Recently, I’ve been looking into the project “Trustworthy or Not,” and I don’t really trust what people say. In the middle of the night, I go through GitHub, audit reports, multi-signature upgrades, and other boring stuff. Beginners shouldn’t be scared: first, check if the code is actively maintained (not a dead sea of code every six months), don’t just look at the words “audited,” review the scope/discoveries/any changes made before re-auditing; for multi-signature upgrades, look at who the signers are, what the threshold is, and whether you can change the logic with one click… Basically, it’s about: who can make the final call when something goes wrong, and how quickly they can make changes.

Lately, hardware wallets have been out of stock, phishing links are everywhere, and everyone’s security awareness has suddenly been forced to go online. I don’t pretend to understand everything either; I now always manually type domain names for links, and the “urgent airdrops” in groups are just jokes to me. I don’t need to be understood; I just want to avoid stepping into a pit before bed. That’s all for now, I’m going to grab some late-night snacks.