Nexus Loss Table Ranked by expected cost, not by how frightening it sounds
Table › How money goes

Nexus addresses

Three published addresses for the same market. Copy rather than retype.

nexusb2l73qzjn4slhyfxa3jvpolw7fomiz5sgyyefnsdhikaqgborqd.onion
nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
nexusabcdrwy7632jfmkfu3f6u7usyw2xn2mcfiljunz6zsj4p5vioqd.onion

This list is published, not monitored. An address that opens is not an address that is genuine.

A wallet phrase handed over

Ranks here rather than higher only because it is uncommon. When it happens it takes everything, immediately, with no partial outcome.

How often
Uncommon
Typical size
The whole wallet
Recoverable
Never
Cost to prevent
Nothing
The absolute oneNothing legitimate anywhere ever asks for a wallet phrase or private key, in any framing, for any reason. Not to migrate, not to verify, not to recover, not to prove ownership. There is no exception.

The framings it arrives in

Why the answer has to be flat

Because every version is designed to be reasonable, and assessing reasonableness is what the pressure is aimed at. A rule that says never requires nothing of you in the moment. A rule that says only if it seems legitimate requires exactly the judgement being attacked, at exactly the moment it is weakest.

If it already happened

Move whatever remains to a new wallet immediately and do nothing else first, including looking at the platform. This is one of the very few places in this table where genuine urgency applies, and it applies because something has already gone wrong rather than because somebody is offering you something.

Afterwards, work out which channel put the request in front of you. Almost always it arrived somewhere that cannot prove anything about itself, and almost always it was believed because of where it was found rather than because of anything it demonstrated.

Why the request works at all

Because most people do not hold a clear model of what a recovery phrase is. It reads like a password, and passwords get typed into things routinely. It is not a password. It is the wallet, in a form that can be written down, and handing it over is handing over the contents rather than permission to look at them. Once that sentence is understood, no framing survives it.

What legitimate processes actually ask for

TaskWhat is neededWhat is never needed
Receiving fundsA receiving addressAnything private
Sending fundsAccess to your own wallet softwareNothing shared with anybody
Proving you control an addressA signed messageThe key itself
Restoring your own walletThe phrase, typed into your own software offlineIt never leaves your machine

The fourth row is the only legitimate use of the phrase, and it happens on your own machine with nothing transmitted anywhere. Any process that involves sending it, pasting it into a page, or reading it to somebody is outside that.

Storage, since it has to live somewhere