Most people sign every trade with their main wallet key. That's like carrying your house deed to the grocery store.
Polymarket's Session Keys exist to solve exactly this: a scoped signer with limited permissions, so your master key stays cold. At Coinbase, account-takeover incidents almost always started the same way — a hot key with too much power, phished once.
Three rules I follow:
- Trading key != storage key. Never mix them.
- The key that signs daily trades should hold only what you can afford to lose this week.
- Hardware wallet for anything long-term. Browser extensions are for convenience, not custody.
None of this is exotic. It's boring hygiene — the kind that saves accounts.
(Full breakdown coming in my next post: how to set up scoped signers step by step.)
Not financial advice. Security is your responsibility.
