These days, I've been seeing APYs of yield aggregators skyrocket again, and I still get itchy hands, but my first reaction now isn't "how much can I earn," but rather "where exactly is this yield coming from." Basically, you click to deposit, and behind the scenes, there might be several layers of contracts transferring, plus a bunch of counterparties: lending pools, market makers, and that set of "shared security" and "yield stacking" for re-staking... It sounds appealing, but all the "nested" structures and constant interactions aren't without reason.

I'm not regretting the outcome, but I regret not spending five more minutes at the time to check permissions and fund flow: who exactly was granted unlimited access, whether I can withdraw at any time, if the contracts are upgradeable, and who holds the admin keys. Anyway, now I revoke permissions immediately after interactions, split my wallet into separate accounts, do small tests, and sleep well even if I earn less.