Lately, I saw a friend get scammed by a phishing site "airdrop claim" that stole their authorization. I really want to carve the seed phrase on my forehead: don't screenshot, don't upload to cloud drives, don't talk about it with anyone, even if their avatar is your mom. Also, don't randomly click on signatures; those incomprehensible "confirm" buttons are basically opening a backdoor to your wallet for others.

By the way, right now the NFT royalty debate is heated. Creators want to earn more, which is fine, but some use "for liquidity" as a cover, then turn around and induce signature signing—liquidity = your coins flowing away, right? I always check the domain first and review the authorization list before even visiting a site. If I can revoke, I do; better to miss out than be a leek.

Honestly, there are three red lines for wallets: never share your seed phrase outside, be careful with authorizations, and don't be curious about unfamiliar links. That "backdoor" I mentioned earlier—one last point: when you click "confirm," you're not just confirming; you're opening the door for others. That's all for now.