Recently, I came across a bunch of phishing links again, hardware wallets are out of stock, and everyone suddenly is talking about security… I instead think of the most overlooked issue: never give unlimited permissions in contract authorizations. Minting is exciting, but when liquidity and position distribution get messy later, I’d rather not add another layer of suspense about “permissions being stolen someday.”

To put it simply, revoking permissions is like sleeping: it’s not because something will definitely go wrong tonight, but because if you don’t turn off the lights and lock the door, you won’t sleep peacefully. I’m also a perfectionist to the point of annoyance, often thinking “I’ll revoke after I confirm this pool is stable,” but the result is that I keep delaying and forget… So now I’ve set a strict rule for myself: revoke permissions immediately after a transaction if they’re not used often; for those used frequently, check periodically so I won’t be startled awake by messages in the middle of the night. Anyway, leaving fewer loopholes makes the mindset a bit more stable.