Recently, I came across another vulnerability review, and the most heartbreaking part isn't the code being so fancy, but that users casually clicked "Unlimited Authorization" back then, and then left the key in the door... In other words, revoking permissions is as easy as going to sleep; they usually find it troublesome, and only regret it when something happens. Now I’m used to: revoke after use, or at least set small limits, better to click a few more times. Developers talk excitedly about modularization and the DA layer, but users should first keep their wallet clean; no matter how modular the chain is, if permissions aren’t managed, it can still be wiped out in one go. Anyway, I keep my assets in a cold wallet first, and only keep the hot wallet for what I need on the day.