The issue of unlimited contract authorization is basically like giving a stranger the keys to your house and not changing the locks. Usually, you think "It won't get lost anyway," but if something actually happens, you'll only be able to watch your funds get drained on the blockchain, and there won't even be time to curse. My current habit is: after interactions, I promptly revoke authorization, just like brushing my teeth or going to sleep—so I don't feel uneasy.

Recently, I've been talking about interest rate cut expectations, the US dollar index, and how risk assets sometimes rise together and sometimes fall together… I don't know how the market will move, but hackers never look at macroeconomics; they only look at which authorizations in your wallet are still active. Don't think I'm rambling; really, don't wait until one day you wake up and find "it's still there," because that's when you won't be able to sleep.

I'm not regretful about the outcome, but about thinking revoking authorization was too troublesome and lazy to click that button back then. Anyway, now I prefer to do it twice rather than become a lesson for others.