Lately I've been struggling with the wallet issue again... Looking at the on-chain thefts/mis-signed transactions, my palms still sweat. To be honest, when the assets are not large, I think a hardware wallet + minimal fuss is enough, don’t treat authorization like ordering takeout and click randomly; when it’s a quantity that “losing it will affect your life,” more signatures feel more secure, keep signers separate, don’t keep them all on the same computer or cloud drive.

I’m quite conflicted about social recovery: it’s friendly to forgetful users, but the trust layer of “friends/devices/service providers” needs to be carefully considered, or it’s just risk with a different shell. Recently, with the stacking and sharing of security benefits, I’ve been criticized for being a “copycat,” and I also resonate a bit: the returns look tempting, but the complexity also increases, and if something goes wrong, you don’t know who to blame. Anyway, my current principle is: the fewer layers, the better; run scripts more often, sign less.