On-chain phishing has gone crazy again recently. I just saw a fake site that mimics Tenderly—the UI is almost identical. Once you click in, it immediately asks you to connect your wallet and grant authorization. Honestly, I’m pretty cautious about signing most of the time, but today I mindlessly clicked a link for a “claim” airdrop and almost fell for it—luckily MetaMask popped up a “high risk” warning, and that’s when I snapped back.

Hardware wallets are basically impossible to get in stock lately, and the spot price premiums are outrageous. But I think the weird part of this wave isn’t just the price—it’s that everyone seems to have forgotten: using a cold wallet doesn’t mean you can just click and sign carelessly. My approach is: only keep the gas money you need in your wallet. Before signing with the main address, I run a blind-signing check tool to verify everything end-to-end first. It’s a hassle, but I’ll take it.

Tired, but still going. Anyway, phishing sites always run faster than security tutorials—so let’s slowly train our eyes.