Understand it before you trust it.
Five short modules. The path, the approval, the drain, the score, and the part most people skip: getting paid and keeping it. Each module ends with something you can do, not a badge.
The first-payment map
Why the same advice fails in different countries, and what the matcher actually checks.
A path is not a list of side hustles. It is a match between four things: where you live, how the money can reach you, the hours you can keep, and what you can already do. A fifth variable decides whether it is safe: the scam risk of the platform and the pattern.
Shingan filters first. If the platform cannot pay to your country or your payout rail, it is out before scoring. Then it scores what remains: demand, scam risk, skill match, time to the first payment, and whether the path needs capital you do not have.
The model writes the plan and the assets. It does not choose the path. That is deliberate: the choice has to be auditable.
Approvals, plainly
The one signature that can move your tokens later, without another signature.
A transfer moves tokens once. An approval gives another address permission to move them later, up to a limit. If the limit is unlimited, the permission has no end until you revoke it.
A login should never need an approval. A swap needs an approval to the router, and a good wallet shows you exactly what it is for. The dangerous pattern is an unlimited approval to a contract you do not recognise, especially one deployed days ago.
Revoking is a transaction you sign: approve(spender, 0). It costs gas, and it is the only way to take the permission back.
How wallets get drained
Four patterns worth recognising on sight.
Most losses are not broken cryptography. They are a signature the person did not understand, or a payment sent to someone who asked for it in the wrong order. The patterns repeat because they work.
Reading risk
A score is only useful if you know what moves it.
The health score starts at 100 and subtracts what Shingan can see: every active approval, an extra penalty for unlimited, a larger penalty for a risky spender, and a small one for dormancy. It is a heuristic, not a guarantee.
Spender risk is separate. It combines token security and address security: honeypot, cannot-sell, hidden owner, mintable, pausable, phishing, blacklist, and more. The Why button on an alert shows the flags behind the number.
Getting paid and keeping it
The part after the first “yes”.
Choose a payout rail that actually works where you live. Get paid through the platform's own checkout, not a private transfer. Never pay a fee to unlock work. Never share a one-time code. Record the first payment when it lands; it is the proof you will use for the next one.
Then guard the wallet the money lands in. The guard watches approvals and outflows and shows the alert in your dashboard; email is the optional push. The same email account holds the path and the guard; add the wallet when the payment lands in crypto.
You know enough to start.
Answer five questions, or scan the wallet you will be paid into. Both are free. The account is only needed to save and run.