9. Keys Please

“Got rekt? oh well”

Define · Decode · Danger  |  rekt

Define — Rekt — wrecked, having taken a severe loss.

Decode — The dismissal that opens the track. Two words, no sympathy, establishing the voice before the attack begins.

Danger — This indifference is the point. The person on the other side of a coercion attack is not weighing your circumstances, and appeals to fairness or hardship do not work on someone who has already decided.

See also — rekt, coercion.

“Block chain matches my belt (Let's go)”

Decode · Danger · Do  |  blockchain opsec

Decode — The chain as jewellery, worn visibly. The pun runs the whole album's theme through a single accessory.

Danger — Visible wealth is the selection criterion for this attack. The chain here is literal, but the modern equivalent is a public wallet address, a screenshot of a balance, or a post about a good year.

Do — Assume anything you post about holdings is permanent and searchable. The most effective defence against everything in this track is not being identifiable as a holder in the first place.

See also — opsec, doxxing, Defense Sheet row 1.

“Got paper hands. You’re gonna melt”

Define · Decode · Danger  |  paper-hands

Define — Paper hands — an insult for selling quickly, usually out of fear.

Decode — The culture's shaming vocabulary turned into a threat. Same words as track 8, delivered with menace instead of mockery.

Danger — Under pressure, people comply to end the situation. That is the correct response — but it is worth understanding in advance that the pressure is designed to produce it, so the preparation has to happen beforehand rather than in the moment.

See also — paper-hands, duress-wallet, coercion.

“I need your keys, please!”

Define · Decode · Danger · Do  |  coercion recovery-keys

Define — Coercion is forcing someone to hand over keys through threat or pressure, rather than by breaking anything technical. It is often called a wrench attack — the joke being that no amount of encryption survives a wrench.

Decode — The hook, and the politeness is the horror. "Please" is what makes it a demand rather than a request.

Danger — This attack ignores every technical defence in this book. Cryptography protects keys from computers. It does nothing about a person standing in front of you, and no password strength changes that.

Do — Hand over what is asked for. Nothing on a chain is worth harm. The preparation that matters — a duress wallet with a believable balance, savings behind a multisig — has to exist before the moment, because in the moment there are no options left.

See also — coercion, wrench-attack, duress-wallet, multisig, Defense Sheet.

“Metamask on my face, when we run in his place”

Define · Decode · Danger · Do  |  metamask coercion

Define — MetaMask is one of the most widely used browser and phone wallets. For most people it is the first wallet they hold their own keys in.

Decode — The album's best and worst pun: the wallet's name as a literal mask. The software you use to protect yourself, worn by the person coming for you.

Danger — A wallet on a phone or laptop is reachable by anyone who has you and the device. Convenience custody assumes the threat is remote, and this attack is the case where it is not.

Do — Keep only spending money in a hot wallet on a phone or browser. Savings belong in cold storage, and ideally behind a multisig, so that having you and your phone is not sufficient.

See also — metamask, cold-wallet, multisig, Defense Sheet row 2.

“And we need every combination to the safe”

Define · Decode · Danger · Do  |  multisig decoy-balance

Define — Multisig is a wallet requiring several separate keys to approve a transaction — two of three, for example.

Decode — "Every combination" concedes the defence in the act of demanding it. He needs all of them, which means one is not enough.

Danger — This is precisely why multisig matters here. If every key is in one house, or held by one person, the arrangement provides nothing under coercion — it looks like security and functions as a single point of failure.

Do — If you use multisig, split the keys across locations and people. A two-of-three where one key is with a trusted person elsewhere means no single moment of pressure can move the funds.

See also — multisig, decoy-balance, duress-wallet, Defense Sheet row 3.

“And then, if he cooperates, everyone safe”

Decode · Danger · Do  |  coercion

Decode — The offer, phrased as reassurance. Compliance presented as the route out.

Danger — Compliance is the right choice, and it is also being used as leverage. The reason to prepare in advance is so that cooperating costs you a decoy rather than everything — you can comply fully and still not lose the savings.

Do — Set up a duress wallet holding a small amount with ordinary past activity. It gives you something real to hand over, which is what ends the search.

See also — duress-wallet, decoy-balance, Defense Sheet row 4.

“Gave me his phrase but his keys were fake”

Define · Decode · Danger · Do  |  duress-wallet decoy-balance seed-phrase

Define — A duress wallet is a separate wallet holding a modest amount, kept specifically so it can be surrendered under threat.

Decode — The single most important bar on the album. The defence appears inside the attack — the victim had a decoy, used it, and the attacker noticed.

Danger — The failure mode is named exactly: the decoy did not hold up. An empty wallet, or one with no transaction history, reads as staged and invites another round of questions.

Do — Make the duress wallet real. Fund it with an amount that is plausible for you, use it occasionally so it has genuine history, and keep it on the device someone would actually find.

See also — duress-wallet, decoy-balance, seed-phrase, Defense Sheet row 4.

“When you’re outnumbered, it’s hard to play defense”

Decode · Danger · Do  |  coercion

Decode — Stated plainly and without relish. It is the most honest line in the track.

Danger — There is no physical defence being recommended here, and this book does not suggest resistance. The asymmetry is real, and the only defences that work are the ones already in place before anyone arrives.

Do — Move the contest earlier. Do not be identifiable as a holder, keep savings where handing over a phone does not reach them, and keep a decoy for the moment itself.

See also — coercion, opsec, multisig, Defense Sheet.

“He cursed our SOL but gave me his seed phrase”

Define · Decode · Danger · Do  |  sol seed-phrase

Define — SOL is the native coin of Solana, a fast, low-fee chain. A seed phrase is the handful of ordinary words that restore a wallet — they are the money.

Decode — The pun on soul and SOL is the track's cruellest, and the transaction is complete in one line: he curses them, and he hands it over anyway.

Danger — Once a seed phrase is spoken, it is gone permanently. There is no revocation, no password change, and no way to make those words stop working. This is the difference between a compromised bank account and a compromised wallet.

Do — Never store a phrase anywhere it could be read from a screen or a photograph, and never type it into any website. If a phrase is ever exposed, move the funds to a newly generated wallet immediately — that is the only remedy that exists.

See also — sol, seed-phrase, recovery-keys, Manual Part Two §3.

“We made a million dollars by Sunday”

Decode · Danger · Do  |  coercion

Decode — The proceeds, stated with a timeline. A weekend's work.

Danger — The speed is the practical point. Once keys are handed over, funds move within minutes and are frequently swapped across chains before anyone is in a position to report anything. There is no freeze, no reversal, and no recovery service that can undo it — anyone promising otherwise is running the second scam.

Do — Understand that reporting after the fact will not return the funds. That asymmetry is the entire argument for the Defense Sheet on the facing page.

See also — coercion, immutable, fake-guru, Defense Sheet.

“I’m a predator. Close your eyes. Come prey”

Decode · Danger · Do  |  coercion opsec

Decode — Prey and pray, closing the verse. The album's villain at his most explicit, and the last thing said before the record turns toward its resolution.

Danger — Worth stating plainly and proportionately: most readers are not likely targets of physical violence. The realistic risk profile is narrow — people who post about holdings publicly, people known locally as traders, people who attend events wearing it. That is who this happens to.

Do — The defence is boring and it works: be unremarkable. Do not announce what you hold, do not publish addresses beside your name, and keep savings behind something that a single confrontation cannot reach.

See also — coercion, opsec, doxxing, Defense Sheet, Manual Part Four §6.