Hacked or Compromised AccountsUpdated 4 months ago

If you suspect that your DIMO wallet has been compromised, taking immediate action is crucial to secure your account and protect your assets. Here's what you need to know and the steps to follow.

How do I know if my wallet has been compromised?

One of the first signs of a compromised wallet is an unauthorized transaction. To confirm whether your wallet has been compromised, you can review your wallet's activity on Polygonscan. If you encounter a transaction you did not authorize, it's a clear indicator of a security breach.

What should I do if this just happened to me?

If you've identified unauthorized transactions or suspect your account is compromised, please follow these steps:

1. Create a New Wallet Address: You will want to create a new wallet address either on Rainbow or MetaMask. This helps secure your assets and prevents further unauthorized access to your compromised wallet. 
2. Transfer your assets: You can transfer your device and vehicle to the new wallet by following the instructions provided in DIMO Buddy   
3. Update the wallet in your DIMO account: After transferring your Device and Vehicle NFTs over to your new wallet, you will want to go to the account tab and select "update wallet," then add the new wallet you created from step 2 and your vehicles should appear again in your account.
4. IN-APP Wallet accounts only: You will NOT be able to hit the update wallet button in your mobile app; you will need to make a brand new DIMO account using any email when you want. After getting to the select your wallet screen, please select "external wallet" and select the one to which you transferred your assets too. Once the account has been created, you can view your vehicles. 

How did this happen:

Wallet compromises can happen through various means, including phishing campaigns, clicking on suspicious links, signing rogue transactions, and interacting with malicious websites. It's crucial to stay vigilant and practice good online security habits to minimize the risk of compromise.

What else can the DIMO team do for me?

Our team can take action to help secure your account further. We can blacklist the wallet address that was compromised to prevent any more tokens from being taken.

What can the DIMO team NOT do?

• Recovery of Tokens: We cannot recover any tokens that have been taken from your compromised wallet.
• Streak Level: We cannot recover your vehicle's streak level if you lose access to your wallet. This underscores the importance of proactive security measures and precautions to safeguard your assets.

By following these guidelines and acting swiftly, you can help safeguard your assets and minimize the impact of a compromised wallet. Your security is our priority, and we're here to assist you in securing your DIMO account.