Recently, I saw someone get their assets drained because of "unlimited contract authorization," which is really not surprising. Basically, if you click approve=∞ once, it's like handing over the keys to your house to someone else. The project team may not be malicious, but contract upgrades, front-end malware, phishing signatures—any of these issues can cause you trouble. Revoking permissions is like locking the door before bed; it only takes two minutes and can save you from a nightmare all night.

My habit is: revoke after use, and if I really need to keep some permissions, I only give the necessary amount—don't just take shortcuts. By the way, I want to complain about the current L2s arguing over TPS/fees/subsidies; it looks lively, but having a bunch of old authorizations in your wallet is the real "hidden debt." No matter how high the performance, it can't prevent a slip-up.

A colleague asked me a couple of days ago, "Is revoking really necessary?" I told him, if you don't care about money, just pretend I didn't say anything... Anyway, I check my authorization list before bed.