> How are users supposed to learn what is the right smart contract to begin with? That's the definition of due diligence. It's not one thing and the specifics

> How are users supposed to learn what is the right smart contract to begin with? That's the definition of due diligence. It's not one thing and the specifics of what's involved vary depending upon the investment. At the end of the day, the onus is upon the user to determine if it's a fraud. Being difficult or down right impossible for a non-technical person to audit a contract address or the contract code itself isn't a license for users to ignore that risk. It means they're accepting it in its entirety. Or they can defer to a trusted third party to make that determination for them. But even then, they're still on the hook for trusting that third party.