Last night I stayed up until 2 a.m. reviewing audits, and I casually looked at a few on-chain interactions related to "privacy." To put it simply, many people treat privacy as a stealth cloak, but on the blockchain, it's more like curtains: they can block some sightlines, but that doesn't mean no one can peek behind them. The boundary of compliance isn't a single line; it's a bunch of gray areas. For ordinary users, I think the most realistic expectation is: don't expect to be forever untraceable, and don't take "I haven't done anything bad" as a shield. When an investigation happens, transaction paths, deposits and withdrawals, and timestamps are all things that are hard to pretend never happened.

Recently, the debate over NFT royalties has been intense. Creators want income, trading platforms want liquidity, and in the end, it all boils down to the same issue: whether rules are written into smart contracts or are subject to changes by platforms/regulators/community. Anyway, what I care more about now is: what exactly am I authorizing each time I sign, and whether assets are being "one-time granted." I prefer to do a few extra steps rather than take shortcuts just to save effort.

What I’ve learned isn’t techniques, but rather to first think clearly about "what others can see" and "what I need to bear" before clicking confirm.