I’m now judging whether the project is legit or not—and I really don’t want to just go by how loudly people are shouting about it on Twitter... First, I’d rather check the GitHub: are they making continuous updates, or is it just two commits to keep up appearances? Then I’ll skim the audit reports—no need to understand everything—just find the sections like “Fixed/Unfixed/Out of Scope.” Basically, it’s about whether the team is facing the problems head-on. Upgrades and multi-signature are also crucial: whether permissions are concentrated in one person, whether someone can casually change the contract—these are the kinds of things I’ll screenshot and save as a habit (yeah, I’ve got that old habit) so things don’t end up not matching later. Lately I’ve also heard that in some regions taxes are being added, compliance is tightening up for a while and then loosening again—the expectations for deposits and withdrawals really mess with your mindset... So I’m more willing to wait it out slowly. I’d rather miss out than step on a mine.