As a DeFi apprentice evaluating projects for "trustworthiness," I mainly look at three things: whether someone is actually working on GitHub recently (not just updating the README), whether the audit report clearly states what was changed or what isn't covered, and most importantly, who is holding the multi-signature keys for upgrades—can they just casually change the contract with a snap of the fingers? To put it simply, it's okay if beginners don't understand the code; at least they can see if the risks are openly disclosed.

Recently, there's been talk about increasing taxes and compliance measures in certain regions, fluctuating between tightening and loosening, which has made deposit and withdrawal expectations a bit unpredictable… At this point, I'm even more worried about operations like "urgent upgrades" or "temporary maintenance"—the more chaotic, the easier it is for problems to arise. For now, I'll go ahead and revoke the authorizations on a few old contracts, so that if multi-signature actions happen someday, I won't be asleep at the time.