Recently, when checking projects, I tend to look at GitHub first—not to pretend to be an expert… I just want to confirm whether they are really “writing code” or just telling stories. Commit frequency isn’t important; what matters is what they changed: Are they mostly updating documentation and UI, while the core contracts remain unchanged? Also, are there any serious responses to issues/PRs, and how does the team reply? Don’t just look at the “pass” in the audit report; I’ll directly search for high/critical and unresolved items, whether they’ve been fixed, how they were fixed—frankly, that’s more valuable than the logo.

Additionally, regarding multi-signature upgrades, even beginners can grasp one point: who can sign, how many people are required to sign, and whether they can directly modify the implementation of the contract. Many projects claim to be “decentralized,” but in reality, three out of five signatures are from their own team… I’ll quietly reduce my holdings accordingly. Recently, hardware wallets are out of stock, and phishing links are everywhere. During times like this, don’t rush to click “official airdrops”; first, verify the basic trustworthiness of these sources to avoid crying later.