Recently, I keep seeing reports of people’s wallets getting drained. To put it simply, many times it’s not because they clicked on some “black link,” but because the authorization they previously gave to a contract was set to unlimited, and months later they even forget about it. Revoking permissions is like sleeping: if you don’t do it right then, you won’t feel it, but if something really goes wrong, it’s the kind of regret you have after pulling an all-nighter.

Now I’ve gotten into the habit that after I use a new protocol, I go through and tidy up the unused authorizations a few days later—especially for older wallets and older NFT marketplaces. On the macro side, they’re still arguing about interest rate cut expectations, and the US dollar index moving in sync with risk assets, rising and falling together. When the market gets hot, people act faster and it’s even easier to forget these little moves… Anyway, I’d rather click a couple more times than be “late-stage lazy.”