Just now, my phone popped up another “Authorization Successful” pop-up. For a split second, I even thought it was one of those system-update “red dot” notifications… Turns out it was a certain DApp asking me to grant the contract an unlimited allowance. In plain terms, it’s pretty much the same as “leaving the door key plugged into the door” the whole time—handy at the moment, but if something really goes wrong later, you won’t know where the leak came from.

Recently, hardware wallets have been out of stock, and phishing links are being circulated at an alarmingly high rate. People’s security awareness has improved, but many only pay attention to that one moment of signing—once the authorization is given, they forget about it. My habit is: revoke after every use. It’s like turning off the gas before bed and locking the door—more trouble, but it leaves you feeling at ease. After all, I’d rather tap a couple more times than wake up one day to find my balance “automatically swept away.”