Recently, I’ve seen social mining, fan tokens, and the “attention equals mining” approach again.

Honestly, I care less about how loud the narrative is and more about whether the project is reliable:
Is GitHub actively updating? Are there bug reports in the issues? Are developers responding? (I will directly downgrade trust if there are projects that haven’t moved in half a year and suddenly make a big commit.)
Don’t just look at the logo in the audit report; flip through a couple of pages to see what the scope says, and whether there are disclaimers like “not covering upgrade proxies/multisig/cross-chain bridges.”
Even a good conclusion might just be a shell audit.

Upgrading multisig is even more critical: who owns the multisig, how many keys, is there a timelock (giving you reaction time)?
Now I tend to be cautious when I see “upgradable + no delay.”
A few days ago, I looked at a pool on-chain; the admin permissions could still change the fee rate.
Before making a transaction, I even specifically checked the contract’s read functions to confirm no strange switches were enabled…
After experiencing the pitfalls of NFT royalties and liquidity pools, I know that while the hype is fun, trustworthiness needs to be dissected layer by layer.