Just woke up and saw someone asking again: “Will the project migrate because of that main-chain upgrade/maintenance?” I think don’t rush to guess whether it will migrate or not—wallet security is more concrete… It doesn’t matter where it migrates to; if your mnemonic phrase leaks, it’s basically wiped out.

Don’t screenshot your mnemonic phrase or save it to a cloud drive—write it down by hand and keep it separated. And when it comes to signature authorizations, don’t click “confirm” just because you see a pop-up—especially those that casually say “read-only permission/claim an airdrop.” Once you click, it actually grants unlimited authorization.

The sneakiest phishing sites are the ones where the domain name is off by just one letter. The page looks exactly like the real one. Anyway, for any new link I get, I always check the domain first and then review the authorization details; if I’m not sure, I close it. Taking a bit more time is stronger than regretting later.