PSA for my Contra folks: sophisticated crypto scams are targeting freelancers on platforms like Contra. Here's my story: A company called "DeCruiz Labs" reached out about Product Design work on a Web3 product. Seemed pretty legit. Before our scheduled call, they asked me to review their POC... but instead of a hosted prototype, sent me a link to a GitHub repo.

When I asked if they had a hosted version (so I wouldn't need to run the code locally), they pushed back. That was suspicious. I scanned the repo before touching it. It contained obfuscated malware designed to execute automatically on startup: credential theft, likely crypto wallet drainage. They'd even booked a follow-up call to pressure me into running the code if I hadn't already.

I'm not posting this to scare anyone. Bad actors go where the talent is, and that includes great communities like this one. If I could have you remember anything from this, it would be to trust your gut, and don't skip steps you'd normally take because of pressure. Stay safe out there y'all. 💪🏻