To evaluate a cryptocurrency investment
, start with one question: what creates demand for the asset, and how does the asset capture value from that demand? Then test the answer against verifiable network activity, token supply, holder concentration, liquidity, security, governance, custody, and legal risk.
Price momentum and community size are not substitutes for due diligence. A crypto asset can have active users but weak token value accrual. It can have compelling technology but unsustainable incentives. It can also appear liquid until market stress exposes shallow order books or locked supply.
Use the Be The Investor crypto market to organize market data and research candidates. Confirm decisive facts through project documentation, public blockchain data, source code, audit reports, governance records, and official regulatory sources.
First classify the asset
Different crypto assets require different valuation logic:
Monetary assets: valued partly through scarcity, security, liquidity, adoption, and credibility as a store or transfer of value.
Smart-contract platform tokens: may be used for transaction fees, staking, security, or governance.
Stablecoins: depend on reserve quality, redemption, legal structure, operational controls, and counterparty risk.
Decentralized-finance tokens: may govern protocols or receive economic benefits from fees, but the legal and technical structure varies.
Application and gaming tokens: may function as access, incentive, payment, or governance assets, often with concentrated demand.
Tokenized real-world assets: require analysis of both the token and the legal claim on the underlying asset.
Do not compare a stablecoin, a network gas token, and a governance token with one identical price-to-fees multiple. Their rights, risks, and value-accrual mechanisms are different.
1. Define the problem and the user
Write a plain-language description:
What problem does the network or protocol solve?
Who uses it without being paid to do so?
Why is a blockchain or token required?
What is the alternative, including a normal database or centralized service?
Which measurable behavior would demonstrate product-market fit?
If the explanation depends mainly on the token price rising, the project may be circular: incentives create activity, activity creates a narrative, and the narrative attracts more speculative capital without durable external demand.
2. Map token value accrual
Usage does not automatically benefit token holders. Determine whether the asset is required for:
Transaction fees.
Staking or network security.
Collateral.
Governance with meaningful control.
Access to scarce resources.
Revenue sharing, buybacks, or burns where legally and technically applicable.
Then ask who receives the economic value: token holders, validators, application developers, liquidity providers, a foundation, or users through lower prices? A network can succeed while its token underperforms if value leaks elsewhere or supply expands faster than demand.
3. Verify real usage
Prefer metrics that are difficult to fake and economically meaningful:
Fees paid by users, excluding subsidies where possible.
Active addresses or users, adjusted for bots and sybil activity.
Transaction value and settlement volume, with self-transfers filtered where possible.
Stablecoin supply and transfer activity on the network.
Developer activity across important repositories.
Application revenue, retention, and repeat usage.
Validator or node participation and geographic concentration.
Raw transaction count can be misleading because low-value automated activity may dominate. Total value locked can be inflated by leverage, recursive deposits, token-price appreciation, or incentive programs.
4. Analyze tokenomics and the supply schedule
Build a supply table from primary documentation and verify it on-chain where possible:
Circulating supply.
Total and maximum supply.
Annual issuance or burn rate.
Vesting and unlock dates.
Team, investor, foundation, community, and treasury allocations.
Staking rewards and who bears dilution.
Conditions that allow governance to change supply.
Two basic calculations are essential:
Market capitalization = token price x circulating supply
Fully diluted valuation = token price x maximum or fully diluted supply
A large gap between market capitalization and fully diluted valuation can signal future dilution, but the schedule matters more than the gap alone. A slow, transparent release tied to network security is different from a large insider unlock into limited liquidity.
5. Measure holder and governance concentration
Use a block explorer and project disclosures to identify:
Largest wallets after excluding known exchanges, bridges, and protocol contracts.
Team, investor, foundation, and treasury control.
Voting power concentration and delegation.
Validator or mining-pool concentration.
Multisignature thresholds and signer independence.
Upgrade keys, pause controls, blacklist powers, and emergency privileges.
“Decentralized” is not a binary label. A protocol may have decentralized transaction validation but centralized software upgrades, treasury control, front-end access, or oracle dependencies.
6. Test liquidity and market structure
Reported trading volume is not enough. Review:
Depth within 1% and 2% of the market price.
Bid-ask spreads across reputable venues.
Volume concentration by exchange and trading pair.
Stablecoin and fiat on-ramps.
Derivatives open interest, leverage, and funding rates.
Unlock size relative to genuine daily liquidity.
Dependence on market makers or token incentives.
Estimate the slippage for the position you could realistically need to exit during stress. A token with a large headline market capitalization can still have poor executable liquidity.
7. Examine protocol economics
Separate revenue from token incentives:
Gross fees paid by users.
Payments to validators, liquidity providers, or other suppliers.
Net protocol revenue retained by a treasury or distributed under the protocol rules.
Token emissions used to purchase activity.
Security budget required to maintain the network.
An apparently high yield may be financed mainly by issuing more tokens. Measure yield in real economic value and include dilution, smart-contract risk, lockups, and the possibility of slashing.
8. Review technology and security
Technical due diligence should cover:
Public source code and meaningful development history.
Independent security audits, their scope, date, and unresolved findings.
Bug-bounty program and incident-response process.
Prior exploits, outages, chain reorganizations, and recovery actions.
Bridge, oracle, wallet, and cross-chain dependencies.
Upgrade process and backward compatibility.
Network security model and cost of attack.
An audit reduces some risk; it does not certify safety. Verify whether the deployed contracts match the audited version and whether privileged keys can change critical behavior after the audit.
9. Evaluate the team, treasury, and execution
Check identities and track records where disclosed. More important, test execution:
Were major roadmap milestones delivered?
Are delays explained with technical specificity?
Is development concentrated in one person or vendor?
How large is the treasury and in which assets is it held?
What is the estimated operating runway?
Are foundation and company relationships transparent?
Do insider unlocks align with long-term delivery?
Anonymous teams are not automatically fraudulent, and public identities do not guarantee honesty. The risk assessment should reflect the accountability and recourse available.
10. Map competitors and substitutes
Compare the project with direct protocols and centralized alternatives:
User cost and speed.
Security assumptions.
Liquidity and application ecosystem.
Developer experience.
Switching costs and interoperability.
Regulatory and distribution advantages.
The token's necessity in the product.
Network effects can be powerful, but users and liquidity can move rapidly when incentives change or a security incident occurs.
11. Review legal, regulatory, tax, and custody risks
Regulation varies by asset, activity, platform, and jurisdiction. Do not assume that “decentralized” removes legal exposure. Consider:
How regulators may classify the asset or related activity.
Whether trading venues and service providers are authorized where required.
Restrictions on staking, lending, derivatives, privacy tools, or promotions.
Sanctions and anti-money-laundering exposure.
Tax treatment of trading, staking, airdrops, lending, and token migrations.
Custody model, private-key control, recovery, and counterparty risk.
The SEC's investor materials warn that a proof-of-reserves report is not equivalent to a financial-statement audit and may not establish that customer liabilities are fully protected. The CFTC warns that virtual currencies are targets for hacking and fraud and that recovery may be limited after theft.
For U.S. taxpayers, the IRS states that broker reporting on certain digital-asset dispositions began for transactions on or after January 1, 2025. Tax rules remain fact-specific; retain complete records and consult a qualified adviser.
12. Build scenarios and size the risk
Traditional discounted cash flow may not fit every crypto asset. Use scenario analysis:
Bear case: adoption stalls, fees fall, regulation tightens, or a security event damages trust.
Base case: usage grows at a defensible rate while dilution follows the disclosed schedule.
Bull case: the network gains durable users and the token captures a measurable share of the created value.
For each case, estimate supply, demand driver, fees or economic activity, competition, and the valuation method. Then define a position size that can go to zero without disrupting the financial plan.
Use the Be The Investor risk management tools and portfolio tracker to monitor crypto concentration alongside stocks and ETFs. Volatility alone can understate the risk of smart-contract failure, depegging, custody loss, illiquidity, or regulatory action.
A 100-point research scorecard
This scorecard is a ranking aid, not a return forecast.
Set a minimum evidence standard for every category. A high total score should not override a critical failure such as unverifiable reserves, an unaudited privileged contract, concentrated unlocks, or inaccessible custody.
Red flags that should stop the research process
Guaranteed returns or claims of little or no risk.
Pressure to act immediately or send assets to an unknown wallet.
Anonymous ownership of critical admin keys with no controls.
Unverifiable team, partnerships, reserves, or customers.
Copied documentation or no technical explanation of the token's necessity.
Returns funded mainly by token emissions or new deposits.
Large near-term insider unlocks with shallow liquidity.
Audit claims without a report, scope, version, or remediation record.
Trading volume concentrated on one opaque venue.
A community that attacks questions instead of answering them with evidence.
Frequently asked questions
What is the most important crypto metric?
No single metric is sufficient. The most important relationship is between real usage and token value accrual, adjusted for supply growth, concentration, liquidity, and security risk.
Is market capitalization enough to value a cryptocurrency?
No. Market capitalization uses circulating supply and can hide future dilution. Compare it with fully diluted valuation, the unlock schedule, actual liquidity, and the token's economic role.
Does a security audit make a crypto project safe?
No. An audit covers a defined scope and code version at a point in time. New code, privileged upgrades, integrations, operational failures, or an undiscovered vulnerability can still cause loss.
How can investors verify crypto activity?
Use public block explorers, protocol dashboards, source-code repositories, governance records, and independently reproducible queries. Document filters for bots, internal transfers, incentives, and duplicated activity.
How much crypto should be in a portfolio?
There is no universal allocation. It depends on risk capacity, objectives, liquidity needs, other assets, and the possibility of total loss. Position size should be determined before purchase and tested against a severe downside scenario.
Sources and further reading
Investor.gov: Exercise Caution with Crypto Asset Securities
CFTC: Understand the Risks of Virtual Currency Trading
CFTC: Use Caution When Buying Digital Coins or Tokens
CFTC and SEC: Digital Asset Fraud Red Flags
SEC: Crypto Asset Custody Basics for Retail Investors
IRS: Frequently Asked Questions About Broker Reporting for Digital Assets
Editorial disclaimer: Crypto assets can be highly volatile, illiquid, technically complex, and exposed to fraud, hacking, custody failure, and regulatory change. This framework is educational and is not a recommendation to buy or sell any asset.
This Solana treasury company may sell SOL as a DeFi loan ties up more than half its treasury
Bitcoin ETFs add $189M as August net inflows approach $1B
Ethereum’s 12-GPU proving problem just got a 4-GPU answer