The third time I saw a friend click into a group link about “Will the mainnet issue tokens” just to grab testnet rewards/points, their wallet popped up with a whole stack of signature prompts. One shaky hand and they clicked “approve” for everything… To put it plainly: the mnemonic phrase is the bottom line—don’t give it to anyone, no matter what. Next comes authorization and signature—don’t be fooled by how it looks like a login, because it could actually be granting unlimited allowance, or even transferring assets. Now I’m basically used to this: for new projects, start with an empty wallet plus a small amount. If authorization lets you choose specific amounts, don’t click “unlimited.” After the interaction, revoke the approve immediately. It’s totally normal to rush for points, but if you get phished once, you can’t make up for it afterward no matter how many points you earn. Anyway, I’d rather move a bit slower.