Recently, I've been catching up on GitHub and audit reports to figure out how "trustworthy" a project really is. Beginners don't actually need to understand all the code; I focus on three things first: whether there are ongoing commits, whether the audit clearly states boundaries and known risks (not just a one-page stamped document), and who is pressing the multi-signature buttons, whether the signers are decentralized, and if there's a time lock. Basically, I'm most afraid of the feeling that "it can be changed at any time." The recent economic collapse in blockchain games also serves as a warning—when inflation kicks in, and studios enter the scene, the token prices spiral, and in the end, it's the ordinary players who take the fall. Anyway, I'm now more concerned about who holds the buttons and whether anyone is willing to clarify issues when problems arise... Remember this "button" first.