Honestly, I care more about wallet security now than watching candlestick charts.

Don't screenshot your seed phrase or store it on cloud drives; if you really want to back it up, just honestly write down two copies offline, keep them separate, and losing one won't mean losing everything.
Don't be quick to sign authorizations, especially those pop-ups that say "Just confirm," I will first check the domain name, then look at the authorization scope, if I can set a limit, I won't open everything, if I can revoke, I will revoke regularly... Anyway, I'd rather make it a bit more troublesome.
Recently, before and after the upgrade of that mainstream public chain, everyone has been guessing whether the project will migrate; I’m not sure either, but during times like this, phishing sites love to jump on the hype.
Don't click on random links, and don't be greedy for airdrops either.
Stop-loss must be decisive, and wallets must be too.