A crypto user lost $5,000 after connecting to a hotel’s public Wi-Fi, unknowingly approving a malicious wallet permission that was later used to drain funds. No phishing link, no fake site — just one “harmless” approval. The real question: how many of us would’ve clicked it too?