I just came across a phishing site. It was built so convincingly—it was basically just one letter off the domain. I almost clicked to connect my wallet, but then I realized something was off. I checked the contract address first and found it hadn’t even been verified. Sigh—I thought I was careful enough, and still almost got burned.

During that period when funding rates were extremely volatile, the community was arguing nonstop. Everyone said it would reverse and squeeze out the bubble. I, for one, don’t trust these emotionally driven takes. As for things like seed phrases, I never store them on my phone or take screenshots—I just handwrite them and keep them in a safe. Signed approvals are even more important: don’t just assume tapping “Confirm” is the end of it. A contract can take away all your authorized assets.

Anyway, when it comes to on-chain security, the red line is: don’t be greedy and don’t be rushed. Take one more step, verify a few more times.