Lately, I've been checking whether projects are reliable or not. As a newbie, I don't dare pretend to understand the code... So I just browse GitHub: not by how many stars it has (that can also be faked), mainly look for continuous updates, whether issues are being responded to, and if key changes are suddenly all rolled out at once. Don't treat audit reports as a talisman; I look at whether they mention "scope" and whether the issues found have actually been fixed. Some just brush it off with a sentence like "known risks," tsk.

Upgrading multi-signature is even more critical: how many people sign, who they are, whether there's a timelock (giving everyone time to react), at least don't let one address change everything on a whim. Recently, I also heard about some regions increasing taxes and tightening compliance, which really affects deposit and withdrawal mindsets... Anyway, if gas fees are high, I slack off; move when it's safer, focusing on a happy cost, being lazy but not reckless.