To be honest, in the past few days I’ve seen a lot of people anxious about withdrawals—people say that in some place, tax is being tightened and compliance is getting stricter. I can totally understand the urge to “move the money out quickly.” But the more that happens, the more you need to steady yourself: the red line for wallet security, put simply, is that you should not copy-paste your seed phrase, do not take screenshots and save them to your phone, and do not type even a single letter into any webpage—no exceptions.

The other day, I almost slipped and clicked into a phishing site that looked exactly like the official one. The URL only had an extra “l.” If I hadn’t had the habit of first checking the contract-approval pop-up, I probably would be done for.
Anyway, my mindset now is: chasing hot topics isn’t as important as chasing signature/signing and authorization risk. After being fooled by audit reports a few times, when I encounter a new project, I first review its authorization list—don’t just approve blindly with your eyes shut.
I won’t keep explaining anymore. On the security front, knowing it yourself is enough.