If your wallet is compromised

If you think someone has your recovery phrase or private key, or you approved a transaction you didn't understand, act now. Speed matters more than anything else.

If your recovery phrase or private key may be exposed

Treat the wallet as permanently unsafe. There's no way to change a recovery phrase.

1. Create a new wallet in Morsel: tap your wallet name, then Add new wallet → Create a new wallet.
2. Back it up on paper right away. See Your Secret Recovery Phrase.
3. Move everything from the old wallet to the new one, on both networks. Start with the most valuable. Keep a little COOK or SOL in the old wallet until the end, for fees.
4. Unstake any staked COOK or SOL and move it once it's withdrawn. See Unstake and withdraw.
5. Stop using the old wallet and its phrase. Remove it from Morsel when it's empty.

If you signed something bad

If the transaction already went through, it can't be reversed. But you can stop it getting worse.

1. Disconnect the site. See Disconnect a site.
2. Check Activity for what left your wallet. See Activity.
3. If you gave a site permission to spend a token, move that token to a new wallet as above. The permission is tied to the old account.
4. If you're not sure what you signed, treat the wallet as compromised and follow the steps above.

Report it

• Tell Morsel Support about the site or the person, so others can be protected. Include the site's address and the transaction ID. Never send your recovery phrase.
• In the browser, a blocked site has I think this is a mistake. Report it. That's for sites blocked by mistake, not for reporting scams.