Yesterday, I saw that the main public blockchain is going to upgrade/maintain again, and a bunch of people in the group are guessing whether projects will move away. I also got a little nervous... What I’m most worried about is: a few days ago, I almost threw my money into a protocol that was “about to be upgraded,” but then I casually checked GitHub and found that the last serious update was months ago, and no one responded to the issue asking if multi-signature changes had been made. That instantly woke me up.

Now I set a simple DIY rule for myself: don’t look at audit reports for conclusions like “passed/not found,” first check two points—whether the report date is too old, and whether the fix list has been implemented one by one (preferably matching the commit records). For multi-signature upgrades, don’t just look at “multi-signature = security,” the key is who is signing, what the threshold is, and whether there’s a timelock (giving everyone reaction time). Otherwise, it’s like slicing bread before it’s baked—sure, it’s tasty, but a shake of the hand could burn you.

Anyway, I’d rather eat fewer benefits than become a “testnet user on the day of the upgrade”… That’s it for now.