Newcomers want to check the "credibility" of a project, I usually don't look at the hype around KOLs first, I check three things: GitHub, audit reports, and multi-signature upgrades. GitHub isn't about the number of stars, mainly look for whether there have been continuous commits recently, and whether the same one or two people are holding back big moves; audit reports shouldn't just be marked as "passed," search for keywords: permissions, upgrades, whether the admin can change logic with one click, many pitfalls are written quite plainly; multi-signature is even more straightforward, how many people sign? Who are they? Is there a time lock? Basically: in case of an incident, who can press the button, and how much reaction time do you have after pressing it.

Recently, the main chain is about to upgrade/maintain, and everyone in the group is guessing whether the ecosystem will move away. I'm actually more concerned about: when these projects experience a chain shake, is it "service suspension with notice," or once the upgrade permissions are enabled, can they route the pool to a place you've never seen before... I look very calm on the surface, but inside I’m quite annoyed by this slogan of "trust us." Anyway, now I see upgrades with multi-signature that don't have a time lock, my hand reflexively withdraws the order—forget it, I’d rather miss out than become fuel for bad trades.