Just came across a "New Airdrop Interaction Tutorial," almost authorized before I stopped... To be honest, I only have two principles now: if I can avoid using the main wallet, I won't; if I can give fewer permissions, I will (don't start with unlimited access). FOMO is pretty bad; the more it sounds like "miss it, and it's gone," the more you should slow down, first check if the contract is open source, if anyone has audited the permission points, at least don't hand over the entire asset string.

Recently, in the group, there's been a debate about privacy coins/mixing and the boundaries of compliance, and I really don't want to mess with unknown links anymore: you think you're "improving anonymity," but you might just be making it easier for phishing... Anyway, I'd rather earn less than get wiped out in a counterattack, so that's how it is for now.