imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

imtoken

Wallet & Assets Overview

Understand addresses, networks, asset display, transfers and transaction records so everyday on-chain activity is easier to review.

On this pageWallets and addressesHow assets are displayedReceiving and sendingHow to verify transaction recordsSecurity boundaries for wallet use

Wallets and addresses

When reviewing Wallets and addresses, separate wallet address, account structure, and network differences. They may appear in the same workflow, but they represent different layers of the action. On this Wallet & Assets Overview page, the goal is to build a verifiable mental model rather than depend on a single interface cue. Before approving anything, identify the network, the object being changed, and whether the request matches the task you intended to perform.

A useful routine is to review items in a fixed order: confirm account structure, verify network differences, inspect address verification, and keep asset ownership for later reference. If a page unexpectedly asks for wallet address, stop and verify the source instead of continuing simply because the workflow looks familiar.

From a security perspective, Wallets and addresses should be considered together with network differences, address verification, and asset ownership. A legitimate review flow does not require you to reveal a seed phrase, private key, or verification code. Requests involving wallet address or account structure can change permissions or asset state, so review them individually and reject anything you do not understand.

How assets are displayed

In practice, token contract often tells you whether you are in the right context, balance affects the resulting state, and network selection helps with independent verification afterward. Do not rely only on a success message in the interface. Where on-chain state is involved, compare it with asset list and unknown tokens so you can distinguish presentation from the actual network result.

How assets are displayed also has failure modes. Congestion, incorrect parameters, insufficient balances, contract conditions, or third-party service changes can produce unexpected results. Start with the objective state of balance, network selection, and asset list before retrying. Repeated submissions without understanding the cause can add fees or duplicate actions.

When reviewing How assets are displayed, separate network selection, asset list, and unknown tokens. They may appear in the same workflow, but they represent different layers of the action. On this Wallet & Assets Overview page, the goal is to build a verifiable mental model rather than depend on a single interface cue. Before approving anything, identify the network, the object being changed, and whether the request matches the task you intended to perform.

Review points
  • token contract
  • balance
  • network selection
  • asset list
  • unknown tokens

Receiving and sending

A useful routine is to review items in a fixed order: confirm receiving address, verify destination address, inspect amount, and keep gas for later reference. If a page unexpectedly asks for transaction hash, stop and verify the source instead of continuing simply because the workflow looks familiar.

From a security perspective, Receiving and sending should be considered together with destination address, amount, and gas. A legitimate review flow does not require you to reveal a seed phrase, private key, or verification code. Requests involving transaction hash or receiving address can change permissions or asset state, so review them individually and reject anything you do not understand.

In practice, amount often tells you whether you are in the right context, gas affects the resulting state, and transaction hash helps with independent verification afterward. Do not rely only on a success message in the interface. Where on-chain state is involved, compare it with receiving address and destination address so you can distinguish presentation from the actual network result.

How to verify transaction records

How to verify transaction records also has failure modes. Congestion, incorrect parameters, insufficient balances, contract conditions, or third-party service changes can produce unexpected results. Start with the objective state of state, block confirmations, and block explorer before retrying. Repeated submissions without understanding the cause can add fees or duplicate actions.

When reviewing How to verify transaction records, separate block confirmations, block explorer, and failed transaction. They may appear in the same workflow, but they represent different layers of the action. On this Wallet & Assets Overview page, the goal is to build a verifiable mental model rather than depend on a single interface cue. Before approving anything, identify the network, the object being changed, and whether the request matches the task you intended to perform.

A useful routine is to review items in a fixed order: confirm block explorer, verify failed transaction, inspect duplicate submission, and keep state for later reference. If a page unexpectedly asks for block confirmations, stop and verify the source instead of continuing simply because the workflow looks familiar.

Security boundaries for wallet use

From a security perspective, Security boundaries for wallet use should be considered together with seed phrase, private key, and signing. A legitimate review flow does not require you to reveal a seed phrase, private key, or verification code. Requests involving approval or third-party DApp can change permissions or asset state, so review them individually and reject anything you do not understand.

In practice, private key often tells you whether you are in the right context, signing affects the resulting state, and approval helps with independent verification afterward. Do not rely only on a success message in the interface. Where on-chain state is involved, compare it with third-party DApp and seed phrase so you can distinguish presentation from the actual network result.

Security boundaries for wallet use also has failure modes. Congestion, incorrect parameters, insufficient balances, contract conditions, or third-party service changes can produce unexpected results. Start with the objective state of signing, approval, and third-party DApp before retrying. Repeated submissions without understanding the cause can add fees or duplicate actions.

Security note: Seed phrases and private keys remain under the user’s control. imtoken will not ask for a seed phrase, private key or verification code. Verify the address, network and amount before transferring. On-chain transactions often cannot be unilaterally reversed by a wallet. Third-party DApps and smart contracts carry risk; review the spender and permission scope before approving.

Get imtoken

All download actions use the dedicated download page. Review the network, address and security context before acting.

Download imtoken