Over the past couple of days, I’ve seen someone click a phishing site and enable all permissions with one click. Let’s be blunt: the “red lines” for wallet security are only a few—don’t screenshot your seed phrase, and don’t store it on a cloud drive; even if you’re thinking “just temporarily save it,” don’t. And don’t confirm signature pop-ups just because they appear—especially those that ask you to “setApprovalForAll.” That’s basically the same as handing your keys to someone else.

If I really want to test a new protocol, I’ll use a separate small wallet, and treat the main wallet like it’s in the cold—kept aside. Also, lately, the moment there’s news from a certain region about increased taxes or tighter/looser compliance, everyone’s expectations for fund inflows and outflows start to swing. The more panicked people get, the more likely they are to click links carelessly, which conveniently makes things easier for scammers.

That’s it for now—let’s talk again next time.