English

Secrets that nobody needs from you

Never share recovery words, private keys, wallet files, .entwallet backups, backup passwords, account passwords, email verification codes, TOTP codes, or production credentials. Entcoin Team members, moderators, miners, Seed operators, and forum administrators do not need them to diagnose a problem.

The forum never asks you to connect a wallet or send ENT to verify an account. There is no official “verification address,” guaranteed return, support recovery service, private presale, or direct-message airdrop. Treat anyone making these claims as an impersonator.

Start from entcoin.xyz or the official GitHub repository. Check the exact hostname before entering a forum password. Verify downloaded release files against the SHA-256 manifest published with the same GitHub Release. A mirror provides bytes; the GitHub checksum is the release integrity reference.

Use a unique forum password and keep email verification and reset links private. The forum password should not be reused for email, operating-system, exchange, or backup encryption.

If something may be exposed

  • If only a forum password was exposed, change it immediately and secure the associated email account.
  • If recovery words or a private key were exposed, assume that wallet is compromised. On a trusted computer, create and back up a new wallet, then move control away from the exposed key as soon as safely possible.
  • If a post contains a secret, report it immediately. Deleting or hiding the post cannot guarantee that nobody copied it.
  • Preserve suspicious URLs, usernames, timestamps, and transaction IDs without opening unknown downloads or reposting secrets.

Use the post Report action for scams, impersonation, phishing, or accidental disclosure. Report unpatched software vulnerabilities privately through GitHub Security Advisories, not in a public topic.

中文

任何人都不需要向你索取的秘密

绝不要分享恢复词、私钥、钱包文件、.entwallet 备份、备份密码、账号密码、邮箱验证码、TOTP 动态码或生产凭据。Entcoin Team、版主、矿工、Seed 运营者和论坛管理员都不需要这些信息来排查问题。

论坛不会要求连接钱包或转账 ENT 来验证账号。不存在官方“验证地址”、保证收益、付费找回服务、私下预售或私聊空投。提出这些要求的人应视为冒充者。

核验软件和链接

请从 entcoin.xyz 或官方 GitHub 仓库开始访问。输入论坛密码前检查完整域名。下载发布文件后，使用同一 GitHub Release 公布的 SHA-256 清单核验。镜像只提供文件字节，GitHub 校验值才是发布完整性的参考。

论坛应使用独立密码，邮箱验证和重置链接也要保密。不要把论坛密码复用于邮箱、操作系统、交易平台或备份加密。

如果秘密可能已经泄露

  • 只有论坛密码泄露时，请立即修改密码并保护关联邮箱。
  • 恢复词或私钥泄露时，应假定该钱包已经失守。在可信电脑上创建并备份新钱包，然后在确保操作安全的前提下尽快把控制权移出已泄露密钥。
  • 帖子包含秘密时请立即举报。删除或隐藏帖子不能保证此前无人复制。
  • 保存可疑网址、用户名、时间和交易 ID，但不要打开未知下载，也不要为了举证再次发布秘密。

诈骗、冒充、钓鱼或意外泄密请使用帖子旁的举报功能。尚未修复的软件漏洞请通过 GitHub Security Advisories 私下报告，不要发布公开主题。