These past two days, people have started arguing again about restaking and shared security. Honestly, it’s just stacking profits on top of profits, while the risks also stack on top of risks. In the end, it still comes down to the permissions and signatures in your wallet.

I now treat mnemonic phrases as my “last line of defense.” I never screenshot them, never put them on a cloud drive, and never send them to myself—I'd rather deal with the hassle. The same goes for signature authorization: when I see something that asks you to approve the entire wallet, I close the page first and take two minutes to calm down.

After all, earning a little less won’t kill me.

Phishing sites are the most annoying. They’re made to look exactly like the real thing. I set a red line for myself: don’t click unfamiliar links, and reject pop-ups that pressure you into signing. Trading can rely on instinct, but when it comes to security, you can only rely on discipline.

Backup is also like redundancy—don’t assume that one attempt will be foolproof. Add one more layer of manual verification, and remove one layer of luck-based complacency; don’t leave room for “it’ll probably be fine.”