Mobile links that open wallet sheets with malicious payloads.

Multiple controls: audits, monitoring, limits, timelocks, and circuit breakers together.

Deceiving a user into authorizing account delegation to code that can exercise unintended control over the account.

Using a dedicated machine or phone for signing and a different one for browsing CT.

Tiny deposits used to track wallets or poison address histories.