These past few days, I've seen a bunch of "social mining/fan tokens" claiming that attention can also be mined. My first reaction wasn't about how much money I could make, but more like: They're just feeding a few more phishing sites... When you get excited and click in, they always want you to "sign first to prove you're a real person." Signing, honestly, is like a door key or a blank check—normal use is fine, but once they ask you to authorize unlimited access or sign a string of unreadable content, I just close the page immediately, even if I miss out.

Mnemonic phrases go without saying; any "customer service/event registration/airdrop claim" that asks you to input those 12/24 words is a 100% red line. I personally separate addresses by scenario: one for interactions, another for long-term storage, revoke permissions once used. It’s a bit troublesome, but losing once is more troublesome. For now, I’ll stick with this—less greed, more peace of mind.