If you've ever configured a delegated signer, a session key, or a bot's wallet permissions, you've probably reached for two knobs: an allowlist of assets it's allowed to touch, and a cap on how much value it can move. It's tempting to treat these as two settings on the same dial — both feel like...
Source: [Dev.to](https://dev.to/tradevodata/allowlists-are-not-spending-caps-two-different-security-properties-often-confused-lk0)