Recently, there have been incidents of cross-chain bridge thefts and oracle errors, and the usual response in the group is "Wait for confirmation"... Basically, everyone has been taught: don't bother with the hassle.

I personally categorize assets roughly into three tiers: small daily transactions (sensitive to gas costs), software wallets are sufficient, but I will separate authorization and signing, avoiding unlimited permissions whenever possible. For medium-sized holdings, where I start to hesitate to lose them, I use hardware wallets, even if it’s slower to plug in each time, at least the signing step is less nerve-wracking. For larger amounts, the cost of a single mistake is too high, multi-signature setups are more reliable, especially when cross-chain or complex contracts are involved; the obvious downside is increased configuration and collaboration costs, and quick operations are basically impossible.

I have a neutral attitude toward social recovery: suitable for people who frequently switch devices, forget mnemonics, and are afraid of losing them, but don’t underestimate the difficulty of “finding someone to recover,” choosing the wrong guardian is more embarrassing than losing the mnemonic. Anyway, my current principle is: do everything that can be verified, don’t rely on luck.