Last night was that kind of night again—"get ready to sleep but accidentally check the on-chain"… I casually looked at the authorization of a few of my contracts and found that two of them still had unlimited permissions, and I immediately snapped to attention. To put it simply, granting authorization is like leaving the house key on the doorstep under the doormat: nothing happens usually, but when something does, you're too late to react.

Recently, everyone has been complaining about miners/validators eating MEV and unfair ordering, right? Retail investors are already passive enough, and now they leave an unlimited backdoor in the contract—really asking for trouble. My current habit is: revoke permissions immediately after use, or only give small amounts. I’m too lazy to save those few cents of gas, and what I save isn’t enough to make up for the hair I lose staying up late.

If I lose, I review and analyze face-to-face. Today’s post is a preemptive write-up… First, clear out the permissions, then go to sleep. At least if I lose, I won’t lose on such a basic trap.