Recently, hardware wallets have been out of stock everywhere, it seems everyone has finally learned about phishing links... But honestly, there’s no shortcut to security. Don’t screenshot your seed phrase, don’t store it on cloud drives, don’t send it to your secondary accounts—paper works, metal plates work too, the less connected to the internet, the better.

For signature authorizations, I’m even more cautious now: if it’s an unfamiliar site or a pop-up urging you to “claim/verify immediately,” just close it; if interaction is necessary, first try with a small wallet, set limits on authorizations if possible, and revoke permissions if you can.
I no longer chase explanations; the market and scammers are very unpredictable. All I can do is draw the red lines early: better to miss an airdrop than to confirm once and send the main wallet away.
For profit-taking, just turn off Twitter; security is the same—finish your work and go offline.