Recently, I saw someone get completely phished by a scam site again. Honestly, it’s either “your seed phrase wasn’t stored securely” or “your signature was too casual.” Regarding seed phrases: don’t take screenshots, don’t upload to cloud storage, and don’t send them to any “customer service.” Treat it as the root of your account. Don’t find signing authorization too troublesome—when a pop-up asks you to approve a bunch of unlimited transactions, pause first and think carefully about who you’re opening the door to. Domains you don’t recognize, fake frontends, or suddenly asking you to reconnect your wallet are usually scams.

Recently, everyone’s been complaining about validators eating MEV and unfair ordering, but retail investors shouldn’t pin their hopes on “others being fair.” First, review your authorization list, isolate your frequently used addresses, keep small funds in hot wallets, and store larger funds in cold wallets… I’ve also fallen into traps before. The few times I managed to recover with scripts, I really don’t want to remember. We’ll talk about this again next time.