Holds like a potted plant 🌱

I’ve been asked several times recently—how to judge whether a project is reliable, looking at GitHub, audit reports, upgrading multisigs, and so on. To be honest, when I first started, I was also completely confused. Anyway, now I’ve gradually come up with a few of my own dumb little methods.

First, GitHub—don’t just look at the star count. Click in and check the commit history from the past few months. If it’s all minor tweaks or there’s been no activity for a long time, then it’s basically the potted plant that forgot to be watered. As for audit reports, I usually look at the name of the audit team and the report date. If it’s too old, I skip it, because by then the code has usually gone through several rounds of changes. For upgrading multisigs, I focus on the number of signers and who they are. If all the signers are people from the project team, then it’s almost the same as not having extra multisig at all.

Recently, on-chain data tools have been questioned for lagging behind or even being able to mislead people. I think that’s pretty normal. Tools are dead; people are alive. The key is still to have your own judgment. Anyway, I’ve developed a habit now: whenever I see an interesting on-chain action or an upgrade announcement, I screenshot and save it first. If things end up going wrong later, at least I’ll have something to compare against. 🌿