Short answer
Back up your key offline, never share it, check what every transaction does before you sign it, and keep your trading wallet separate from your savings.
Most losses come from a handful of mistakes, so a short routine goes a long way. First, keep an offline backup of your key or seed phrase and tell no one where it is. Second, never paste it anywhere online, whatever the message says. Real support teams don't ask.
Third, read before you sign. Malicious sites ask you to approve transactions that drain tokens. If an airdrop or mint looks too generous, it is probably bait. Fourth, use a dedicated wallet for trading with only the money you're prepared to lose, and keep longer-term holdings somewhere else.
Finally, protect the sign-in itself. If your wallet is tied to an email or a Google or Apple account, turn on two-factor authentication there, because that account is now part of your security.
See the checks for yourself
18+ only. Self-custodial: you keep your keys. 0.5% per trade, no minimum. Memecoins can go to zero.