Most wallet drains start with one signature people didn't understand. Paste it into Claude before you sign. "I'm about to sign this in my crypto wallet. Here is exactly what the wallet shows: [paste the message, contract address, function name and amounts]. I think I'm doing this: [for example, swapping 100 USDC for ETH]. 1. In plain English, what am I actually signing? 2. Does it let anyone move my tokens or NFTs? How much, and until when? Check for unlimited approvals, setApprovalForAll, and Permit or Permit2 signatures. 3. Does it match what I think I'm doing? 4. Any red flags: an approval much bigger than the trade, an unknown contract, a signature that can move funds without a transaction? 5. Verdict: looks normal, ask more questions, or don't sign. If you can't tell from what I pasted, say so." Already signed approvals in the past? Check and revoke them at It's open-source.