Recently, I saw new L1/L2 projects immediately boost TVL with incentives, and old users complain about "mining, selling," I first went to check three things to cool myself down: GitHub, audit reports, multi-signature upgrades. Honestly, these three look at "who can move your money, and how fast they can do it."

I don’t look at the star count on GitHub, mainly whether there have been continuous commits in the past 30 days, and whether the changes match the announcements; if there’s a sudden major overhaul of a bunch of core contracts and they say it’s just a "minor upgrade," I get very cautious. Don’t just focus on "passed" in audit reports, pay attention to how high-risk issues are fixed, whether there are any remaining "known risks," and whether the audited version matches the one currently running on the chain. Multi-signature is even more critical: how many people, what’s the threshold, whether the signers are a group of familiar old hands, and whether a timelock can be added (to give everyone reaction time). Anyway, I’d rather be slow now than get fooled by my own FOMO reflex.