I treat complexity as an enemy, so when I look at a project’s “credibility,” I usually focus on three things: whether GitHub is truly being maintained by someone (don’t just look at stars—check recent commits and whether issue replies look like they’re coming from real people); don’t just look at the words “audited” in the audit report—pay attention to whether the scope/version numbers are correct, and whether any critical issues have been marked as “known but not fixed”; and when it comes to upgrading permissions, you’d better check who the multi-sig signers are, how many signatures are required, and whether there’s a timelock—otherwise, put simply, it’s a set of rules that can be changed anytime. During this airdrop season, the anti-sybil measures plus the points system feel like clocking in at work; I’d rather do fewer tasks now than throw my time into a pool where upgrade rights are too centralized… For now, that’s all.