My position is like a cat's, not pretending when looking at new protocols: first don't look at the PPT, first browse GitHub… it's not about how awesome the code is, but whether someone is really continuously updating, fixing bugs, responding to issues. Then take a quick look at the audit report, the focus isn't "audit = security," but what was found, whether it was fixed, and if it was re-reviewed after the fix. Otherwise, it's the same as putting a health check report in a drawer.

Upgrades and multi-signatures also need a glance, who can operate the contract, how many keys, whether it's signed by a bunch of people from the same team (in plain terms, just changing rules with one click). Recently, hardware wallets are out of stock, phishing links are everywhere. I now prefer to skip a few hot spots rather than accidentally clicking a fake site and turning small money into zero… Anyway, make some profit and run, lose and pretend to be dead, but don’t die too ridiculously.