Recently, airdrop season has heated up again. Task platforms are upgrading their anti-witch measures, and the yield farmers really seem to be clocking in for work... I actually prefer to spend my time on "trustworthiness that I can understand." When a newbie reads a project, I usually focus on three things: don't just look at the stars on GitHub, click in to see if there are recent commits and whether it's just one or two people holding it up; don't be fooled by the logo in the audit report, focus on "fixed/not fixed" and severity levels, especially avoid those that drag on without fixing but still run promotions; for permission upgrades, always check multi-signature, how many signatures, who the signers are, and if there's a delay (timelock). Basically, can they just go all-in and modify your contract? Anyway, I’d rather miss out on a wave than step into a trap where "things are fine today, but tomorrow the logic changes"... What other details do you usually pay attention to?