Recently, I saw someone get completely taken in by a phishing site again. It’s not about technical skill; they’re just taking advantage of your urgency. My three red lines are actually simple: never input your seed phrase on a webpage/form (even if it looks very much like the official site), I consider any “re-import wallet” prompts to be scams; always check what you’re authorizing before signing, especially those confusing strings that rush you to click—I’d rather not do it; I periodically clear old authorizations, otherwise it’s like lending out your house keys and forgetting to get them back.

There’s been a lot of arguing about NFT royalties. Honestly, it’s about liquidity and creator income, someone always has to make concessions. But no matter which side you’re on, don’t make decisions about wallet security based on emotions… There’s too much information, and it makes me anxious, so I now only rely on two sources of information plus a quick on-chain check myself. The rest is noise; taking it slow actually helps avoid more pitfalls. That’s all for now.