Reading whitepaper and doing some research about the project. Always do background check of the bounty manager as well. Team should be very active and helpful to answer questions and request. There's a lot but I think that's the most important.