Do you also have this feeling: when a project says "audited," I actually feel more anxious... To be honest, an audit report is like a health checkup report—useful, but it doesn't mean you won't catch a cold. When beginners want to check credibility, I usually lazily look at three things: whether someone has really been working on GitHub recently (not just changing the README), whether the audit report has red text indicating "unresolved/partially resolved," and whether the upgrade permissions are multi-signature, how many people are required, and if there are timelock features that give you reaction time.

Recently, the new L1/L2 projects are again offering incentives to attract TVL, and veteran users are complaining about "mining, selling," which I can really empathize with... It's lively, but for those with multi-signature upgrades held too tightly and opaque code, I’d rather earn a little less, since there are too many pitfalls, so I’ll stay cautious for now.