I now see "Unlimited Contract Authorization" and it feels just as uncomfortable as wanting to sleep after not brushing my teeth... To put it simply, you give it a key that never expires, and one day if the project team gets hacked, the front end is hijacked, or even if you click the wrong link, it can take all the same tokens from your wallet. Recently, cross-chain bridges have had issues again, and I think it's better not to gamble on luck; anyway, revoking it takes just a few minutes. And with those abnormal price feeds from oracles, everyone is waiting for "confirmation," but when the blockchain really has a problem, no one will wait for your confirmation—authorization is immediately usable.

My mom asked me a couple of days ago: "Aren't you already using a cold wallet? Why are you still worried?" I could only reply half-heartedly: whether it's cold or not has nothing to do with whether you've given permission... Now, I’m used to: revoke after use, isolate the wallet, and review permissions weekly. The returns are unstable, but at least I don’t worry about it overnight.