Gate and OneKey Detail Wallet Approval and Address Poisoning Risks

The notable shift here is that the threat model no longer requires a compromised key: approvals and off-chain Permit signatures turn routine interactions into standing withdrawal rights, so wallet hygiene becomes an ongoing operational task rather than a one-time setup. Address poisoning preys on the same copy-from-history habit that makes transfers convenient, meaning the attack surface grows with normal usage. Whether approval-revocation and full-address verification become standard wallet defaults, rather than user responsibilities, is the open question worth watching.