Last week I saw someone screenshot and ask, “Should I click on this signature?”—and I was sweating for them, right in the palm of my hand… Mnemonic phrases are truly a red line: any webpage/customer service/airdrop that asks you to fill them in—just close it right away. And don’t treat signature authorization like a confirmation button and tap it blindly, especially those confusing “infinite authorizations.” To put it plainly, it’s handing over the keys to the door without even asking what they’re for.

I’ve basically formed a routine: with a new wallet, first do a small test transfer; for addresses I use often, keep a whitelist; and then clear authorizations every few days. It’s a hassle, but it brings peace of mind. Recently, the community has been arguing pretty fiercely about the compliance boundaries for privacy coins/mixers, but no matter which side you’re on, at least don’t put yourself into the trap of a phishing site—live first, then talk about positions… Anyway, I don’t believe in myths—I only trust that my hands will be slow, not quick.