Check if the project is audited (look for names like Certik, Quantstamp)
Read reviews on forums, Twitter, or Reddit
Inspect the contract address on Etherscan (or the relevant explorer)
DeFiSafety – Rates protocol security practices
Revoke.cash – Manage past token approvals
RugDoc – Focused on DeFi risk ratings
Never connect your wallet to a dApp you don’t fully trust. If you're testing something new, use a secondary wallet with limited funds.