I'm currently looking at the project "Trustworthy or Not," but I don't pay much attention to how loudly they shout... First, check if there's ongoing updates on GitHub, not those that haven't moved in half a year and suddenly have a burst of commits in one day; then look at the audit reports, the focus isn't on "how many companies," but whether they categorize issues by severity, which ones have been fixed, and which ones are just accepted as risks. Upgrading permissions is even more critical: who holds the multi-signature, what is the threshold, is there a timelock (giving everyone time to react), otherwise even a beautiful code could be easily changed with a single click. Recently, I've also been looking at social mining and fan tokens; the idea of mining attention sounds great, but if the contracts and permissions are a mess, honestly, it's just about monetizing emotions faster. Someone also complained to me: you look at these "multi-signature/audits" like checking the hygiene of a takeout restaurant... I said, anyway, after venting emotions, just get on the ride; taking it slow isn't shameful.