When I look at the project “Trustworthy or Not,” the first thing I notice is that it’s definitely not just the candlestick chart. First, check GitHub: it’s not about whether you can write code—it’s about whether there’s sustained updates, whether people are genuinely raising questions in the issues, and whether the developers are giving proper, serious responses. Projects that don’t move for half a year and then suddenly push a bunch of commits to look busy—I usually start by letting my tea cool down a bit.

Also, don’t treat audit reports like an all-access get-out-of-jail-free card. Focus on what versions were audited, whether any high-risk issues were left unfixed, and whether there was a re-audit after the fixes. Then look at multi-signature upgrades—basically, “who holds the keys”: how many people can modify the contract, the number of required signatures (the threshold), whether there are time locks, and whether there’s any public notice. Lately there’s been a wave of memes and celebrities shouting buy calls to stir up momentum. Newcomers really shouldn’t take the final step—yeah, it’s lively, but the “burn” is real too.