People ask me every day, "Why was it transferred again?" I look and nine out of ten times it's because they previously authorized it once, or it was an unlimited one. To put it simply, you treat your wallet like a door lock, but end up copying the key multiple times and sticking it at the door... Revoking permissions is just as important as sleeping: not doing it won't cause immediate death, but sooner or later, something will go wrong.

Recently, social mining and fan tokens are being hyped up, "Attention is mining" sounds pretty appealing, but once your attention is caught, it's easiest to keep clicking "Confirm" all the way, then open a backdoor to a stranger's contract. Don’t complain about the hassle—limit the amount if you can, revoke once used, especially those proxy contracts that switch to implementation. Today it's sugar, tomorrow it might be a knife. I treat simple things as traps: just a warning.