I’ve recently started recording some “credibility clues,” otherwise every time I see a new protocol I rely on intuition, which makes it too easy to be carried away by emotions.

On GitHub, I no longer just look at stars, but instead check commit frequency, who is reviewing, whether there are real bug reports in issues, whether the team responds;
I don’t blindly trust audit reports based on logos, but focus on whether the restrictions are clearly stated, whether known risks have been “accepted,” or if they were genuinely addressed later.
Upgrading multi-signature is even more critical, essentially “who can change the rules,” looking at the threshold, whether signers are decentralized, whether there is a time lock…
Recently, cross-chain bridges have been hacked again, and oracles have reported abnormal quotes, everyone is shouting “wait for confirmation,” I understand that, but I prefer to write these things down:
Next time there’s a pump or panic, at least I can refer back to the facts based on records, rather than relying on guesses.