Last night, I was going through project materials until my eyes felt dry... For someone like me who collects dust, the worst thing isn't a fall, but that when the contract upgrades, my tiny amount of fragmented coins could just "disappear."

Right now, I only trust three things: don't just look at stars on GitHub, check if the latest commits are still active and if it's just one person hyping; don't be fooled by the logo in the audit report, focus on "high risk/unfixed/not in scope," some audits are very polite but actually have a bunch of issues; and then there's multi-signature upgrades—who are the signers, how many people can move the funds, and is there a time lock.
Recently, that main chain is about to upgrade/maintain, and everyone in the group is guessing whether the project will migrate... Honestly, I don't guess whether they'll migrate or not, I just look at whether their upgrade process seems organized, so they don't end up treating everyone like testers with a sudden "emergency fix."
Anyway, I hold a small position and stay cautious; I only pick reliable dust.