When deploying automation scripts on a VPS, if sensitive data such as wallet private keys are involved, security measures cannot be compromised. It is recommended to set up IP whitelisting restrictions at the VPS firewall level, allowing only specific IP addresses to access, which can significantly reduce the risk of scanning and intrusion. A safer approach is to build a jump server architecture—using one VPS as an intermediary node to connect to the production server that stores critical data, adding an extra layer of isolation.

Be cautious with cloud services as well. Platforms like AWS or Lightsail must enable two-factor authentication—don't consider it a hassle. If the account is compromised, the losses could be astronomical.

Another detail: if you're using AI tools like Claude or Codex not through the official API directly, but via third-party relay services, be especially careful—don't test or debug with sensitive information, as there is a real risk of interception during the relay process.