Recently, I saw news about cross-chain bridges being hacked again, and my mindset is just one: no matter how big the infrastructure is, it can still be fooled by a fake page... Never type your seed phrase into any website/customer service chat, even if it looks exactly like the official one; I personally prefer the hassle of using hardware signatures, and keep my seed phrase offline forever. Also, for signature authorization, don’t just click confirm when you see “free claim” or “airdrop subsidy,” first check what exactly you’re authorizing, whether there’s a limit, and if you can revoke it at any time (I usually clear old authorizations periodically). After that abnormal quote from the oracle, everyone was shouting “wait for confirmation,” which basically means it’s better to miss out than to be the first wave of victims; anyway, once the red line of fund security is crossed, there’s no room for discussion. I’ve posted the images and links in the comments.