Recently, I've seen a bunch of people’s wallets being "mysteriously" emptied again. Basically, many of them just authorized a contract back then, still with unlimited permissions, and then forgot about it. Revoking permissions is like sleeping: you can stay up all night, but don’t make it a habit; same with authorizations—if you don’t revoke after use, trouble will eventually come.
My current approach is: try small amounts first for new projects, set specific limits when authorizing, and after interaction, conveniently revoke it. It’s a hassle, but it helps me sleep better at night. Especially
View Original