I’m currently checking the project “credibility” by looking at three things first: GitHub, audit reports, and upgrades/multi-signatures.

For GitHub, I don’t care about vanity metrics like stars. I just take a quick look to see whether there have been continuous submissions in the last one or two months—whether the changes are truly core work or just documentation updates. If there suddenly are a bunch of merges with nobody reviewing them, I’ll be a bit on guard.

For audit reports, don’t just look at whether it’s “passed.” Focus on how high-risk issues were addressed and whether there was a re-review. If the report date is too old, treat it as only for reference.

Upgrades and multi-signatures are even more critical: who holds the permissions, how many keys are needed for the threshold, and whether there is a timelock (the kind that gives you time to react). In plain terms, can you swap out the contract just by making a snap decision in the middle of the night?

Recently, expectations of rate cuts plus the whole “the discussion about the dollar—rising and falling together” have been heating up again. The more heated the sentiment gets, the more I’m willing to throw in 20U to test the waters first. Then wait 30 minutes to see what happens on-chain—if everything looks fine, we’ll talk about it again… Anyway, don’t rush.