I almost botched it just now… while copying the address, my hand slipped and I also tapped the authorization line and set it to “Unlimited.” Thankfully, I glanced at it before signing, and my heart tightened: once you let this thing out, even if you fall asleep later, it can still deduct on its own. Put simply, revoking permissions is just as important as sleeping—it's not to save a little gas, it's to make sure that when you wake up tomorrow, you don't end up like, “How did everything disappear?”

Lately, the whole setup of stacking rewards from re-staking and sharing security has been getting mocked as “nested boxes.” I honestly don’t want to pick sides. The rewards look pretty enticing, but once the layers pile up, the risks from authorizations and contracts stack up with them too, and in the end, it’s impossible to say clearly who will take the blame. Anyway, my current habit is: use it, then revoke it; if you can set a limit, set a limit; and every few days, quickly scan the authorization list… If I make a mistake, I’ll own up to it, but don’t make a mistake so big that I don’t even get a chance to admit it.