Recently, hardware wallets have been out of stock, and phishing links are everywhere. It’s only then that I realize everyone’s security awareness has improved... But honestly, if a newbie wants to judge whether a project is “reliable,” I think it’s better not to focus on the K-line first. Just look at GitHub + audit reports + multi-signature upgrades—those three things are enough to keep you busy.

I’m just a passerby observer on the chain, not taking sides. When I look at GitHub, I mainly check: Is there someone working on it long-term (not just a bunch of commits overnight), whether key changes have been reviewed, and if there are serious responses in the issues. For audit reports, don’t just look at the cover “pass,” focus on whether there are high-risk items, whether issues were ultimately fixed, and whether the auditors dare to write “we do not guarantee no vulnerabilities.” As for multi-signature upgrades, it’s best not to be something that someone just says “upgrade now,” check who the signers are, how many keys are involved, whether there’s a delay... these are much more meaningful than slogans.

Anyway, if you can avoid clicking on links now, don’t click. Wallets should still be layered, and that’s how it is for now.