I've seen more cross-chain bridge hacks in the past few days, and I'm really exhausted... To be honest, many incidents are not due to complex technology but because users have long crossed the red line: never screenshot mnemonic phrases, never store them on cloud drives, never send them to "support," writing them down on paper is still safer than storing them in phone albums.

And about signature authorization, don't reflexively click confirm just because you see "Sign," first make sure it's not giving unlimited access or transferring your assets away; for unfamiliar sites/pop-ups, better to close and restart.
Recently, everyone has been shouting "wait for confirmation" when oracle prices are abnormal, and I think that's right—waiting half a minute is much better than chasing after the incident.
Anyway, my habit is: try new links with a small wallet first, regularly clear authorizations, and use hardware wallets if possible... It’s a bit obsessive, but it gives peace of mind.
I'm off to work.