I just saw another phishing site that’s been copied so well it looks exactly like the real one. Honestly, in this environment, wallet security is truly a single red line: don’t sign things you shouldn’t, and don’t connect to anything blindly.

No matter how secure mnemonic phrases are, they can still be undone if you accidentally hand-sign something like “confirm signature.” Some dapps ask you to sign once—because you’re tempted by those little points, you hand over all wallet permissions. Then once tokens go live on the mainnet, your wallet gets emptied before you know it.
Recently there have been one testnet incentive round after another, and it’s hard not to feel tempted too. But I can’t shake the feeling that the whole “will the mainnet actually issue tokens?” thing is pretty much like that “you chase them and they ignore you” kind of routine.
Anyway, I’m a lone wolf. I’ve lost too many times, so now I only dare to use temporary wallets, even for authorizations. Impulsive or not, don’t cross that red line—torturing your wallet is basically the same as torturing a hedge fund; there’s no difference.