Due Diligence: The Checklist, the Red Flags, the Tear-down

    Module 6 · Lesson 3 of 3

    Due Diligence: The Checklist, the Red Flags, the Tear-down

    18 min readUpdated

    Execute a systematic due diligence checklist covering team quality, product reality, and adoption evidence.

    Due Diligence: The Questions That Separate Research From Gambling

    Tokenomics tells you whether the token's structure supports price appreciation. Due diligence tells you whether the project behind the token is real, competent, and likely to succeed.

    Most people skip due diligence because it's not as exciting as reading charts. But the graveyard of crypto is filled with tokens that had great tokenomics and terrible teams. Terra/Luna had elegant tokenomics, and it still collapsed because the fundamental design was flawed and the team dismissed the risks.

    The Three Pillars of Due Diligence

    Pillar 1: Team

    Who are they? Real names, LinkedIn profiles, verifiable work history. Anonymous teams aren't automatically bad (Bitcoin's creator is anonymous), but anonymity removes accountability. If an anonymous team rugs, you have zero recourse.

    What have they built before? First-time founders fail at higher rates. Teams with previous successful projects (even outside crypto) are lower risk.

    Are they still active? Check GitHub commits, Twitter activity, Discord presence. A team that hasn't pushed code in 3 months or posted updates is either building in stealth (rare) or quietly abandoning the project (common).

    Red flag: Team members have no verifiable identity, no previous work history, and their LinkedIn profiles were created the same month as the project.

    Pillar 2: Product

    Does it work? Is there a live product you can actually use, or just a testnet/whitepaper? Many projects raise tens of millions of dollars without ever shipping a functional product.

    Is anyone using it? Check on-chain metrics: daily active users, transaction count, total value locked (TVL) for DeFi projects, developer count for L1/L2s. A product with zero users after 12 months of being live is a dead product.

    Does it need a blockchain? This is the most underrated question in crypto. Many projects would work better as a traditional web app with a database. If the token doesn't serve a clear purpose in the product's operation, it's likely a token for the sake of having a token (to raise money).

    Is it defensible? Can another team fork the code and launch a competitor tomorrow? Open-source code is great for transparency but means anyone can copy it. What matters is network effects, brand, and ecosystem, the things that can't be easily forked.

    Pillar 3: Adoption

    Is adoption growing or declining? Month-over-month growth in users, transactions, or TVL. A project with declining adoption despite a rising token price is a divergence that usually resolves with the price catching down to reality.

    Who are the users? Are they real users or incentivised participants (paid through emissions/airdrops)? Many DeFi protocols have high TVL that's entirely mercenary capital: farmers who will leave the moment rewards decrease.

    Is there a community? A genuine community that discusses, contributes, and builds on the protocol is a powerful signal. A Telegram group with 50,000 members who only post "when moon?" is not a community.

    Three DD Pillars Before InvestingTEAM✓ Doxxed founders✓ Verifiable LinkedIn and GitHub activity✓ Track record of shipped products✓ No exit scam historyAnonymous = red flagCheck: LinkedIn + GitHubPRODUCT✓ Working mainnet code✓ Not just a whitepaper✓ Audited by reputable security firm✓ Real use case, not marketing narrative onlyWhitepaper-only = avoidCheck: GitHub + audit reportADOPTION✓ Growing TVL on-chain✓ Active addresses growing month-over-month✓ Not wash-traded volume✓ Protocol revenue in treasury verifiableFake volume = red flagCheck: DeFiLlama + Dune
    The three DD pillars (team verifiability, working product, and on-chain adoption) each need to pass independently before investing; a failure in any one pillar invalidates the investment thesis.

    The 10-Minute Due Diligence Check

    You don't need to spend 10 hours on every project. For a quick filter:

    1. Google "[project name] team". Can you find real people with real histories? (2 min)
    2. Visit the product. Can you actually use it? Does it work? (2 min)
    3. Check DeFi Llama or similar analytics. Is TVL/usage growing or declining? (2 min)
    4. Search "[project name] scam" or "[project name] hack". Any red flags? (2 min)
    5. Check GitHub. When was the last code commit? (2 min)

    If a project fails any of these five checks, dig deeper before investing. If it fails multiple checks, skip it.

    Fake Metrics vs Real MetricsIf you cannot verify it on-chain, assume it is marketing.FAKE METRICS (Unverifiable)✗ "500K users": unverified claim, no on-chain data to support it✗ "Partnership with Fortune 500": MOU signed, not implemented✗ "$2B TVL": includes project's own treasury as depositor✗ Volume from single low-quality exchange (likely wash traded)REAL METRICS (On-Chain)✓ Active addresses rising: verifiable on Etherscan / Dune✓ Protocol revenue in treasury: visible on-chain in real time✓ TVL from independent depositors: verified via DeFiLlama✓ Independent security audit from Certik / Trail of Bits
    Marketing metrics are designed to sound impressive without being verifiable. Every meaningful metric should have a corresponding on-chain data source that any investor can independently confirm.

    Quick Recap

    • Due diligence covers three pillars: team, product, and adoption
    • Verify the team's identity, track record, and current activity
    • Check if the product works, has users, actually needs a blockchain, and is defensible
    • Measure adoption trends: growing or declining, real or incentivised
    • The 10-minute check (team search, product test, analytics, scam search, GitHub) filters most bad projects
    • Skipping due diligence is not an acceptable shortcut, because the money you lose will cost more than the time you save

    Checklist

    • Run the 10-minute due diligence check on a token you hold
    • Verify at least 2 team members' identities and backgrounds
    • Use the product yourself (if it has a live product)
    • Check adoption metrics: users, TVL, or transaction count trends
    • Search for any scam allegations or hack history

    Common Mistakes

    • Trusting a project because a famous influencer promoted it, instead of doing your own research
    • Accepting a whitepaper as proof that a product exists, when a whitepaper is a plan, not a product
    • Ignoring declining adoption because the price is rising, when price can diverge from fundamentals temporarily
    • Assuming that being on a major exchange means the project is vetted, when exchanges list tokens for fees, not for quality assurance

    Key takeaways

    What to remember

    1. On-chain data (TVL, active wallets, revenue) overrides all marketing claims
    2. Incentivized TVL (farm-and-dump) is not real adoption, because it disappears when rewards end
    3. 5 DD red flags that end the process: rug history, copied whitepaper, fabricated metrics, no code, unverifiable team
    4. Evidence hierarchy: on-chain data > audits > GitHub > press releases > social media
    Lesson quiz

    Quiz

    Question 1 of 15

    Pass: 11 of 15 correct

    Question 1 of 15

    A project claims 200,000 monthly active users. You check on-chain data and find 3,500 unique active wallets in the last 30 days. What does this mean?

    Keep your place

    Save this lesson and continue tomorrow.

    Create an account to mark lessons complete, build a daily practice streak, and use paper trading with $10,000 in virtual capital.

    Free forever No card required Continue from any device

    Up Next

    Cycle Phases and the Halving: Why the Rhythm Repeats

    Continue