I almost scared myself into a cold sweat. While reviewing a contract on a little-known testnet, I accidentally tapped “infinite approval.” A second later, I realized what I’d done—my heart sank halfway. Luckily it was only a testnet; otherwise, the little bit of stuff in my wallet would probably have been completely drained.

Honestly, I should have taken the “infinite approval” contract issue more seriously long ago. In the past, I always complained that revoking permissions was a hassle, thinking, “It’s just once anyway.” Later, seeing people get wiped out because of approvals—those dreadful cases where their wallets got drained through the “airdrop”—I became more afraid. Now I’ve formed a habit: after every interaction, I quickly check the approvals. If I need to revoke them, I revoke them—same as going to sleep. If you don’t turn off the light, you’re just burning your own electricity.

Recently I’ve been watching all the arguments over NFT royalties. Why can’t creators get what they’re rightfully owed? At the end of the day, once liquidity in the secondary market is poor, all kinds of interests end up tearing each other apart. Let’s stay practical: manage your own wallet. That’s it—I’m going to clean up the approval records now.