Newcomers want to see if a project is reliable; I usually don't focus on candlestick charts first, I check GitHub and audit reports. GitHub isn't about how many commits there are, but whether it's being maintained consistently, whether PRs/issues are being responded to seriously, and whether key changes are clearly documented; I get suspicious of projects that suddenly have a big update without explanation...

Don't just look at the "pass/no issues" conclusion page in audit reports; focus on how high-risk issues were fixed, whether there was a re-audit, and whether there are "known risks/uncovered scopes." The most critical aspect is permission upgrades: whether the contract can be modified, who can modify it, whether multi-signature or single key, and if there's a timelock. In plain terms, the power structure is more honest than the documentation.

Recently, social mining and fan tokens have become popular again. "Attention is mining" sounds appealing, but attention comes quickly and goes just as fast; I care more about whether permissions and fund flows remain stable after the hype fades. The red flags are: the ability to upgrade at any time + single private key + unclear wallet ownership; I generally avoid projects with these issues.