
The mistake. Keeping every key in one place, or with one person. Split across locations and people, or the arrangement gives you nothing.
Network congestion infra
Too many people transacting at once, so fees rise and confirmations slow down.
Why it matters. Congestion arrives exactly when everyone wants to act — during crashes and launches.
The mistake. Planning to move funds "if things go wrong." That is the moment fees spike and transactions stall. Rehearse the move when the network is quiet.
Node infra
A computer running the chain's software, keeping its own full copy of the ledger and checking every rule.
Why it matters. The network is just many nodes agreeing. No head office exists to overrule them.
The mistake. Believing decentralisation is automatic. If almost everyone reads the chain through the same two providers, that is a chokepoint regardless of how many nodes exist.
Normie culture
Someone outside crypto, used as a gentle insult.
Why it matters. The word marks a boundary, and the pressure not to be on the wrong side of it sells a great deal.
The mistake. Letting the fear of the label rush a decision. Nobody has ever lost money by taking an extra week to understand something.
On-chain infra
Recorded on the public ledger itself, rather than on a company's private database.
Why it matters. On-chain facts can be checked by anyone without asking permission or trusting the source.
The mistake. Assuming everything a project says is on-chain. Balances usually are; team promises, roadmaps, and partnerships almost never are.
OPSEC custody
Operational security — the routine habits that keep what you hold from becoming public knowledge.
Why it matters. Almost every targeted attack starts with the attacker learning you are worth targeting.
The mistake. Posting gains, screenshots, or a wallet address publicly. Nothing is reversible afterwards, and the address links the balance to the person.
Paper hands culture
Selling quickly, usually at a loss, usually out of fear.
Why it matters. Used as an insult, which is exactly how it does damage — it pressures people out of sensible risk management.
The mistake. Letting the insult drive the decision. Taking profit is not weakness.
Phishing attack
A fake site, message, or app impersonating a real one to capture your keys.
Why it matters. It's the single most successful attack in crypto and it costs nothing to run.
The mistake. Clicking a link from search results, a DM, or a support account instead of a saved bookmark.
Defence. Bookmark every site you use and only navigate from bookmarks. Real support never DMs first and never asks for a seed phrase.
Ponzi attack
A scheme paying existing participants with money from new ones, while presenting it as returns.
Why it matters. It works until recruitment slows, then fails completely and suddenly.
The mistake. Being reassured that early withdrawals worked. Early payouts are the mechanism, not evidence against it — they are what recruits the next group.
Defence. Ask exactly where the yield comes from and keep asking until you get a specific answer. If it is "trading" or "arbitrage" with no detail, or the return is fixed and high regardless of the market, leave.
Pooled funds attack
An arrangement where several people's money is combined and one party controls the wallet.
Why it matters. Whoever holds the keys can leave with everything, whatever was agreed.
The mistake. Joining a group buy or investment club run from a single personal wallet, on trust, with no written terms.
Defence. If funds must be pooled, use a multisig where signers are independent people, so no one person can move the money alone. Otherwise hold your own share.
Probably nothing culture
Sarcasm — used when posting something the speaker considers very significant.
Why it matters. It is a hype device dressed as understatement, and it is everywhere.
The mistake. Reacting to the framing rather than the underlying fact. Read what is actually being shown; usually it is a screenshot with no verifiable claim in it.
Proxy infra
A contract that forwards calls to another contract holding the actual logic, so the logic can be replaced later.
Why it matters. It is how projects ship fixes — and how the rules can change after you have committed funds.
The mistake. Reviewing the code once and assuming it is fixed. Behind a proxy, whoever holds the upgrade key can change what the contract does tomorrow.
Pump and dump attack
Organisers quietly accumulate a token, promote it hard, and sell into the buying they created.
Why it matters. It is one of the oldest frauds there is, and public chains make it cheap to run at scale.
The mistake. Joining a group that promises a coordinated buy. If you are being told when to buy, you are the exit, and the people who bought before the announcement are the ones being paid.
Defence. Treat urgency as the warning sign. Check on a block explorer how concentrated the holdings are — a handful of wallets owning most of the supply means a few people can end it at will.
Ransomware attack
Malware that encrypts your files and demands payment, usually in crypto, to release them.
Why it matters. It is the main reason the public associates crypto with crime, and it is a real risk to any computer.
The mistake. Having no offline backup. The ransom decision only exists because there is no clean copy to restore from.
Defence. Keep backups offline or otherwise disconnected, and test that a restore actually works. Keep systems updated. Paying funds the next attack and often does not return the files.
Recovery keys custody
The words or file that restore a wallet if the device is lost. Whoever holds them holds the funds.
Why it matters. They are the difference between losing a phone and losing everything on it.
The mistake. Storing them as a photo, a note on the phone, or a cloud document. That is the single most common way people are robbed, and it needs no hacking of the blockchain at all.
Red candle market
A period that closed lower than it opened.
Why it matters. It is what panic looks like on a screen, and it triggers the sales people most regret.
The mistake. Selling into it without reference to any plan, then buying back higher a week later. The colour is not new information.
Rekt culture
Wrecked — having taken a severe loss.
Why it matters. The humour around it normalises losses that were often avoidable, and discourages people from examining them.
The mistake. Laughing it off rather than writing down what happened. The post-mortem is the only part of a loss with any value in it.
Retrace market
A partial move back against the recent direction before the trend continues, or does not.
Why it matters. It is the standard justification for waiting, in both directions.
The mistake. Waiting for a retrace that never arrives, or assuming one is temporary when the trend has actually turned. Nobody knows which it is at the time.
Roadmap culture
A project's published plan of what it intends to deliver and when.
Why it matters. It is the main thing sold before a product exists.
The mistake. Valuing a project on its roadmap. Compare it against what the same team has already shipped and when — promises are free, and roadmaps are quietly rewritten.
Rollup infra
The most common kind of Layer 2 — it rolls many transactions into one record posted to the main chain.
Why it matters. You get main-chain security at a fraction of the cost, with a delay when withdrawing.
The mistake. Not checking the withdrawal period before depositing. Some rollups hold withdrawals for days by design.
Rug pull attack
A project's team takes the money and disappears.
Why it matters. It's the most common way beginners lose everything, and it looks exactly like a normal project until it doesn't.
The mistake. Judging a project by its marketing, its community size, or how confident the founders sound.
Defence. Check whether liquidity is locked and for how long. Check whether the team is identifiable. Assume anonymous teams can leave. Size positions accordingly.
Rust infra
A general-purpose programming language used to write contracts on Solana and several other chains.
Why it matters. It is the second language you meet once you look past Ethereum.
The mistake. Treating the choice of language as a safety rating. Audits and track record tell you something; the language tells you almost nothing.
Seed phrase custody
A list of ordinary words that can regenerate your entire wallet.
Why it matters. Anyone holding these words holds your money. They are the money.
The mistake. Photographing it, emailing it to yourself, or storing it in a password manager or cloud note.
Defence. Write on paper or steel. Store offline. Never type it into any site or app that asks. No legitimate service will ever ask.
Seed phrase loss custody
Losing the words that restore the wallet, which means losing the funds with no route back.
Why it matters. There is no reset, no support desk, and no appeal. A meaningful share of all Bitcoin is already unreachable this way.
The mistake. Keeping exactly one copy, in one building. Fire, flood, and a house move end more wallets than hackers do. Keep more than one copy, in more than one place.
Self-custody custody
Holding your own keys rather than letting a company hold them for you.
Why it matters. It's the entire point. Anything else is trusting a company not to fail.
The mistake. Leaving everything on an exchange because it's easier, then discovering what "not your keys, not your coins" means.
Shiba asset
Shiba Inu, a token launched in 2020 imitating Dogecoin's dog theme.
Why it matters. The template — dog logo, enormous supply, celebrity attention — has been copied thousands of times since.
The mistake. Being reassured by a huge token supply because the per-coin price looks tiny. Supply times price is the number that matters, not the price tag.
Smart contract infra
A program stored on a blockchain that runs exactly as written whenever someone calls it.
Why it matters. It removes the middleman and replaces them with code — which does what it says, including when what it says is bad for you.
The mistake. Reading "contract" as a legal protection. Nobody enforces it on your behalf. If the code lets your funds be taken, they are taken, and that was the contract working.
SOL asset
The native coin of Solana, a chain built for high speed and very low fees.
Why it matters. Fees shape behaviour. Cheap transactions make some things practical that are not practical elsewhere.
The mistake. Reading low fees as low risk. Fees are an engineering choice; they say nothing about whether the token you are buying is real.
Solidity infra
The main programming language for writing Ethereum smart contracts.
Why it matters. Most of the money in decentralised apps sits behind code written in it.
The mistake. Assuming the language protects against mistakes. It does not, and small errors in it have cost hundreds of millions.
Stablecoin asset
A token designed to hold a steady value, usually one US dollar, by being backed by reserves.
Why it matters. It is how most people sit still without leaving crypto entirely.
The mistake. Assuming "stable" is a property of the token rather than a promise by whoever issues it. Stablecoins have broken before, and the ones that broke all looked fine the week before.
Stacking sats culture
Accumulating small amounts of Bitcoin steadily. A sat is one hundred-millionth of one coin.
Why it matters. It reframes the asset as divisible, which removes the belief that you need a whole coin to take part.
The mistake. Stacking on an exchange for years and never moving anything into a wallet you control. That is not accumulating the asset; it is accumulating a claim.
Staking infra
Locking up coins to help secure a network, earning a reward for doing it.
Why it matters. It is how chains like Ethereum agree on the ledger without mining.
The mistake. Ignoring the unlock period. Staked funds are often unavailable for days or weeks, which is precisely when you may want them.
Take profits market
Selling some of a position while it is up, converting a paper gain into a real one.
Why it matters. Gains that are never realised are not gains. Every drawdown is full of people who were up at some point.
The mistake. Having no plan for it at all. Decide beforehand what would make you sell some; otherwise the decision is always made at the worst moment, under emotion.
Token burn asset
Permanently destroying tokens by sending them to an address nobody holds the keys to.
Why it matters. It is the main way a project reduces supply, and it is publicly verifiable.
The mistake. Treating a burn announcement as proof of a burn. The transaction is on the ledger — look for it before believing it.
Token tax money
A fee written into a token's own code that takes a cut of every buy or sell.
Why it matters. It is charged by the token itself, on top of network fees, and the rate can often be changed after launch.
The mistake. Checking the price but never the contract. A token can be built so the sell tax is raised to near-total once enough people are in.
Trading pair market
The two assets being exchanged, written as one against the other.
Why it matters. Every price is a price in something. The same token quoted against two different assets gives two different numbers.
The mistake. Reading a price without noticing what it is priced in, then being surprised when the value in your own currency is quite different.
Vesting market
A schedule releasing tokens to founders and early backers gradually rather than all at once.
Why it matters. Each release date puts new supply into the market, whatever the demand is doing.
The mistake. Buying without looking up the vesting schedule. A large unlock arriving next month is public information and entirely predictable.
VPN custody
A service that routes your internet traffic through another server, hiding your address from sites you visit.
Why it matters. It reduces what networks and websites can learn about where you are.
The mistake. Treating it as protection against scams. A VPN hides your location; it does nothing about a malicious contract you approve or a phrase you type into a fake site.
WAGMI culture
A rallying phrase, short for "we're all gonna make it".
Why it matters. It builds solidarity, and it is also used to keep people from selling.
The mistake. Reading group optimism as information. Everyone saying the same thing is not evidence; it is often just everyone holding the same thing.
Wallet custody
Software or hardware that holds the keys controlling your crypto. It doesn't hold coins — it holds proof that they're yours.
Why it matters. The wallet is the account, the password, and the bank all at once.
The mistake. Thinking a wallet is like a bank account with a recovery option. It isn't. Lose the keys, lose everything.
Wallet drainer attack
Malicious code on a website that, once you approve its request, empties the wallet you connected.
Why it matters. It is sold ready-made to anyone who wants it, which is why it is everywhere.
The mistake. Connecting a wallet to a site reached from a link, then approving whatever appears without reading it. The signature request is the attack, and it looks like a normal pop-up.
Defence. Reach sites from your own bookmarks, never from links or search adverts. Read what you are signing. Keep the wallet you connect to sites separate from the one holding savings, and review approvals periodically.
Whale culture
A holder large enough that their transactions move the price.
Why it matters. Their wallets are public, so their positions can be watched by anyone.
The mistake. Copying a large wallet's trades. You cannot see their cost basis, their other positions, their timeframe, or their reasons — you see one leg of something bigger.
Wrench attack attack
Getting someone's crypto by physically threatening them rather than hacking anything.
Why it matters. The strongest encryption in the world does not protect a person in a room with someone dangerous.
The mistake. Publicly discussing holdings, posting gains, or wearing crypto branding in the wrong place.
Defence. Keep holdings private. Use a decoy wallet with a small balance. Consider multisig so no single person under duress can move funds. Never post real numbers.
Disclaimers
Appears on the copyright page, on the landing page, and is spoken at the top of every workshop. Not buried.
Standing disclaimer
This book is educational. It is not financial, investment, tax, or legal advice, and nothing in it is a recommendation to buy or sell any asset. Cryptocurrency carries real risk of total loss. The songs are art and art is allowed opinions; the annotations and manual are not, and they describe only how things work and how they fail.
Mental Stamina is a musician, not a licensed financial adviser.
Short form — for slides, social, and the workshop opener
Educational only. Not financial advice. You can lose everything.
Safety notice — facing page of Part Two
No legitimate service will ever ask for your seed phrase. Not support. Not a wallet company. Not an exchange. Not anyone claiming to help you recover funds. Nothing in this book asks you to type a seed phrase anywhere, and no exercise in any workshop will either.
Sponsorship disclosure
If sponsors are involved, this appears on its own page — not a footnote:
This project is supported by [names]. Sponsors had no input into the educational content, no approval over the manual, and no products are recommended anywhere in this book. No affiliate links appear in the text.
Villain-track header
Appears at the top of both Defense Sheets:
This track is written from the attacker's point of view. Everything described is a real technique with real victims. The left page is the attack. This page is the defence.
Age and audience note
The album contains explicit content. Clean edits exist for campus and corporate settings. The book's manual sections are appropriate for all ages; the lyrics pages are not. Institutional partners should be given the venue rating sheet up front rather than discovering it on stage.