Before protocol interaction: Understand permissions and exit paths
Confirm what you are agreeing to
Verify the website domain name, target address and wallet display request before signing. Connecting to the wallet, signing messages, authorizing tokens, and submitting transactions are different operations, and permissions cannot be determined based on the button name alone.
View authorization scope
Token authorization may allow the contract to use the asset up to a certain limit. Check the authorization objects and amounts; disconnecting from the website does not mean revoking the existing authorization. Mnemonic phrases and private keys should not be submitted to the website.
Confirm exit conditions
Taking Aave's supply assets as an example, the withdrawal of assets is affected by the available liquidity of the capital pool; when used as collateral for borrowing, position conditions must also be met. Other agreements should be checked against their respective documents and cannot be applied directly.