Lately I've been looking at yield aggregators again, and that APY on the interface looks pretty tempting, but right now I mainly want to clarify who is behind the scenes earning for me: exactly which contracts the money is entering, whether there are permissions that can move my positions, and if the yields are supported by others' leverage/borrowing. To put it simply, APY is just the result; contract risk and counterparty risk are the process. If the process is rotten, a good result doesn't matter.

Recently, hardware wallets have been out of stock, and phishing links are everywhere. The more these happen, the more I remind myself not to rush: I always manually type or save aggregator redirect links, and I treat unfamiliar frontends as nonexistent... Less operation means fewer pitfalls.

There’s too much information, which can be quite stressful. My filtering method is pretty crude: I focus on three things—fund flow (which protocols the funds go into), permissions/upgrades (can they be changed at will), and exit paths (can I get out easily). I ignore the fancy stuff for now; like pruning a garden, I remove weeds as needed.