I just saw another case of a wallet being drained. I looked up the on-chain records—it turned out the signature was accidentally approved after clicking a phishing site. Honestly, it’s pretty frustrating. These days people are hyping up AI agents and automated trading like crazy, but that basic security red line for on-chain interactions? Not many people seem to take it seriously.

Anyway, my patch approach is just small fixes and minor tweaks: don’t click on signatures blindly, don’t connect to the network with your seed phrase, and don’t believe any nonsense like “enter your seed phrase to claim an airdrop.” As for the rest, it’s really a matter of circumstances.