Recently, a bunch of new L1/L2 projects are launching incentives to attract TVL, and old-timers in the group are both rushing and complaining, "Mining, selling..."

I, who am always a step behind, can stay calmer: don’t rush to hand over your wallet.
Think of mnemonic phrases as your bank card + ID card + house key; if any website/customer service/plugin asks for them, just block them immediately.
If you really need to copy, don’t take screenshots or upload to cloud storage; write two copies by hand and keep them separate.

As for signature authorization, many phishing sites don’t steal your seed phrase—they just rely on you clicking "Confirm."
My red line now is: don’t sign if you don’t understand, limit the authorization amount if possible, and revoke authorization after use.
Better to miss an airdrop than save a few seconds.
Honestly, what I’ve learned isn’t tricks, but this: when you see something that says “Click quickly” or “If you don’t do it now, it’s gone,” take a moment first.