From fake NFT airdrops to malicious wallet approvals — how attackers exploit users directly on-chain, and how to protect yourself.IntroductionIn Web2, phishing usually comes through suspicious emails or fake login pages. Users are trained to look for red flags: strange domains, urgent messages, or poorly written text.In Web3, phishing has also...