I've been waiting all along: waiting for confirmation, waiting for callbacks, waiting to think things through... The more I wait, the more I feel that a beginner judging a project's "trustworthiness" shouldn't just look at the candlestick charts. First, focus on three things: GitHub, audit reports, and multi-signature upgrades.

I don't pretend to understand code on GitHub; I just look at whether the updates are active: submission frequency, whether issues get responses, whether key changes are explained. Don't just look at the words "audited" in the audit report; check the conclusion and high-risk items, see if they are "fixed" or "accepting the risk," and also verify if the audit was done by well-known firms and whether it was re-audited after the latest upgrade.

Upgrading multi-signature is even more critical: who can operate the contract, how many people need to sign, is the threshold high, are there delays or notice periods? Recently, everyone has been complaining about miners/validators eating MEV and unfair ordering. Basically, it's about whether the "rules can be casually changed by a few people." Seeing permissions too centralized now, I prefer to hold back, even if it means earning less, rather than losing sleep. That's all for now.