Seeing so many stolen coins, don’t authorize any unfamiliar dapps. I probably haven’t even looked carefully at their contract codes. There are also third-party audits. A friend of mine who does audits pointed out that there are still many contracts with common vulnerabilities. . The best way is to write a script to generate an offline wallet. The money will be transferred to that address. If you want to transfer money, use the script to transfer money.
It is really not possible to hire a programmer as a private security consultant. An hourly wage of 30USD is enough to hire a very professional contract engineer. Compared with losing thousands or tens of thousands of dollars, wouldn’t it be better to buy a professional service with this little money and make friends?