Recently, the airdrop season has turned task platforms into check-in and work routines, and the more strict the anti-witch measures become, the more anxious everyone gets… I’ve started to look at something more “boring”: whether the project is reliable or not. Beginners want to read the credibility, but I think it’s better not to focus on Twitter hype first, instead check GitHub and audit reports for more concrete information.

You don’t need to understand code to get a general idea from GitHub: whether updates are sporadic, if key changes have been reviewed, whether bugs reported in issues are being ignored. Don’t just look at the cover of audit reports saying “Passed,” focus on “What was found,” “Were issues fixed,” and “Was a re-audit done.” Lastly, look at multi-signature upgrades: how many keys, who holds them, whether a single person can make decisions, how long the delay is before it takes effect… Basically, see if they dare to leave a backdoor for themselves. Anyway, I’d rather do two fewer tasks now and first scan these three things.