Recently looking at new L1/L2 projects that are offering incentives to boost TVL, old users complain "mining, selling" I truly understand... To put it simply, newcomers want to judge if a project is reliable, don't just look at the publicity, first check three things: GitHub, audit reports, and multi-signature upgrades. You don't need to read the code on GitHub, just pay attention to the update frequency, whether it's maintained by a consistent team over time, and if key changes are explained. If the repository is empty and they only post announcements, that's a bit suspicious. Don't just look for the words "audited" in audit reports; search to see if there are high-risk issues, whether they've been fixed, and if the fixes involved code changes or just a statement of "accepting the risk." Upgrading multi-signature is even more critical: how many keys, who holds them, whether a single person can modify the contract or withdraw funds, and if there's a timelock. Projects that can be upgraded instantly with one click, no matter how attractive the incentives, I wouldn't risk putting funds in. Anyway, trust is about the details; only when everything fits well does it feel like a well-tailored suit.