Recently, I’ve been looking at a few yield aggregators again, and that string of APYs on the interface is quite tempting, but my first reaction now isn’t “how much can I earn,” but rather where exactly is this yield coming from: does the contract have permission to open a backdoor, whose pool are the funds being sent to, and if something goes wrong, does it count as counterparty risk… In plain terms, the yield is paid by someone, you just can’t see that person.

What I fear most isn’t losing money, but ending up handing over my tokens to a series of contracts + a bunch of signatures without understanding what I’ve authorized. Recently, hardware wallets are out of stock again, phishing links are everywhere, everyone’s security awareness has improved, but when it comes to clicking the “confirm” button, my hand still trembles a bit… Anyway, I’d rather have a lower APY, fewer steps, cleaner permissions, for now that’s how I’ll do it.