These days the main chain is going to upgrade/maintain again, and everyone in the group has been guessing whether the project will migrate. I’m actually more nervous about my wallet... The busier everyone is at times like this, the more active phishing sites get. The most common scams are fake bridges, fake airdrops, and fake “re-authorization required after upgrade.” The pages are made to look exactly like the real ones—once you click in, they prompt you to sign or to import your seed phrase. As for seed phrases, let’s be blunt: anything that asks you to type them in is basically a death sentence. And don’t assume signing is harmless just because you didn’t pay anything—some signatures are for authorization or permission transfer. Later on, even if your security is as strong as it can be, you still can’t save yourself from slippage being 100%.

I’ve got a simple workaround right now: I don’t open websites directly through TG/Twitter links—I manually search for the official domain. If I can avoid it, I don’t click authorize. If I really have to click, I first check the contract address. Don’t grant unlimited permissions, and every couple of days, I quickly clear out old authorizations. I’m already this stingy with order splitting, so don’t get lazy with security either... That’s it for now.