Recently, I've seen people interpret large on-chain transfers and hot/cold wallet movements on exchanges as "smart money." My first reaction wasn't to follow suit but rather to feel a bit nervous: the more people watch the market, the more phishing sites love to jump in and ride the hype.

Later, I thought it was pretty funny—I'm someone who watches hash rate curves, yet I get my mindset more like a retail investor because of "wallet pop-ups."
Don't cross the red line of mnemonic phrases; if you really need to remember them, don't store them in cloud drives or chat logs.
Don't click on "free claim" or "airdrop compensation" when signing authorizations, especially those that ask for unlimited permissions—that's basically handing over your keys.
Anyway, my current habit is: use a small wallet specifically for testing links, only transfer with a big wallet, revoke permissions if possible, and accept slow transactions.
Security isn't cool, but after falling into a pit once, you'll be honest about it.