Airdrop season is back, and that set of "anti-witch" tasks on the platform is getting more and more like clocking in for work... Honestly, the one you should really be against is actually yourself slipping up. Don't input your seed phrase on any webpage, even if it says "official verification" or something similar; if you need to back it up, do it offline, don't screenshot or store it in the cloud, losing it means losing it forever.

And about signature authorization, many phishing sites don't steal your coins directly; they just ask you to "approve" something, and then your wallet is like leaving a backdoor open. When I see those requests for bulk approval, unlimited permissions, or signatures I don't understand, I usually treat it as a prelude to a rug pull, and just close the page and go to sleep. No matter how tempting the points are, it's not worth treating your wallet like a work ID card. Take a look again.