Yesterday I came across a high APY yield aggregator again, and I got a bit itchy to jump in, but my first reaction now isn't "go for it," but rather to check what contracts it’s actually putting the money into, whether there are any strange permissions, who the counterparties are... In other words, APY is just the surface layer of sugar; underneath, there could be three or four layers of nested lending + derivatives, and if something goes wrong, you can't even clearly say which chain you're losing money on. When the market is volatile, I only look at liquidation lines and risk control thresholds; if I can draw an escape route in advance, I do it first, even if it means earning a little less. Recently, hardware wallets are out of stock again, phishing links are everywhere, and it feels like everyone's security awareness has improved, but it also makes it easier to be tricked by "seemingly legitimate" entry points... Anyway, I now test new protocols with small amounts first, turn off permissions if possible, and always manually type links. That's all for now.