Recently, I've seen new L1/L2 projects offering incentives to pull TVL.

In the group, some are shouting to rush in while others are complaining, "Mining, selling,"
Anyway, I’ll just keep my hands in my pockets... The more lively it gets, the easier it is for trouble to happen.
There are three red lines for wallet security:
Don’t keep your seed phrase online, don’t screenshot it, and don’t send it to anyone (not even customer service);
Don’t blindly click on signatures, especially those confusing "claim airdrops/verify eligibility" strings—better to miss out;
Give as little authorization as possible, revoke permissions after use, don’t let unlimited access sit there idle.
Phishing sites now look exactly like official websites—basically just waiting for you to slip up.
I no longer believe in the luck of "just one click to claim."
That’s all for now, going to relax and watch the mempool.