What you are agreeing to when you connect a wallet

Connecting a wallet to a site lets it see your address and your balances. It does not give it permission to move anything. The risk is in what you sign afterwards.

The dangerous signatures

• Token approvals. Permission for a contract to spend a token on your behalf. Many request an unlimited allowance, which persists until revoked.
• Blind signing of data you cannot read. If your wallet cannot tell you what it means, the safe answer is no.
• Set approval for all on collectibles, which hands over an entire collection in one signature.

Sensible habits

• Read what the wallet shows before approving. If the site says one thing and the prompt says another, trust the prompt.
• Review and revoke old approvals periodically.
• Keep a separate wallet for experimenting, holding nothing you would miss.

Where this does not apply

A swap like Swap Heaven does not connect to your wallet at all. You send a transaction yourself and give an address for the payout. There is no approval to grant and nothing to revoke afterwards.