I only take one note: When authorizing a contract, don't try to be lazy and open an "unlimited" limit—revoking it is just like going to sleep—during the day, you can gamble that nothing will go wrong, but if you leave the lights on and the doors unlocked for a long time, when you encounter testnet points farming, or moments when you click on random links guessing whether the mainnet will issue tokens, the risk will quietly turn into "a matter of time."