Last night I was about to sleep when I suddenly remembered that a few days ago, I tried a new wallet / new DApp, and casually clicked "Unlimited Authorization." At the time, I thought it was convenient... but the more I thought about it, the more uncomfortable I felt, like leaving the door unlocked. Revoking permissions is really as important as sleeping: if you don't do it, maybe nothing happens in the short term, but once something goes wrong, it's all on the line. Now I set a rule for myself: revoke after testing, leaving a small amount of quota is fine, anyway, don't risk saving those two seconds. By the way, I saw the group arguing again about privacy coins, mixing coins, and compliance lines, the debate is pretty fierce. I actually want to prioritize fixing my own basic vulnerabilities like authorizations and signatures first... I'm tired but still here, tonight I’ll also review all my historical authorizations again.