{
  "questions": [
    {
      "question": "What is the primary goal of a dusting attack?",
      "options": [
        "To steal your private key by brute-force guessing",
        "To bait you into interacting with a token you never requested",
        "To drain your wallet using a smart contract exploit",
        "To impersonate your wallet address on-chain"
      ],
      "correctAnswer": 1,
      "explanation": "Dusting attacks send unsolicited tokens to your wallet as bait, with the danger only activating when you attempt to interact with the token."
    },
    {
      "question": "What do Freeze Authority and Permanent Delegate have in common when set on a dust token?",
      "options": [
        "Both can access your SOL balance and other tokens in your wallet",
        "Both were added by Solana validators, not the token creator",
        "Both are limited to interacting only with that token's Associated Token Account",
        "Both require your wallet signature before they can execute"
      ],
      "correctAnswer": 2,
      "explanation": "Token-level authorities like Freeze Authority and Permanent Delegate are scoped exclusively to the token's own ATA and cannot touch your SOL or any other assets."
    },
    {
      "question": "According to the lesson, when does a dust token become dangerous?",
      "options": [
        "As soon as it appears in your wallet",
        "When the token creator activates the Permanent Delegate remotely",
        "Only if the token has been listed on a DEX",
        "When you attempt to interact with it by swapping, visiting linked sites, or claiming rewards"
      ],
      "correctAnswer": 3,
      "explanation": "Tokens on Solana cannot execute code on their own — the risk only materialises the moment you take an action such as trying to sell, look up, or claim rewards from the token."
    },
    {
      "question": "What is the recommended safe way to remove an unwanted dust token from your wallet?",
      "options": [
        "Swap it for SOL on Jupiter to recover any value before it disappears",
        "Use your wallet's native burn or close-account function to close the ATA",
        "Send it to a burn address using the token's own website",
        "Delegate it to a trusted validator who can dispose of it on your behalf"
      ],
      "correctAnswer": 1,
      "explanation": "Using your wallet's built-in close-account feature (such as Solflare's token management UI) calls the standard SPL Token Program directly and is entirely independent of anything the token creator controls."
    }
  ]
}

{
  "questions": [
    {
      "question": "What is the defining action that makes something a rug pull?",
      "options": [
        "A hacker exploits a smart contract vulnerability to steal funds",
        "Project creators drain liquidity and disappear after building hype",
        "A token loses value due to poor market conditions",
        "Users are tricked into revealing their seed phrases"
      ],
      "correctAnswer": 1,
      "explanation": "A rug pull is an intentional exit scam where creators drain the project's funds and disappear, leaving investors with worthless assets."
    },
    {
      "question": "You notice an unfamiliar token has appeared in your wallet that you never purchased. According to the lesson, what should you do?",
      "options": [
        "Immediately swap it for SOL to recover any value",
        "Send it to a burn address to clean up your wallet",
        "Ignore it and do not interact with it",
        "Report it by clicking any link associated with the token"
      ],
      "correctAnswer": 2,
      "explanation": "Unknown tokens sent to your wallet are often dusting attacks designed to lure you into interacting with a malicious contract, so you should simply ignore them."
    },
    {
      "question": "A token named USDC is trading on Jupiter. What is the most reliable way to confirm it is the legitimate stablecoin?",
      "options": [
        "Check that its market cap is similar to the real USDC",
        "Confirm it has a high trading volume",
        "Verify its contract address matches the official USDC mint address",
        "See whether it carries the Jupiter verified badge"
      ],
      "correctAnswer": 2,
      "explanation": "Any token can be named USDC on Solana, so the only reliable check is comparing the token contract address against the address published on the official project website."
    },
    {
      "question": "Which combination of warning signs does the lesson identify as red flags for a potential rug pull?",
      "options": [
        "Low trading volume and a recently launched mainnet",
        "Anonymous team, guaranteed high yields, and no public security audit",
        "Unverified token badge and fewer than 10,000 Twitter followers",
        "High token price and a small circulating supply"
      ],
      "correctAnswer": 1,
      "explanation": "The lesson specifically lists an anonymous team with no track record, promises of guaranteed high yields, and the absence of a reputable public audit as key rug-pull warning signs."
    }
  ]
}