Recently, project teams have been arguing about Layer2—how fast the TPS is, how low the fees are, and how generous the subsidies are… it all sounds pretty lively, but the truth is, I care most about one thing: who’s going to take the blame if something goes wrong.

If a beginner wants to judge credibility, I only have three quick cheat sheets: GitHub—don’t just look at the stars; check whether there have been real changes recently, and whether anyone has responded to the issues. Audit reports—don’t let the logo blind you; focus on whether the high-risk items have been fixed, and whether they explicitly state either “unresolved” or “accepted risk.” Upgrading multisig is even more critical—how many keys there are, who those key holders are, and whether contracts can be changed arbitrarily. Ideally there’s a delay; otherwise, the Gas you “saved” might end up turning into your tuition.

Anyway, when I see “upgradable,” I frown first, and then decide whether to go all-in or not.