Investors with an affinity for technology should check the lines of code of the smart contract on their own before investing.
M15
Read the transaction message before signing
Before signing a transaction users should read the transaction message, which shows the kind of transaction they sign (e.g. send transaction, smart contract interaction).
M22
Check transaction address (public key)
Using a service users/investors should check the transaction address everytime since attackers could inject a script (or attack the smart contract) and divert coins/tokens to their addresses.