Recently, someone kept asking me, "Why did I lose my funds even though I didn't make a transfer?" Basically, many times it's not a transfer, but you gave signing authorization: phishing sites make the page look exactly like the real protocol, and just clicking confirm is like handing over the master key to a tentacle... Not to mention mnemonic phrases, any place that prompts you to "import, verify, or sync your wallet," I automatically assume it's trying to steal your assets. My simple method: never store mnemonic phrases online, no screenshots, no cloud storage; test new sites with a small wallet first, avoid granting unlimited permissions if possible, and after a couple of days, remember to revoke the permissions. By the way, recently there's been talk about some places adding taxes, tightening or loosening compliance, and I found that when people get nervous, they tend to rush in and out of funds, and it's during these frantic moments that it's easiest to fall into phishing traps. That's all for now.