you should secure your private key. and biggest important point is accepted list. example if your do not accept erc20, you should not send erc20 tokens