According to CoinMeta, as reported by Coinpaper, if you suspect that your cryptocurrency wallet has been attacked, the first step is to determine the access levels that the attacker may have gained and take measures to prevent further losses. There is a significant difference between visiting phishing websites, connecting to the wallet, approving token transactions, signing malicious transactions, and leaking mnemonic phrases or private keys. Some incidents can be controlled by revoking permissions, while in other cases, it means that the wallet itself is no longer trustworthy and should be abandoned. If the attacker has obtained the mnemonic phrases or private keys, simply changing the wallet password, disconnecting from the website, or revoking token approvals will not solve the problem. Those who hold these credentials can independently sign transactions within the wallet. MetaMask warns that people who possess the secret mnemonic phrases can access accounts derived from them. This guide explains how to determine if a cryptocurrency wallet has been attacked, what different types of attacks imply, and the steps that should be taken next.