Wallet authorization has a practical limitation — the one-time authorization feature mainly depends on how the DApp contract is written, and it's not easy for wallet tools to bypass this. It is recommended that everyone authorizes only what they need, which can significantly reduce the risk exposure of authorization. This is the most pragmatic approach.

Good news is, our DEX aggregator is upgrading its authorization mode. We are migrating from the traditional Approve authorization to a more flexible Permit authorization scheme. The key advantage is that it can set an expiration period — for example, 30 days of automatic invalidation. Once this new mechanism is launched, users will be able to manage their asset security more precisely. Those interested can follow along first, and we will share the specific usage details when it goes live.