I'm now looking at the "credibility" of the new protocol, not the TVL anymore (anyway, if it rises, I still call it fake).

First, check GitHub: don't look at how fancy it is, just see if there's long-term activity, if there are serious arguments in the issues, and if the changes are the kind of "modify two lines and change permissions" shady operations... It makes me break out in a cold sweat.

Don't idolize the audit report either; honestly, I focus on three points: whether the scope is clearly defined, whether known risks have been fixed, and whether there was a re-audit after major upgrades. The most critical thing is multi-signature upgrades: how many people, whether they are from the same company, whether there's a timelock—don't end up thinking it's DeFi when it's actually a game where "admins can change my wallet address at any time."

Recently, hardware wallets are out of stock, phishing links are everywhere, and people suddenly start talking about security... I'm not used to that.
I personally: always manually input links, pay extra attention to signature pop-ups.
Those "just click once to claim" things—forget it. If I really want to claim, I’d first check GitHub to see if they’re "seriously arguing."
The cold sweat I mentioned earlier, in the end, still depends on that.