# "smart contract" (exploit OR hacked OR drained) — X 热门讨论 (2026-09-24 15:35 UTC)

## @JamesDula82 (Iso Ledger) · 09-24 09:14 · ♥23 ↻3 💬2 My #1 Pick to Hold My ALGO

@PeraAlgoWallet

Every time.

Holding and earning happen in the same place.

How staking works there

Algorand staking is native to the network.

For solo or delegated consensus, your ALGO stays in your wallet.

There's no lockup and no slashing.

Offline or bad nodes just get dropped from consensus and miss rewards.

Nothing gets taken from you.

Solo or delegated consensus needs 30,000 ALGO minimum. Below that, Pera's Stake tab opens the door to liquid staking and stake pools instead. Those let smaller balances earn too, but here's the real difference: your ALGO actually moves into a protocol and you get a receipt token back.

That's not the same custody model as native consensus, so know which one you're using.

Native consensus is whole account.

There's no partial staking on one address, so split funds across wallets if you only want part of it earning.

The numbers Live trackers show staking rewards running around 4.75% right now.

About 22% of eligible Algo is currently staked, so the large majority still earns nothing.

Rewards come from network transaction fees plus a Foundation-funded block bonus that decays slowly over time, not from new inflation out of thin air.

Any hacks?

I looked.

I found no reported exploit of Pera Wallet itself.

Here's what I did find.

February 2023: MyAlgo, a different, older Algorand wallet, was hit for about $9.6M across 25 wallets. The cause was never fully confirmed publicly. MyAlgo told users to withdraw and effectively wound down.

That's not PeraAlgo.

Different wallet, different codebase, different team. Worth knowing because people still confuse the two when they hear "Algorand wallet got hacked."

Phishing: same playbook as everywhere else. Fake ads, fake sites, fake support asking for your recovery phrase. Pera publishes its own phishing guide and the only real site is https://t.co/Iq2o6h3PPu.

What they ship Pera started as the official Algorand Wallet before rebranding.

April 2026: Shared Accounts, native multisig built into the wallet itself.

2-of-3, 3-of-5, weighted signing, no smart contract needed since it runs at the protocol level. First time this was made simple enough for regular people, not just developers.

Security Non-custodial.

Pera never holds your keys.

Keys get encrypted locally in your browser with NaCl secretbox, not some in house method nobody's reviewed.

They explicitly avoid third party analytics and tracking scripts in the wallet itself, since that's a real injection risk on web wallets.

The honest part I couldn't find a recent named third party audit report specifically for Pera's own app, the way HashPack has one from Quantstamp.

Their security writeup explains their choices well, but I'd like to see an outside firm's name attached to it. Liquid staking and stake pools carry smart contract and operator risk that plain native staking doesn't.

Read what you're actually depositing into before you pick that route over solo or delegated.

30,000 Algo is a real number to know if you're planning to run solo.

Most people reading this aren't there yet, so know which bucket you're in before you pick a staking method.

Nobody can recover your keys or password for you. Lose the recovery phrase and it's gone.

Choosing a wallet is not choosing a coin.

Good choice if we go into a 3 year bull run to make some free Algo.

ISO Ledger 🛡 https://x.com/JamesDula82/status/2103050331878027501