01 · 5 items
Funds & Signing
Can any single person move treasury funds alone?
Free download
Blockchain Team Security Self-Check25 questions, 10 minutes
By dollar value, most crypto funds stolen in recent years were not lost to smart-contract bugs. They were lost off-chain: private keys, signing flows, employee laptops, phishing and third-party vendors. This checklist skips configuration details and shows you where you stand and what to fix first.
- Built for blockchain companies without a dedicated security team
- Every item is a yes/no question: founder and tech lead can finish it in 10 minutes
- A simple score at the end tells you your risk level
What the checklist covers
One sample question per area. The full 25 items are in the PDF.
02 · 5 items
Devices & Accounts
Can you revoke all access on an employee's last day?
03 · 4 items
Servers & Cloud
Are API keys or private keys still sitting in code or config files?
04 · 3 items
Code & Supply Chain
Are dependencies, outsourced code and security tools reviewed before production?
05 · 3 items
Phishing & Social Engineering
Would your staff spot a fake recruiter or a "just run this test code" request?
06 · 5 items
Monitoring & Response
Is it written down who decides, who stops the bleeding and who to call for freezes?
Some items left unticked?
Tell us which ones worry you most and we'll send back a prioritised recommendation. Text is fine, no call needed.
CONTACT
Tell us about your situation
Leave your contact details and needs and we will get back to you soon. You can also reach us on WeChat.
- WECHATwhit28
- TG@MuseSec
- EMAIL[email protected]
- X@MuseSec_Team
- ADDRNanshan, Shenzhen, China
