Whenever I see “unlimited authorization,” it feels just as awful as noticing a door with no lock… Back then, signing that one step was just convenient, but if something really goes wrong later, it’s basically “you handed out the keys yourself.” So I’ve gotten into the habit of revoking permissions right after I finish using a dApp—just like checking the doors and windows before bed. It’s a hassle, but at least I can sleep easy.

Recently, we’ve been talking about some places adding taxes and tightening or loosening compliance at different times. Once people’s expectations for deposits and withdrawals change, they get more prone to panic. And when people panic, they’re most likely to click around and sign randomly. Anyway, I have one principle: if it can be layered, then layer it; keep only what’s needed in a hot wallet; make authorization as small as possible; and revoke permissions as a daily check-in—like a daily sign-off. No coins lost—that’s better than anything.