Recently, friends have been asking whether to take photos of mnemonic phrases and store them on cloud drives… I sincerely advise against it, even if encrypted, it’s pretty risky. Losing your phone or having your account hacked could mean game over. Anyway, I now keep two handwritten copies separate, and I usually do a small test transfer before sending larger amounts, even if it’s more trouble.

Signature authorization is even easier to go wrong. Some sites are designed to look just like official ones, and clicking “Confirm” actually grants access to certain permissions of your wallet. My red line is: if I don’t understand it, I don’t sign; if the authorization scope in the pop-up is too broad, I close it; if the link isn’t from my bookmarks, I treat it as phishing. Honestly, I’m most afraid of losing control—not necessarily losing money, which can be made up, but losing permissions, which I can’t sleep over.

By the way, regarding everyone arguing about NFT royalties, I understand creators want to earn income, but for ordinary people, secondary liquidity is very real… The more I think about it, the more I realize that how rules are written is one thing, but if the wallet’s security gate can’t hold, all modes are pointless. That’s all for now.