Recently, someone compared on-chain yields with U.S. Treasury yields again.

As soon as I heard it, I felt a bit uneasy: the returns look similar, but the risks are completely different...
Anyway, for someone like me with a small position, what I fear most is whether the project is truly reliable.

For a newbie wanting to assess credibility, I currently focus on three things:
Is the GitHub still active (don't just look at stars, click in to see if anyone is actually updating code or fixing bugs recently);
Don't just look at the cover logo of the audit report, scroll down to see "what was found / fixed / are there unresolved high-risk issues";
Some reports are very polite in writing but the conclusions are quite alarming;
Upgrading permissions is even more critical—who is signing off? How many keys are involved? Can the rules be changed with one click?
Honestly, no matter how attractive the returns are, if permission upgrades are too centralized, I’ll just pretend I didn’t see it.

I also experience FOMO, but I set a simple stop-loss for myself: if I don’t understand it, don’t force a position;
Start with the smallest amount to test it out, and if something goes wrong, consider it a tuition fee—don’t go all-in as if it’s investing.
That’s it for now.