In the middle of the night, I saw some strange authorization transactions on the blockchain, and I immediately became alert... Backup of mnemonic phrases through screenshots/cloud storage is really risky; basically, you're leaving a key for others. Don't just check all options with one click when signing permissions; when I see "unlimited limit" or "long-term validity," I usually close the page right away, preferring to go through the trouble and do it properly. Phishing sites now look exactly like legitimate ones, and when the economy of blockchain games collapses, studios and retail investors panic together, making it easiest for someone to take advantage and distribute malicious links to harvest. Anyway, my red line is: mnemonic phrases never go on electronic devices; don't authorize DApps you don't recognize; revoke permissions immediately after use—that's my current stance.