Recently, I saw someone click “Claim Royalty Subsidy” on a phishing site. Once they confirmed their signature, their wallet was wiped out immediately… To put it plainly, the mnemonic phrase is the lifeline—don’t give it to anyone no matter what. Also, don’t treat signature authorization as “login confirmation.” In many cases, it’s just opening a backdoor for the other party, especially those with unlimited allowance/unlimited spending allowance or long-term approvals. It’s really not worth it.

A friend also complained to me about royalty-related arguments that get blown up endlessly. Creators say they need to eat, while traders say liquidity matters more—but I think you should protect your wallet first and then talk ideals. There’s no customer service on-chain. If it’s gone, all you can do is sarcastically say, “Picking up a bargain at the floor price and ending up swept out.”

My current bad habit: when I see a pop-up, I stop for three seconds first. If the URL isn’t right, I close it. If authorization can be limited, I limit it—I’d rather miss out than have to play catch-up later.