Recently, everyone’s been refreshing testnet incentive campaigns and accumulating points. On the surface, they keep asking, “Will the mainnet actually issue tokens”… but in their hands, they also go ahead and grant an unlimited-amount approval to a contract/plugin. Put simply, it’s like betting that you sleep lightly so you won’t lock the door—sounds bold, but really it’s just laziness.

My current habit is: revoke after use; if you can set a limit, set one. Every time before signing, pause for two seconds to make sure you clearly see exactly who you’re letting through the door. Don’t talk to me about talent—staying alive long-term depends on these boring little actions. If you want to be someone who sleeps early, revoke the permissions first before you go on to farm points; anyway, your sword won’t dull just because you’re diligent.