I now find "Unlimited Authorization" as uncomfortable as leaving the door unlocked by my bed... At the time, I clicked on max approve to save trouble, thinking it was more convenient, but a few days later I completely forgot about it. Contracts, you see, you think you're just using them, but in reality you're lending out the keys first. If you don't revoke before sleeping, you'll always be worried.

Recently, there are a bunch of AI Agents and automated trading claiming fully automated on-chain interactions, the hype is pretty strong, but honestly, the security issues are still the same old problems: signatures, authorizations, and verifying link authenticity. If you ask it to help you "operate smartly," it can also "smartly use up all your permissions." I'm not regretting the outcome, but I regret not paying more attention to the scope of authorization back then because it was too much trouble.

Anyway, I’ve gotten used to this: revoke after each interaction, just like brushing teeth and washing face. If I don’t revoke, I can't sleep peacefully. Hardware wallets are great, but if you authorize the wrong thing, it won't save you either. That’s how it is for now.