How I evaluate RWA before trusting them in DeFi