Recently, someone asked me again: how does a newbie determine if a project is "more trustworthy"? Basically, I look at three things: Is the GitHub active (not just for show, with commits, discussions, and rollbacks happening); don't just look at the audit report logo—squint and check if the conclusion says "Repaired/Unrepaired/Risk Accepted," the more honest the better; and also, multi-signature upgrades—how many people, who can act, is there a delay—at least it shouldn't be a single key that can be changed at will.

These days, the funding rates are extremely volatile again, and the group is arguing whether to reverse or keep pumping the bubble. I actually prefer to look at these "boring details": when the market is hot, it's easiest to treat permissions as air.

I now also set reminders and limits for myself; when triggered, I take a break. I used to think it was troublesome, but I later found it really helps with mental heat... That one second when the reminder interrupts, emotions shift from "I want to win" to "What am I doing," and then the urge to rush diminishes. Just keep it like this for now.