Recently, a bunch of new L1/L2 projects are launching incentives to pull TVL.

Seeing old users complain about "mining, selling, and dumping," I'm not surprised...
At such times, I'm actually more concerned about wallet security than how high the returns are.
Treat your mnemonic phrase like a bank card password + ID card—don't screenshot it, don't upload it to the cloud;
If you must write it down, do it offline by hand, keep it separate, even if it's inconvenient for you.
The same goes for signing and authorization—if you see a prompt asking you to "confirm/authorize," pause first,
especially if the page looks very similar to the real one or if the link is suspiciously fishy.
For me, the real "signal" is: the moment you rush to click confirm— the more hurried, the more likely to get into trouble.
Take a sip of cold brew sparkling water first.