Last night I almost slipped up and went to mint a new series, luckily I checked the project's GitHub first… As a result, I realized I always treat "having code = reliable" as a talisman, basically just looking for peace of mind.

For beginners assessing credibility, I currently focus on three things: don’t just look at stars on GitHub, check if there’s recent activity, if it’s still being worked on, or if one or two people are working behind closed doors (I get a bit nervous if there’s a sudden major update); don’t blindly trust the words "audited" on the audit report, focus on whether high-risk issues are listed, whether they were finally fixed, and if the auditing firms are reputable; upgrading multi-signature setups is more straightforward—how many people can make decisions, what are the thresholds, is there any delay (timelock), otherwise you might think it’s DeFi but it’s actually “admin mood control.”

Recently, everyone’s been complaining about MEV and unfair ordering, I can relate… no matter how beautiful the on-chain rules are, execution power is too centralized, retail investors are just caught in the middle. Anyway, I now pay less attention to narratives and more to permissions—being able to sleep well is the most important.