Protecting against token theft — Blankdot