Recently, everyone’s arguing about Layer 2s over TPS, fees, and subsidies, and they’re all pretty aggressive about it. I actually care more about that “invisible but truly critical” trustworthiness. For beginners who want to keep it simple, I usually start by checking GitHub—not to see how complex the code is, but to see if updates are ongoing, if changes are reviewed by someone, and if issues are raised and taken seriously. For those that haven’t moved in half a year and suddenly have a big update, I’ll first allocate my position to the smallest bucket.

Audits shouldn’t be treated as a talisman; looking at the conclusion page isn’t very useful. I’ll look for high-risk items, how they were fixed in the end, whether there was a re-review after fixing, and ideally match it with the commit history. As for multi-signature upgrades, honestly, it’s about “who can change the rules,” whether the signers are decentralized, if the threshold is sufficient, and if there’s a timelock to give the market time to react… These may seem boring, but they’re more real than the ecosystem funds on promotional pages. Anyway, I prefer to go slow and sleep well.