I started keeping track of which contracts I have given "unlimited authorization" to, otherwise, I might be scrolling through my phone before bed and suddenly remember that I still have a bunch of "spend freely" permissions hanging in my wallet, instantly waking me up... To put it simply, revoking permissions is just as important as sleeping: you won't die immediately if you don't, but eventually, a problem will start from here.

Recently, the "attention mining" and fan token schemes in social mining are quite noisy, but I care more about this basic hygiene: shouting slogans while staring at the screen is useless. Once the contract is swapped with a different shell or the front end is hijacked, the authorization still exists, and the money will really be gone. Anyway, I now review my records every few days, and if I see unfamiliar or used-up permissions, I revoke them on the spot to ease my mind.