Zealynx Academy · Defense

Recognize the attack
before it costs you everything.

The scams that empty wallets and hijack workspaces don't break code — they trick people. A DM, a signature, a repo you were asked to run. Defense drops you inside the real thing — on the exact app it arrives on — so your gut says "I've seen this" when it counts.

21 live drills · 5 free · nothing here is real, nothing runs, nothing sends.

$2.7B+

drained through approval & signature phishing since 2021

Chainalysis

$5.8B

lost to crypto scams in a single year

FBI IC3, 2024

One click

is irreversible — no chargeback, no support line, no undo

self-custody

None of it was a smart-contract bug. Every loss ran through the one layer no audit covers — the human at the keyboard. That layer is trainable.

Not a lecture. A live-fire range.

Every drill runs the same four beats — the setup, the moment, the reveal, the defense.

01

Briefing

The channel, the attack, and what to watch for — before you're in it.

02

The drill

You're dropped into a faithful replica and you make the call, live.

03

Debrief

What just happened, with every red flag marked on what you saw.

04

Protect

The concrete defense, so the reflex sticks for the real thing.

We rebuild the exact place it reaches you.

A generic "phishing example" teaches nothing. Recognition is muscle memory for a specific surface — so each drill is a faithful replica of the real one.

LinkedIn
Telegram
X
SMS
Email
Discord
Wallet
Browser
Terminal
Video call

The range

Start with the free drills. Each one you clear banks Lynx to your balance.

Lynx earn on every clear

LinkedIn → Telegram

Free

The Dream Job That Wasn't

Fake recruiter · Contagious Interview

A senior role, great pay, a quick take-home. Spot the trap before you run their code.

Lynx 100Enter

Browser → Wallet

Free

The Airdrop That Wanted Everything

Approval phishing · setApprovalForAll drain

A hyped claim page, a countdown, and one 'verify' signature that hands over your whole NFT collection.

Lynx 100Enter

telegram

Free

The 'Safeguard' bot that wants your keyboard

ClickFix — clipboard-to-terminal malware

A verification bot says its automatic check failed and walks you through pressing Win+R and pasting to 'prove you're human.' What's on your clipboard is hidden PowerShell.

Lynx 100Enter

Email → Browser

Free

Security Breach — Verify Your Recovery Phrase

Seed phishing · fake restore page

An urgent 'breach' email says re-sync your seed in 24 hours or lose access. No vendor ever needs it.

Lynx 100Enter

x

Free

The airdrop claim from the 'official' account

Gasless permit drain

The project's own account posts a claim link, the page says you're eligible, and a countdown is ticking. The 'claim' resolves to a gasless permit granting unlimited spend of your USDC.

Lynx 100Enter

Browser → Wallet

Members

The Login That Wasn't

Permit phishing · gasless approval drain

A token-checker asks you to 'sign in with your wallet'. It's gasless, so it feels harmless. It isn't.

Lynx 100Enter

Browser → Wallet

Members

The Mint Everyone's Rushing

NFT drainer · setApprovalForAll

A hyped mint is 812/1000 gone and the clock's ticking. The 'mint step' is setApprovalForAll.

Lynx 100Enter

Wallet

Members

The Address That Matched at Both Ends

Address poisoning · lookalike

Your deposit address sits in your history — first four and last four match. The middle doesn't.

Lynx 100Enter

Wallet

Members

Just Upgrade Your Account to Continue

Blind signing · EIP-7702 delegation

Your swap is stuck until you sign an unreadable hash. That 'upgrade' delegates your whole account.

Lynx 100Enter

Browser → Terminal

Members

Verify You're Human

ClickFix · fake CAPTCHA / paste-to-run

A 'verification' step that asks you to press a few keys. One of them runs a script you never saw.

Lynx 100Enter

Browser → Terminal

Members

Just Add The Dependency

Malicious package · npm typosquat

A top-voted answer tells you exactly what to install. The name is one dash off the real thing.

Lynx 100Enter

Browser

Members

Download MetaMask

Fake app · seed-phrase harvest

The top result is a pixel-perfect wallet page. The only tell is the address bar — and it wants your seed.

Lynx 100Enter

Browser → Terminal

Members

The Passive-Income MEV Bot

Trojan contract · fake MEV bot

A copy-paste bot that front-runs trades while you sleep. Fund it, and the only trade it makes is yours out.

Lynx 100Enter

Browser → Terminal

Members

This App Is Damaged

Infostealer · Gatekeeper bypass

macOS blocked the 'update' as damaged. The download page has a one-line 'fix' — that's the whole attack.

Lynx 100Enter

Telegram → Terminal

Members

Build It First, Audit It Later

Malicious repo · postinstall

A paid audit gig hinges on one thing: get our repo building before you start. Don't.

Lynx 100Enter

LinkedIn → Telegram

Members

The Term Sheet That Wanted Your Treasury

Fake investor · treasury drain

A fund you admire wants to invest — but first, 'verify' the treasury by connecting your wallet.

Lynx 100Enter

Video call

Members

The CFO on the Call Wants a Wire

Deepfake CFO · wire fraud

Your CFO and two colleagues are on camera authorizing an urgent $2.4M wire. Are they real?

Lynx 150Enter

discord

Members

The Discord re-verification drain

Wallet-drainer approval (setApprovalForAll)

A checkmarked bot in #announcements says you must re-verify your wallet within 24 hours. The 'verify' flow ends in a signature that hands over your whole NFT collection.

Lynx 100Enter

x

Members

The gold-check account with the surprise mint

Seaport zero-price listing drain

A verified account with 400k followers posts a 'live now, 60 minutes only' mint. The signature to 'confirm your free mint' is a Seaport order listing every NFT you own for 0 ETH.

Lynx 100Enter

sms

Members

The 2FA choice you make before the attack

SIM swap / SMS 2FA interception

Weeks before an attacker ports your phone number to their SIM, you choose your exchange's 2FA. That one choice decides whether the swap drains you or buys them nothing.

Lynx 100Enter

sms

Members

The wrong number that became a friend

Pig-butchering investment fraud

A 'wrong number' text grew into months of friendship. Now there's a trading platform with steady gains, a dashboard showing a fortune — and a fee standing between you and withdrawing it.

Lynx 100Enter

Make the mistake here. Never make it there.

Ten minutes in the range is cheaper than one bad click. Train the reflex that protects your keys, your work, and everything they unlock.

Start free