Why you should know this
Weak fundamentals are not always fabricated. Sometimes a true number is framed without its denominator; a real partnership is described beyond its scope; or a dashboard uses a method that rewards activity the project itself pays for.
The purpose of red-team research is neither cheerleading nor automatic suspicion. It is to make a claim earn its conclusion. That approach protects readers from hype and protects organisations from unsupported allegations.
The claim audit

For every material statement, ask:
- Provenance: Who first produced it?
- Definition: What exactly was measured or promised?
- Date: When was it true, and is it still current?
- Denominator: Compared with what population, supply or cost?
- Incentive: Who benefits from this presentation?
- Method: Can another researcher reproduce it?
- Alternative: What else could explain the observation?
- Missing evidence: What would change the conclusion?
Partnership inflation

A project may display respected company logos after a pilot, service subscription, grant or conversation. Confirm the relationship from both sides and identify scope: integration, investment, customer, vendor, research or memorandum.
Do not upgrade “working with” into revenue, deployment or endorsement. If only one party has spoken, report it as that party’s claim.
Vanity adoption metrics
Follower counts, registered accounts, wallets, transactions and total volume can look impressive while saying little about repeated useful activity. Examine:
- active and retained users;
- unique funding sources;
- bots and self-transfers;
- subsidies and airdrops;
- failed or spam transactions;
- concentration by entity or application;
- post-incentive behaviour.
The more cheaply a metric can be produced, the more supporting evidence it needs.
TVL and circular capital

Total value locked may move because token prices change even if unit balances do not. Assets can be borrowed and redeposited, counted across layers or represented by derivative claims. Protocol definitions differ.
TVL can describe scale under a method. It is not automatically unique capital, revenue, safety or productive use. Reconcile asset units, prices, borrowed amounts, wrappers and cross-protocol duplication.
Volume and liquidity claims

Reported trading volume can include wash trading, incentives or activity on venues with different surveillance. Genuine high volume also does not guarantee deep executable liquidity. Check spread, order-book depth, trade sizes and slippage across venues.
Do not allege manipulation from an unusual chart alone. Use market-integrity methodology and escalate named claims for legal review.
Hidden supply and control

Look beyond maximum supply and public governance slogans:
- team and investor unlocks;
- treasury and foundation balances;
- mint, freeze and upgrade powers;
- voting delegation and quorum;
- market-maker loans;
- related-party wallets, with attribution caveats.
An omitted fact can be as important as a wrong one. Still, non-disclosure is not automatically fraud; establish duty, source and context before characterising it.
Audit and security theatre
An audit badge can obscure the reviewed version, excluded components or unresolved findings. A bug bounty can exist without active response. A “decentralised” label can coexist with powerful admin keys.
Read the documents. Verify deployed addresses, later upgrades, signer controls and dependency risks. Use “audited” only with scope and date.
Cherry-picked time and comparison

Be alert when a chart begins at a convenient low, ends at a peak, switches currencies or compares a project’s best month with a competitor’s average. Ask for full history, consistent windows and methodology changes.
Correlation is another favourite shortcut. Rising users and price may occur together because rewards attracted both, because a broader market moved, or for several reasons. A chart alone does not establish cause.
A red-flag matrix
| Presentation | Better question |
|---|---|
| “Major partner” | What did each party confirm and deploy? |
| “One million users” | Active, unique, retained and measured how? |
| “Billions locked” | Which assets, prices, debts and duplicates? |
| “Deflationary” | What is net issuance under several scenarios? |
| “Community governed” | Who proposes, votes, delegates and upgrades? |
| “Audited and safe” | Which version, scope, findings and later changes? |
| “Exchange outflows are bullish” | What labels and alternative motives exist? |
Respond without overclaiming
Use careful language:
- “The public evidence reviewed does not yet substantiate…”
- “Under provider X’s definition as of date Y…”
- “This may be consistent with A, but B and C remain plausible.”
- “The audit covered version X and excluded component Y.”
Invite correction and retain sources. If a claim could harm a named person or organisation, apply fairness, right-of-reply and Compliance/Legal review.
Common mistakes
- Calling every promotional metric fraudulent.
- Repeating a criticism without checking the original source.
- Using a screenshot without date or method.
- Ignoring incentives and denominators.
- Treating correlation as causation.
- Turning probabilistic wallet labels into accusations.
- Publishing first and investigating later.
A no-money red-team lab
Audit five fictional claims: “largest ecosystem,” “fully backed,” “top-tier partnership,” “community controlled” and “audit-proven safe.” For each:
- identify the missing definition;
- request primary evidence;
- name one alternative explanation;
- assess claim risk;
- rewrite it as the strongest defensible conclusion.
How this connects to market mastery
Red-team analysis makes every earlier lesson more reliable: utility, supply, adoption, economics, development, reserves, flows, security and regulation. Mastery is not having permanent certainty. It is maintaining a research process that can be corrected before pride or position size takes over.
Key takeaways
- Audit provenance, definition, date, denominator, incentive and method.
- Verify partnerships from both sides and preserve scope.
- Reconcile adoption, TVL and volume before drawing conclusions.
- Treat wallet labels and causal stories as uncertain.
- Challenge evidence without making unsupported accusations.
Completion check: Red-team five fictional claims and rewrite each as a limited, evidence-led conclusion.
Next lesson: A08-15 compares valuation models and their limitations.
Identifies unsupported partnerships, inflated metrics, circular activity and selective disclosure.
*Cryptocurrency and virtual asset transactions are highly volatile and irreversible, may result in significant losses, and do not guarantee returns; customers should trade only after understanding the risks involved.