The focus of attacks is shifting from smart contract vulnerabilities to user credentials and operational processes. Private key leaks and phishing attacks are the main causes of 518 incidents and losses exceeding $17 billion. It's not easy to make money in a sluggish market. How to protect your own interests correctly Personal: Big money storage hardware wallet (not connected to the internet) Small money exothermic wallet Don't click on unfamiliar links Don't give anyone mnemonic words Project team: Keep an eye on your signature tool and cross chain bridge Set up multiple verifications (such as multiple signatures) To be able to suspend, recover money, and compensate users in case of accidents. Simply put, we should not only believe that the code is flawless, but also prevent human operational errors. The focus of security is shifting from "on chain contracts" to "off chain certificates and behaviors". If you want to further understand the selection of hardware wallets or how to identify typical phishing methods, I can provide specific introductions.