Recently, hardware wallets are out of stock again, and there are a bunch of phishing links flying around in the group chat. To be honest, the more frantic the market, the easier it is to slip up. I have only three red lines now: never take photos of mnemonic phrases, never upload to any cloud storage; if I don’t understand the signature authorization, I won’t sign it, especially those pop-ups for “airdrop/subsidy”; I won’t click on URLs unless I type them in myself, I’d rather spend an extra 10 seconds to search for the official website.

What I’m willing to do is actually quite old-fashioned: after each authorization, I go and revoke any unnecessary permissions. It’s a bit of a hassle, but compared to waking up one day to find my wallet emptied, I accept this small time cost… Anyway, I’d rather miss out on a wave than hand myself over to luck.