I just saw a screenshot of a group circulating a rumor about stablecoins. When I clicked the link, the domain was a fancy-looking fake site, and it looked very different from the usual interface I interact with. Honestly, phishing sites like this have been really common lately—whenever someone in the group forwards an off-peg message, someone else will casually click through.

My own habit: I basically don’t touch the network with my mnemonic phrase, and I don’t even save screenshots. As for signature authorizations, every time I finish interacting with AAVE or Compound, I specifically check the contract permissions to see whether anything has been loosened. If approval has been opened, I manually revoke it—otherwise one day, a phishing site could grab a signature and sweep the funds away.

To put it plainly, the safety red lines are just a few: don’t take your mnemonic phrase to any website, don’t click random links of unknown origin in groups, and remember to clean up after authorizing. Have you run into those weird pop-ups that say something like “Low-risk detected” and ask you to sign?