Recently, I’ve also seen people, just to save trouble, choose “Unlimited” directly when authorizing a contract. To put it plainly, it’s basically like stuffing the house key outside the door… Nothing goes wrong in the moment and you’ll feel pretty smart, but once someone tampers with any step—contract/frontend/signature—how much can be siphoned from your wallet depends on its mood.

My current habit is: after the interaction, I immediately revoke permissions, just like closing the door before going to sleep—if I don’t, I don’t feel mentally at ease. Especially these days, with all the buzz about AI Agents and automated trading, everyone’s talking about “letting it run automatically for you,” but when it truly comes to signing and authorization, you still need to zoom in on the details yourself. Don’t mistake “automatic” for “safe.” It’s fine to go slower—I'd rather earn a little less than wake up in the middle of the night to check on-chain transfer records.