Recently, hardware wallets have been out of stock everywhere, and I knew that the phishing links wave had once again educated people... Anyway, now when I see "new version upgrade / airdrop claim," my first reaction isn't to rush, but to check whether the project is actually reliable.

For beginners wanting a rough judgment of "credibility," I only consider three things: whether GitHub is active (not just a once-a-year placeholder), whether the audit report is written in understandable language (at least showing how issues are fixed and whether they are fully fixed), and whether the upgrade permissions are multi-signed—that is, don't let one person slip up in the middle of the night and change the contract to "surprise." Of course, these are not talismans; at best, they make the "might be serious about their work" filter a little thicker... As for the rest, don't treat jokes as investment advice, and never click on wallet addresses casually.