Last night before bed, I saw a new L2 incentive to boost TVL again, and there were a bunch of old users in the comment section complaining "mining and selling." What I’m actually more worried about is that phishing sites love to jump on trending topics at this time. As for mnemonic phrases, don’t tell any webpage/customer service/plugin — basically, “whoever wants it is a thief,” and I won’t fill it out no matter how urgent. Also, with signature authorization, if you don’t understand it, don’t click “Confirm,” especially those claiming to give airdrops/subsidies for gas — once you click in, it’s unlimited authorization, and later your wallet could be emptied without you knowing what you signed. Anyway, I’ve gotten used to this: for new activities, first check the official domain + pinned post in the feed, if I can screenshot the authorization page, I do so for records. If I find the fee rates/permissions secretly changed, I block and walk away — better to miss out than to use it as a lesson.