A few days ago, I saw that the main public chain was going to upgrade/maintain again, and everyone in the group was guessing whether projects would move. My first reaction was actually: don’t rush to move your positions, first think carefully about “how to keep the keys.” When assets are small, I think a hardware wallet is enough, at least isolating the private key from your phone and computer; once you have some size, single-signature starts to make you nervous, multi-signature is a bit more complicated, but it can eliminate single points of failure like “slip of the hand,” “getting infected,” or “losing the key.” As for social recovery, I see it more as a backup plan, suitable for those who are really afraid of losing their device, but only if you trust those few “friends,” otherwise it becomes a social risk.

I once had a typical case of “not understanding and just not moving”: one day, a signature prompt suddenly popped up in my wallet, saying “migrating to a new contract.” I looked at it for a long time but couldn’t understand what exactly was being migrated, so I just closed it and went to sleep… The next day, I found out someone was phishing to steal the spotlight. To put it simply, security isn’t always about how advanced the technology is; sometimes it’s about not doing the most complex operations during the loudest moments.