Recently, the NFT royalty debate has been quite heated, with some saying they want to protect creators, while others complain it affects secondary liquidity... I'm actually more concerned about something else: don’t click on random links just to save a little on transaction fees or to chase that whitelist. Your seed phrase is truly a one-way street; any “customer service/form/airdrop” asking you to input it should be treated as phishing—don’t hesitate.

And regarding signature authorization, many people think “it’s fine as long as it’s free,” but signing for unlimited permissions or transferring assets is just as risky as a transfer. My two red lines are: never enter your seed phrase on a webpage; and if you don’t understand (at least understand who you’re giving permissions to, what you’re authorizing, and how much), don’t sign. Better to miss out than to risk it—let’s stick to that for now.