Today I tidied up the desk and found a bunch of sticky notes.

What was written on them wasn't to-do lists, but my own red lines:
Never include mnemonic phrases in screenshots, cloud storage, or send them to "customer service";
If you don't understand the signature popup, just click cancel first—it's better to be slow and clarify later.
Recently, a bunch of new L1/L2 projects are trying to incentivize and pull TVL,
Old users in the group are complaining about mining, selling, and so on.
I don't really have any feelings about it; anyway, the more lively it gets, the easier it is for phishing sites to ride the traffic.
Cross-chain, I still stick to the same approach—small amounts tested multiple times,
If authorization can be used once, don't give unlimited access;
Revoke authorization after use to avoid waking up one day to find your wallet emptied...
That's all for now.