{"schemaVersion":1,"id":"10","slug":"seed-phrase-compromised","title":"助记词泄露了怎么办？","description":"已泄露的助记词应视为永久不再安全。先停止向受影响账户充值，避免自动扫币造成二次损失，在可信环境建立独立新恢复方案并评估迁移条件。","related":[{"id":"5","title":"私钥、公钥、助记词和地址有什么关系？","url":"/docs/private-key-public-key-seed-phrase-address"},{"id":"4","title":"加密钱包是什么？","url":"/docs/what-is-crypto-wallet"},{"id":"12","title":"如何使用 Etherscan 查询一笔交易？","url":"/docs/etherscan-check-transaction"}],"publishedAt":"2026-11-03T16:37:13.235Z","updatedAt":"2026-11-03T16:37:13.424Z","url":"/docs/seed-phrase-compromised","markdownUrl":"/docs/seed-phrase-compromised.md","jsonUrl":"/api/knowledge/10","section":{"id":"3","slug":"questions","title":"常见问题","description":"按现象查找原因和处理办法。"},"categoryPath":[{"id":"3","slug":"questions","title":"常见问题","url":"/section/questions"}],"scope":null,"verification":null,"sources":[{"title":"MetaMask — Secure your Secret Recovery Phrase and password","url":"https://support.metamask.io/start/user-guide-secret-recovery-phrase-password-and-private-keys/","locator":"[M1] Secret Recovery Phrases；Passwords and MetaMask；Private keys；Security tips；MetaMask 按创建方式分支；密码用途不能一概而论。核验：2026-11-03","checkedAt":"2026-11-02T16:00:00.000Z"},{"title":"MetaMask — What to do if you have a sweeper bot","url":"https://support.metamask.io/stay-safe/protect-yourself/fighting-back-against-sweeper-bots","locator":"[M7] Do not deposit more funds；Report the scam；Migrate to a new Secret Recovery Phrase；疑似自动扫币的 Ethereum 自托管场景；不采用抢跑脚本、救援收费或门槛承诺。核验：2026-11-03","checkedAt":"2026-11-02T16:00:00.000Z"},{"title":"Revoke.cash — Seed Phrase Compromise","url":"https://revoke.cash/learn/security/seed-phrase-compromise","locator":"[R1] What to Do If You’ve Been Compromised；FAQ；助记词泄露与授权风险的区分；不把症状当确诊，不把清空设备作为第一步。核验：2026-11-03","checkedAt":"2026-11-02T16:00:00.000Z"}],"links":[{"title":"私钥、公钥、助记词和地址有什么关系？","url":"/docs/private-key-public-key-seed-phrase-address"},{"title":"加密钱包是什么？","url":"/docs/what-is-crypto-wallet"},{"title":"如何使用 Etherscan 查询一笔交易？","url":"/docs/etherscan-check-transaction"},{"title":"M1｜MetaMask — Secure your Secret Recovery Phrase and password","url":"https://support.metamask.io/start/user-guide-secret-recovery-phrase-password-and-private-keys/"},{"title":"M7｜MetaMask — What to do if you have a sweeper bot","url":"https://support.metamask.io/stay-safe/protect-yourself/fighting-back-against-sweeper-bots"},{"title":"R1｜Revoke.cash — Seed Phrase Compromise","url":"https://revoke.cash/learn/security/seed-phrase-compromise"}],"revision":"sha256-167bdc5ddc5c23d710f2f061bf6941f1397a945916f7a5394ca7aefc7238d8ac","headings":[{"title":"如何判断自己属于哪种情况","url":"#如何判断自己属于哪种情况","depth":2},{"title":"可能原因","url":"#可能原因","depth":2},{"title":"处理顺序","url":"#处理顺序","depth":2},{"title":"何时应停止操作或寻求官方支持","url":"#何时应停止操作或寻求官方支持","depth":2},{"title":"相关概念与工具","url":"#相关概念与工具","depth":2},{"title":"参考来源","url":"#参考来源","depth":2}],"content":{"format":"markdown","value":"# 助记词泄露了怎么办？\n\n资源ID：10\n\n内容修订：sha256-167bdc5ddc5c23d710f2f061bf6941f1397a945916f7a5394ca7aefc7238d8ac\n\n栏目：常见问题\n\n发布时间：2026-11-03T16:37:13.235Z\n\n网页：/docs/seed-phrase-compromised\n\nJSON：/api/knowledge/10\n\n适用范围与核验边界请阅读正文；来源记录不代表实操验证。\n\n\n\n> 如果助记词已经交给他人或输入假网站，应把它及其派生账户视为不再安全。**先停止向这些账户充值**；改应用密码、断开网站连接或撤销代币授权，都不能使攻击者手里的助记词作废。[M1][M7][R1]\n\n<a id=\"如何判断自己属于哪种情况\"></a>\n\n## 如何判断自己属于哪种情况\n\n已明确暴露完整助记词，足以按泄露处理，不必等资产被转走。若只是签过可疑授权、看到余额异常或单笔不明交易，则可能有其他原因，不能仅凭症状断定助记词一定泄露。\n\n单独私钥泄露与助记词泄露的影响范围也不同。本文重点是**同一组助记词派生的账户**；单独导入、硬件或其他恢复方式管理的账户须另查，不一概说整个客户端内所有账户都同样失守。\n\n<a id=\"可能原因\"></a>\n\n## 可能原因\n\n常见入口包括假客服和恢复页面、泄露的云端截图或文件，以及盗取钱包数据的恶意软件。应停止使用可疑页面及设备处理秘密，不把同一短语再次提交给所谓“检测工具”。[R1]\n\n<a id=\"处理顺序\"></a>\n\n## 处理顺序\n\n1. **停止新增暴露和充值。** 不再向旧账户发送资产，通知相关付款方暂停向旧地址付款。\n2. **保留非秘密证据。** 记录网络、受影响的公开地址、交易哈希、时间和可疑页面，不把助记词、私钥或含秘密的截图放进工单。\n3. **检查环境可信度。** 若怀疑设备有恶意软件，先停止在该设备输入新秘密。保留重要材料后再按可信安全流程处置；不把立刻清空设备写成唯一办法。\n4. **建立独立的新恢复方案。** 在可信环境生成全新的恢复材料并安全备份。用旧助记词恢复钱包，或在它下面“新增账户”，都不是隔离风险。[M7]\n5. **评估迁移条件。** 新钱包不会自动接收旧资产。只有确认设备可信、账户控制和费用条件后，才能评估剩余资产的迁移；复杂合约仓位、锁定资产或扫币情形应交由可靠专业人员另行判断，不保证成功。\n\n**如果补入的 ETH 等费用资产立即转走，或怀疑有自动扫币程序，不要继续补手续费或手工抢跑。** 官方资料明确提醒，这类尝试可能继续损失资金。[M7][R1]\n\n<a id=\"何时应停止操作或寻求官方支持\"></a>\n\n## 何时应停止操作或寻求官方支持\n\n出现自动转出、迁移条件不清楚或仍有高风险资产时，应从钱包官网独立进入官方支持；已遭盗取可保留链上证据并联系当地执法机构。不相信私信里的“官方救援”、先付解冻费或保证追回的服务。\n\n撤销授权只针对特定权限，不能消除密钥泄露；更换密码也不能把泄露的短语变安全。已发生的链上转出不能由钱包客服承诺撤销。[M1][R1]\n\n<a id=\"相关概念与工具\"></a>\n\n## 相关概念与工具\n\n- [私钥、公钥、助记词和地址有什么关系？](/docs/private-key-public-key-seed-phrase-address)\n- [加密钱包是什么？](/docs/what-is-crypto-wallet)\n- [如何使用 Etherscan 查询一笔交易？](/docs/etherscan-check-transaction)\n\n<a id=\"参考来源\"></a>\n\n## 参考来源\n\n- [M1｜MetaMask — Secure your Secret Recovery Phrase and password](https://support.metamask.io/start/user-guide-secret-recovery-phrase-password-and-private-keys/)。\n- [M7｜MetaMask — What to do if you have a sweeper bot](https://support.metamask.io/stay-safe/protect-yourself/fighting-back-against-sweeper-bots)。\n- [R1｜Revoke.cash — Seed Phrase Compromise](https://revoke.cash/learn/security/seed-phrase-compromise)。\n\n资料核验：2026-11-03。核验范围为所引文档相关段落。\n\n\n\n## 参考来源\n\n1. MetaMask — Secure your Secret Recovery Phrase and password\n   地址：<https://support.metamask.io/start/user-guide-secret-recovery-phrase-password-and-private-keys/>\n   对应内容：[M1] Secret Recovery Phrases；Passwords and MetaMask；Private keys；Security tips；MetaMask 按创建方式分支；密码用途不能一概而论。核验：2026-11-03\n   核对日期：2026-11-03\n\n2. MetaMask — What to do if you have a sweeper bot\n   地址：<https://support.metamask.io/stay-safe/protect-yourself/fighting-back-against-sweeper-bots>\n   对应内容：[M7] Do not deposit more funds；Report the scam；Migrate to a new Secret Recovery Phrase；疑似自动扫币的 Ethereum 自托管场景；不采用抢跑脚本、救援收费或门槛承诺。核验：2026-11-03\n   核对日期：2026-11-03\n\n3. Revoke.cash — Seed Phrase Compromise\n   地址：<https://revoke.cash/learn/security/seed-phrase-compromise>\n   对应内容：[R1] What to Do If You’ve Been Compromised；FAQ；助记词泄露与授权风险的区分；不把症状当确诊，不把清空设备作为第一步。核验：2026-11-03\n   核对日期：2026-11-03\n\n"}}