I’m now looking at the project “reliable or not,” and instead of checking the candlestick chart first, I take a look at GitHub to see whether there are ongoing updates, whether people are replying to issues, and whether version changes are written in plain, human language… then I pair it with an audit report to see whether the conclusion is really just template talk—especially whether there are “known risks/covered scope.” Upgrading permissions is even more critical: who the multi-sig signers are, what the threshold is, whether it can be delayed for a limited time or can be urgently paused—basically, who can press the button if something goes wrong.

Recently, I’ve been hearing that a certain region is raising taxes, compliance is tightening and then loosening again, and when expectations for deposits and withdrawals change, people’s emotions are even more likely to chase after things that “seem pretty simple.” I treat “simple” as a trap: a line like “audited/decentralized/multi-sig is very safe” just isn’t enough—I at least need to see how it’s constrained. Anyway, I still stick to my old routine: steady investing little by little + rebalancing; being able to sleep at night is the most important thing.