Recently, when project teams boast about "audited + upcoming multi-signature upgrade," I usually start by checking GitHub, not to understand the code, but to see if the commits are active: whether there are continuous updates, if someone genuinely raises issues in the issue tracker, and if the PRs are not just a bunch of empty merges. Then, don’t just look at the cover logo of the audit report; the most honest part is the pages on "Known Risks/Unresolved Items" further back. It’s also very important whether it matches the current contract version number. For multi-signature, I focus on three t
View Original