How to Evaluate a Crypto Project: A Due Diligence Checklist

The vast majority of cryptocurrency projects fail. Many are outright scams. Many more are well-intentioned but technically or economically unviable. A handful become genuine infrastructure with lasting value. The job of an investor is to tell the difference, ideally before the market does.

This guide walks through the questions we apply to any project that is not Bitcoin or Ethereum, in roughly the order of importance.

1. What problem does it actually solve?

The first question is the most-skipped: what specific problem does this project solve that is not already solved better by existing infrastructure?

For Bitcoin, the answer is well-defined: a censorship-resistant, fixed-supply, decentralized monetary asset. For Ethereum, the answer is well-defined: a programmable global computer for financial applications.

For most other projects, the answer is vague — "decentralized social network," "blockchain for [some industry]," "Web3 [some existing thing]." If you cannot state the specific problem and the specific advantage in two sentences, the project probably has not figured it out either.

A useful test: assume the project succeeds wildly. What do users actually do with it? If you cannot describe the use case beyond "they hold the token," the token has no fundamental basis for value.

2. Who is the team?

Anonymous teams are a significant warning sign. The legitimate exceptions are rare — Bitcoin's pseudonymous Satoshi Nakamoto being the most famous, and a small handful of well-established privacy-focused projects.

For most projects, the team should be publicly identifiable, have relevant background, and have visible track records. Look for:

• Real names with verifiable LinkedIn / GitHub histories
• Prior work in cryptography, distributed systems, or related fields
• Multiple core team members, not a single visionary founder
• Public engagement on technical questions, not just marketing

Warning signs: founders whose biographies cannot be verified, founders with histories of failed or fraudulent prior projects, founders who refuse to appear on camera or in person.

3. Is the technology audited?

For projects involving smart contracts, audits by reputable firms are essential. Look for audits by Trail of Bits, OpenZeppelin, ConsenSys Diligence, Certora, or similarly recognized teams. Read at least the executive summary of the audit reports — these often reveal real issues the marketing materials minimize.

"Audited" is not the same as "safe." Audits find a subset of issues; they do not certify the absence of all bugs. But unaudited contracts are gambling, and contracts audited by firms you have never heard of are nearly as bad.

4. How is the supply structured?

This is where many otherwise reasonable-looking projects fail under scrutiny.

• What percentage of the supply is held by the team and early investors? If insiders control most of the float, the price action you see in the early days is whatever they want it to be. When their vesting unlocks, prepare for sustained selling pressure.
• What is the vesting schedule? Look for cliffs (no unlocks for some initial period) followed by gradual vesting over years. Sudden full unlocks of large allocations are bad for token holders.
• How is new supply issued going forward? Predictable issuance is good. Discretionary issuance (the team or DAO can mint more at will) is risky.
• Is the supply fixed, inflationary, or deflationary? Each has implications. Be skeptical of "deflationary" tokenomics that depend on continued usage to function.

5. What does on-chain activity actually look like?

Marketing claims of "active users" and "growing adoption" can mostly be ignored. On-chain data shows what is actually happening.

• Daily active addresses (and the trend)
• Total transaction count
• Total value locked (for DeFi protocols)
• Holder concentration (is the top 10 wallets controlling most of the supply?)
• Smart contract interaction counts

Sites like DeFiLlama (for DeFi protocols), Token Terminal (for fee revenue), and the project's own block explorer show real activity. Compare against competitors in the same category.

6. Are there real users, or just incentivized users?

Many projects bootstrap activity by paying users to use the product — liquidity mining, airdrop farming, paid points programs. This produces real on-chain numbers but tells you very little about durable demand.

The right question: if the incentives ended tomorrow, would the activity continue? Projects with strong product-market fit retain activity after subsidies wind down. Projects that exist primarily as incentive vehicles see usage collapse the moment the rewards stop.

7. What is the competitive landscape?

"First mover" advantage in crypto is weaker than in other industries because forking the code is trivial. The question is not whether the project is the first to attempt something but whether it has durable advantages: network effects, liquidity, brand, developer mindshare, regulatory standing.

For any category, identify the top 5 competing projects. Compare on the dimensions that actually matter: total value locked, daily users, fee revenue, developer activity. The leader is often a different project than the one with the most aggressive marketing.

8. How does the project actually generate value?

"The token will go up because more people will buy it" is a circular argument. The right question is: what does the project produce that generates real economic value, and how does the token capture that value?

Good examples: Ethereum captures value through transaction fees (which fund staking rewards and are partially burned). MakerDAO captures value from stability fees on DAI loans. Uniswap captures value from trading fees (with active debates about whether the token actually receives those fees).

Bad examples: governance-only tokens with no claim on any cash flow. Tokens whose value depends entirely on speculation that more people will buy them later. Tokens whose value relies on emissions to incentivize holding.

9. What is the regulatory exposure?

Some projects have clear paths to regulatory acceptance. Others depend on regulatory arbitrage. Token issuance to US persons, certain yield products, and projects with strong centralization features (an issuing entity, a foundation that controls upgrades, a small team that can make protocol changes) face more regulatory risk than fully decentralized infrastructure.

This matters even if you do not live in a heavily regulated jurisdiction. If a project gets restricted in the US, EU, or UK, its global liquidity and accessibility decline substantially.

10. What do skeptics say?

For any project, find the most articulate critics and read them. The crypto information ecosystem skews heavily toward promoting projects (most commentators are also investors); the strongest critiques are valuable precisely because they fight against this bias.

If the criticism feels weak after honest engagement, that is information. If the criticism feels strong and the project's defenders only respond with personal attacks or appeals to authority, that is also information.

Red flags that should stop you immediately

• The team is anonymous and the project is asking for substantial trust.
• Marketing promises specific returns or guarantees.
• The project requires you to recruit other buyers to earn returns (Ponzi structure).
• Audits are missing, performed by unknown firms, or older than the current codebase.
• The top 10 wallets hold more than 50% of the supply.
• Vesting schedules concentrate large unlocks in the near future.
• The token is only listed on minor exchanges with thin liquidity.
• Search results for the project name return mostly paid promotions and influencer content, with little organic technical discussion.
• Skeptics on the project's social channels get banned or harassed rather than answered.

The bottom line

This checklist will not catch every bad project — some scams are sophisticated enough to pass casual due diligence. But it will catch the majority, and it will protect you from the entire category of "looked good on Twitter, lost everything within a year" outcomes that account for most retail crypto losses.

The base rate of cryptocurrency projects failing is high. The right disposition is skeptical by default. Bitcoin and Ethereum, by contrast, have over a decade of operational history each and earn the lower bar of "established infrastructure with predictable failure modes." Most investors who do due diligence carefully end up with a portfolio that looks much more concentrated in these two assets than the broader market suggests they should.