In the past few days, I've seen people on phishing sites saying "Connect Wallet - One-Click Claim," honestly it's almost like handing over your seed phrase... My red line is pretty simple now: seed phrases never go into web pages/forms, any pop-up that asks you to "import wallet" should be closed immediately; if you don't understand the signature authorization, don't sign it, especially those with unlimited limits, first clear old authorizations in your wallet, better to be cautious.

Recently, everyone has been complaining that miners/validators rely on MEV and unfair ordering, retail investors feel like they are being cut in line. Anyway, my approach is to use multi-signature as much as possible, keep funds separated, lock permissions and amounts, taking it slow is better than crying afterward.