I just saw another brother get emptied out—this old chestnut like “granting unlimited allowances.” Every time something goes wrong, people wash it with “the project team ran away” or “you got phished,” but when you were granting access, didn’t you think about it? Giving a default unlimited allowance is no different from hanging your front-door keys on the outside of your door.

Someone asked: “Then don’t you mind revoking approvals every time you interact? Isn’t that a hassle?”
Well, a hassle is better than ending up at zero. On-chain tools’ tagging systems are also being criticized as lagging behind—people only watch them to feel “secure” before approving, but then they can bypass it by simply changing the contract address. At the end of the day, if you mess up with your own hands, don’t blame the tools for digging a trap.