Stay safe
Simple rules to protect your wallet, recognise impersonation attempts and find the only links to trust.
Scammers often impersonate crypto teams. The rules below apply to every KcalbApp project and to every official channel.
What the team will never do
- Send you the first private message, on Discord or on any social network.
- Ask for your recovery phrase, your private key or your password.
- Ask you to send funds to validate, synchronise or unlock a wallet.
- Promise guaranteed returns or offer to multiply your tokens.
- Share a contract address or a website link in private.
Before you act
- Use only the addresses listed in Official links and in Contract addresses.
- Check the network and the full contract address before you sign a transaction.
- Read what your wallet asks you to sign, and reject any request you do not understand.
- Keep your recovery phrase offline. Nobody needs it to help you.
If something looks wrong
Do not click the link, do not sign anything and do not reply to the sender. Report the account to Discord, then open a support ticket and describe what you received.
In case of doubt, the answer is always the same: stop, and ask the team through a support ticket.
If something went wrong
- You approved a site you do not trust: revoke that approval at once, from the list of approvals in your wallet (Rabby shows one) or with a revocation tool that supports Cronos.
- You shared your recovery phrase: that wallet is no longer safe. Create a new wallet with a new phrase and move what is left at once.
- You sent tokens or CRO to a scammer: no one can reverse a transaction on Cronos, not even the team.
- In every case, report it as shown in If something looks wrong.
Anyone who offers to recover your funds for a fee, or asks for your recovery phrase to secure your wallet, is running a second scam.
Risks
No system is immune to failure or attack, and the security of a wallet rests with its owner.
| Risk | What it means |
|---|---|
| Volatility | The price of a token such as XTC or INO can move quickly and unpredictably, up or down, and can fall to zero. Never swap more than you can afford to lose. |
| No guaranteed returns | Holding a token or using the products of the ecosystem does not guarantee any profit or the recovery of what you put in. Nobody from the team promises returns. |
| Technical failures | Bugs, transaction failures, service interruptions or errors in smart contracts, on exchanges or in wallets can occur. |
| Regulation | The rules that apply to digital assets are still evolving. Changes can affect access to a token or its use in some countries. Make sure you know the rules where you live. |
Official links
Only the addresses listed on this page, and in the Links channels of the Discord server, are official. Bookmark them and ignore links received in private messages.
KcalbApp
| Platform | Address |
|---|---|
| Website | kcalb-ltd.com |
| Documentation | kcalb-ltd.com/docs/kcalbapp |
| Discord | discord.gg/kcalbapp |
| X | @kcalbapp |
| KcalbApp | |
| Crypto-Only | @KcalbApp |
Projects
Every brand publishes through the KcalbApp accounts above, except Xitcoin, which keeps its own: @Xitcoin_XTC on X and official_xitcoin on Telegram.
| Project | Website | Documentation | CoinMarketCap |
|---|---|---|---|
| Xitcoin | xitcoin.com | Xitcoin Docs | XTC |
| InoAi | inoai.org | InoAi Docs | INO |
| InoSwap | inoswap.org | InoSwap Docs | — |
| Kcanther | kcanther.com | Kcanther Docs | — |
| Stake-Only | stake-only.org | Stake-Only page | — |
| Crypto-Only | crypto-only.org | User guide | — |
Each project is presented on its own page of kcalb-ltd.com: see Brands.
Contract addresses
Always compare the full address before you buy, add liquidity, delegate or import a token. A name, a symbol or a logo is never a proof of identity.
The verified addresses are published on the page of each project on kcalb-ltd.com.
| Address | Network | Where |
|---|---|---|
| XTC, Xitcoin | Cronos EVM | Xitcoin |
| INO, InoAi | Cronos EVM | InoAi |
| Stake-Only, the validator | Cronos POS | Stake-Only |
The team never sends contract addresses in private messages. If an address differs from the one published by the project by a single character, do not use it.