I just saw on the blockchain again that someone granted an unlimited contract authorization, which basically means using the wallet as a public account. Usually it's fine, but when something goes wrong, you’ll want to cry. Revoking permissions is as important as sleeping: you can live without doing it, but if you don’t do it long-term, you’ll eventually have to pay the debt. I now get into the habit of revoking any unnecessary permissions right after each interaction—takes ten seconds and gives me peace of mind.

Recently, after the cross-chain bridge was hacked, everyone started to “wait for confirmation first,” and the same goes for oracle errors. Sometimes the blockchain really can suddenly become unreasonable… In such cases, the cleaner your authorizations are, the less likely you are to be easily exploited.

My mom asked me yesterday: “You said the money is in your hands, so why do you need to ‘allow others to spend’?” I could only reply half-heartedly: “Allowing is necessary, but don’t allow it to be unlimited…” Anyway, I’m going to clear out a few old authorizations now.