I set a strict rule for myself: if I don't understand it, pretend I didn't see it and don't touch it for now.

When choosing protocols, I focus on three things: GitHub is not about how many stars it has, but whether it's still actively being developed, if issues are being responded to, and if urgent fixes aren't dragged out for half a month;
Don't blindly trust that "approval = security" in audit reports. I read the conclusions and known risks sections to see if they dare to clearly state the pitfalls;
Upgrading multi-signature setups is even more critical—who the signers are, what the threshold is, whether rules can be changed with a single click. Basically, it's about whether "they can change it whenever they want."
Recently, everyone has been complaining about MEV and fairness in ordering, and I resonate a bit: even if it's on-chain and transparent, who gets priority at the end is still opaque, and retail investors' confidence can easily collapse…
Anyway, I’d rather earn a little less than be kept awake by a single upgrade or reordering.
That's all for now.