When Every Field Reads N/A: Anatomy of a Bear-Market Due-Diligence Failure
0xSam
The document landed at 03:14 Taipei time, and it had nine sections. Section one measured technical positioning. Section two measured token economics. Sections three through nine walked the full catechism—market structure, ecosystem niche, regulatory exposure, team and governance, risk surface, narrative, and industry-chain transmission. Every one of them returned the same value.
N/A.
Not bearish. Not "insufficient data, pending." Just N/A, repeated until the template looked less like an analysis and more like a confession. I have spent twenty-two years reading crypto documents—the whitepapers that promised sovereignty, the audit reports that promised safety, the foundation decks that promised decentralization—and I have rarely seen one this honest. It said nothing because it knew nothing. Most of the industry cannot manage that kind of restraint. Excavating truth from the code's buried layers usually means finding a reentrancy bug or a mispriced oracle. This time the buried layer was the surface itself: a due-diligence framework that collapsed under the weight of its own emptiness, and, in collapsing, revealed exactly what crypto's analytical apparatus has become in the third year of this bear market.
The temptation, of course, is to fill it. A blank token-economics section is an invitation to invent a supply curve. A blank team section is an invitation to assume a doxxed founder with a Stanford postdoc. That is how most of this industry actually operates—not by lying, exactly, but by refusing to leave a field empty. The blank report is a stress test, and I want to spend this piece walking through why it failed, what each empty dimension is really measuring, and why the failure is more informative than a full report would have been.
Let me set the context, because the nine-dimension framework did not fall from the sky. It is the sediment of three cycles, and it was built by people who survived those cycles. After the 2018 ICO wipeout, the surviving analysts needed a vocabulary that separated vaporware from infrastructure. After DeFi Summer in 2020, they needed a vocabulary for composability risk—because they had watched liquidation cascades move across protocols like a fire through dry grass. After the 2022 collapses—Terra, Three Arrows, Celsius, FTX—they needed a vocabulary for counterparty opacity. The nine dimensions are the fossil record of every time this industry got burned: technical, token, market, ecosystem, regulatory, team, risk, narrative, contagion. Each dimension exists because a generation of people lost money on the thing it measures.
That is worth honoring before I criticize it. The framework is not stupid. It is a scar. But scars calcify, and calcified tissue does not bend. By 2026, in a bear market that has lasted longer than most of the people trading it have been alive in crypto, the framework had stopped functioning as an instrument of discovery and started functioning as an instrument of completion. Analysts fill it because filling it is the job. Completeness became the product. And when completeness is the product, an empty field is not a signal—it is a failure to be papered over.
Here is the thing the template cannot say out loud: in a bear market, the reader does not want nine dimensions. The reader wants one answer. Is my money safe? Everything else is decoration. The nine dimensions are a way of appearing rigorous while avoiding that question, because the honest answer to "is my money safe" is almost always some version of "I do not know, and neither does anyone who tells you they do." So the template spreads the anxiety across nine innocuous headings until it becomes a spreadsheet instead of a feeling.
Now to the core of it. Let me take the dimensions apart and show what each one actually measures once you strip the veneer—and, more importantly, what the empty version of each one quietly admits.
Start with technical positioning, dimension one, because this is where I live. The first thing a real technical assessment asks is not "is this innovative" but "where does the trust live." Every protocol is a claim about who you have to trust and how little you can get away with trusting. A zk-Rollup asks you to trust a verifier contract and a proof system. An optimistic Rollup asks you to trust that at least one honest watcher exists to submit fraud proofs within the challenge window. A monolithic L1 asks you to trust a validator set often large enough to be anonymous but small enough to be coordinated. Withholding the answer to "where does the trust live" is the single most common omission in crypto documentation, and it is not accidental—because once you name the trust assumption, you can price it, and once you can price it, the marketing collapses.
I learned this the hard way in 2017, when I spent six weeks reverse-engineering forty thousand lines of The DAO's legacy contracts, hunting the reentrancy that everyone had read about and almost no one had actually traced line by line. I found twelve distinct gas-optimization flaws in early ERC-20 implementations along the way—not exploits, exactly, but patterns where the code optimized for a cost structure that no longer existed, which is its own kind of time bomb. Every bug is a story waiting to be decoded, and the story The DAO told was not "we were hacked." It was "we never asked where the trust lived, so we put it everywhere at once." A blank technical section in 2026 says the same thing: nobody has done the reverse-engineering, or if they have, they have declined to publish it.
Dimension two, token economics, is where the empty field screams the loudest. A real token-economics analysis is not a pie chart. It is an interrogation of unlocking schedules against circulating float, and against the question every bear-market reader is actually asking: who is about to sell into this? I have watched more portfolios die from unlock cliffs than from hacks, and I say that as someone who has done forensic work on hacks. A fifty-million-dollar raise at a two-billion valuation with a one-year cliff means that on some future date, an amount of supply equal to a meaningful fraction of the current float becomes liquid, and it becomes liquid into whichever bid happens to exist that week. In a bear market, that bid is thin. The mathematics is not exotic. It is arithmetic, and arithmetic is what the template most often omits.
When token economics comes back empty, you should read it as a claim, not a gap. It usually means one of three things: the token has not launched, the team would rather you not do the arithmetic, or the arithmetic is so obviously hostile that writing it down would end the conversation. I have never seen a project that proudly published its full unlock schedule and then collapsed because of that transparency. I have seen dozens that published a summary bar chart with a footnote reading "subject to change." Subject to change is the most honest phrase in the industry, and it is almost never labeled as risk.
Dimension three, market structure, and dimension four, ecosystem niche, are where the template begins to hallucinate rigor. Market structure in crypto is not the same as market structure in equities. It is funding rates, open interest, stablecoin inflows and outflows, and the leverage embedded in perpetual swaps that never expire and therefore never reset. Funding rates are the closest thing crypto has to a real-time sentiment dial, and in a bear market they tell a specific story: persistent negative funding means shorts are paying longs, which means the crowd is positioned for more downside. That is not prediction. It is positioning. But it is data, and data is what a blank field denies you.
Ecosystem niche is where I did some of my most gratifying work, and it is where the template fails most gracefully. In 2020, during DeFi Summer, my own curiosity drove me to map the interdependencies of Uniswap, Aave, and Compound—three protocols that individually looked robust and collectively formed a web of over a hundred and fifty distinct interactions. I built a graph, and the graph showed me something the individual audits never could: how a liquidation on one protocol could propagate into a debt position on a second, which could cascade into a liquidity crisis on a third. Composability is not just function; it is poetry, and the poem is often a tragedy. A protocol's ecosystem niche is not its market-share pie chart. It is the set of other protocols that break when it breaks. Empty that field and you have hidden the contagion map—the single most important drawing in bear-market risk.
Dimension five, regulatory exposure, is where the industry's stated values and its actual incentives diverge most sharply, and it is the dimension I find the least honest. Projects preach decentralization the way medieval guilds preached piety—loudly, publicly, and mostly for the protection of the founders. I have traced foundation wallets on-chain, and the traceability is the point: the token allocation is public, the vesting contract is public, the multi-sig signer set is public, and yet the project describes itself as a community-governed protocol with no controlling entity. The DAO is not a governance mechanism in most of these cases. It is a compliance shield. It exists to absorb legal and rhetorical risk, to let a small group of people with a discord server claim they are merely stewards of a process.
I want to be precise here, because this is not cynicism, it is forensics. When you actually read the governance contracts, you find that a handful of addresses—often multisigs controlled by three to five people—retain upgrade authority, emergency pause authority, and treasury spend authority. The token vote is real, but it is real in the way that a public comment period is real: it shapes the sentence, not the policy. A blank regulatory section therefore does not mean "not yet assessed." It means the assessment would require naming the entity, the entity's jurisdiction, and the entity's token distribution, and none of those names can survive being written down.
The Howey test, whatever its critics say, remains a useful clarifying instrument. Money invested. A common enterprise. An expectation of profit. Derived from the efforts of others. Almost every token in the current market fails at least one prong—not because the token is bad, but because the token is a security and nobody wants to say so. When a framework returns N/A on regulatory exposure, it is usually declining to answer a question whose honest answer is a category, not a comment.
Dimension six, team and governance, is the field that most directly determines whether you are buying a product or a personality. In twenty-two years of watching this industry, I have observed that teams do not fail because they lack talent. They fail because they lack coherence—because the founders disagree about the mission, or because the treasury is a war chest for competing visions, or because the anonymous core developers cannot be held to any commitment at all. Anonymous teams are not automatically fraudulent; some of the best work in zero-knowledge came from people who valued privacy for reasons I respect. But anonymity changes the risk profile in a way the template refuses to price: with a doxxed team, your downside is disappointment; with an anonymous team, your downside is disappearance.
Governance health is even more measurable and even more ignored. Voter participation rates in most DAOs sit in the low single digits. Top-ten address concentration frequently exceeds fifty percent of voting power. Proposal quality is often an afterthought—quorum thresholds so low that a single whale can pass anything, or so high that nothing passes at all. I have read governance forums where the most-upvoted comment on a hundred-million-dollar treasury proposal was a joke. That is not a governance failure. It is a governance theater, and theater is exactly what an empty team section is designed to conceal.
Dimension seven, risk surface, is where the template commits its deepest sin, because it treats risk as a checklist rather than a thesis. Real risk analysis in a bear market starts from a single question: what is the fastest path from a normal market move to a total loss? For a lending protocol, that path runs through oracle latency and liquidation thresholds. For a rollup, it runs through the sequencer—if a single entity controls ordering, that entity controls front-running, censorship, and, in the worst case, exit. For a bridge, that path runs through the signer set of the custodial multi-sig, which is why bridges are the graveyard of this industry. Almost every major exploit of the past five years is a bridge exploit, and almost every bridge is a multi-sig with a nice interface.
When a risk matrix returns N/A on all categories—technical, market, operational, regulatory, competitive, narrative—it is not saying the project is safe. It is saying the analyst never got close enough to find the edge. Risk is not a property you look up. It is a relationship between a project and a world, and if you have not specified the world, you have not specified the risk.
Dimension eight, narrative and expectation, is the dimension that a bear market penalizes most brutally. In a bull market, narrative is a tailwind—revenue-without-revenue, users-without-users, and no one cares because the price is up. In a bear market, narrative is a liability, because every claim gets discounted and every discount compounds. The gap between what a project promised and what it delivered becomes the only number that matters. Market expected user growth; delivery was flat. Market expected revenue; delivery was token emissions. Market expected a mainnet; delivery was a testnet with a new name.
I call this the expectation spread, and it is the single most reliable indicator of a token's trajectory in a bear market. A project that underpromises and overdelivers has a negative spread in its favor. A project that promises a new internet and delivers a dashboard has a positive spread that will be paid down by price. When the narrative section comes back empty, it usually means the analyst could not find a story to tell—which, in a bear market, is itself a story, and not a kind one.
Dimension nine, industry-chain transmission, is the map I built in 2020 and have been redrawing ever since, and it is the dimension most responsible for the cascades that keep surprising people. Crypto is not a set of independent assets. It is a directed graph. Mining and infrastructure feed protocols; protocols feed DeFi and stablecoins; DeFi and stablecoins feed exchanges; exchanges feed on-ramps; on-ramps feed users; users feed applications; applications feed back into protocols. A shock anywhere in the graph propagates along the edges, and the edges are often invisible until the shock hits them.
I spent much of the 2022 bear market studying data availability sampling on the modular side—specifically the networking layer of Celestia—and I found something that a surface-level analysis would have missed: the sybil-resistance of a DAS network depends on the distribution of nodes, not just their number. A thousand nodes in one jurisdiction under one cloud provider are, for the purposes of availability, roughly one node. That is a transmission analysis. It asks not "what is this" but "what happens to this when something else fails." A blank transmission section does not mean no contagion exists. It means no one has drawn the edges yet, and undrawn edges are precisely where money goes to die.
Now I want to step back, because the point of this exercise is not to defend the template. It is to ask what the template's failure teaches, and the answer is uncomfortable: the empty report is more valuable than a filled one. Every field that reads N/A is a true statement. Every field that reads a confident number is, in an industry with this much opacity, probably a lie dressed as rigor. We have optimized for the appearance of analysis so thoroughly that the absence of analysis now reads as a defect—when it is, in fact, the only honest output the process could produce.
This is my contrarian angle, and it runs against everything the industry's information economy rewards. Everyone assumes the danger is a report full of fabricated numbers. I think the greater danger is a report full of plausible numbers, because plausible numbers are unfalsifiable. A fabricated team background can be checked. A fabricated risk matrix cannot—because risk is a claim about the future, and the future does not file a correction. The most damaging documents in this bear market are not the empty ones. They are the full ones, the ones with nine dimensions all populated, all shaded, all formatted, all of which quietly launders speculation into the language of analysis.
I have watched this laundering happen up close. In 2021, when I was implementing zk-SNARK constraints from scratch on Tornado Cash and Aztec and forking the Circom compiler into a simplified tutorial that eventually helped thousands of developers deploy their first circuit, I noticed something about the surrounding commentary. Almost none of it engaged with the arithmetic circuits. Almost all of it engaged with the token, the governance, the founders, the vibes. The one thing that could actually be verified—the proof system—was the one thing nobody read. True innovation lives in the circuit, not in the tokenomics, and the circuit is exactly what the nine-dimension template buries under eight dimensions of narrative.
This connects to something larger about how crypto knows things. We built zero-knowledge proofs so that a verifier could be convinced of a statement without seeing the witness. We built data availability sampling so that a light client could be convinced of availability without downloading the block. We built fraud proofs so that a single honest party could protect the many. Every one of these mechanisms is a theory of trust reduction, and every one of them is more sophisticated than the analytical frameworks we use to evaluate the projects built on them. We have state-of-the-art cryptography wrapped around Stone Age due diligence.
And the most advanced cryptography is about to collide with the most consequential application wave the industry has seen. The institutional entry of AI agents—autonomous entities that hold keys, sign transactions, and transact at machine speed—creates a need for verifiable computation that the current framework cannot even describe, let alone assess. I have been prototyping a zero-knowledge proof layer for large language model inference with three AI startups, and the central problem is one the nine-dimension template has no vocabulary for: how do you prove that a model ran the way it claimed, on the data it claimed, without revealing the weights or the inputs? The answer lives in arithmetic circuits, and the circuit is not a dimension. It is the substrate underneath all nine of them.
If you want a forward-looking read on where the next cycle's edge will be, it is there—at the seam between verifiable computation and autonomous agents, where the question is not "is this project decentralized" but "can this project prove what it did." The projects that survive the bear market will be the ones that make verifiable claims instead of trusting ones. The projects that die will be the ones whose nine dimensions were all beautifully populated and none of them true. And the analysts who matter will be the ones willing to write N/A when N/A is the answer—the ones who understand that an empty field is not a failure of rigor but the purest possible expression of it.
Let me put a sharper point on the bear-market stakes, because this is a market brief and the reader wants to know about survival. In a market where everything is bleeding, the frameworks you use to judge safety become the difference between a drawdown and a wipeout. Every layer of abstraction between you and the actual risk is a place where the risk can hide. The nine-dimension template is one such layer. The audit report is another. The foundation deck is a third. The whitepaper is the fourth. Strip them all away and you are left with a handful of questions that actually matter: Who controls the keys? Who controls the sequencing? Who controls the oracle? Who can pause the contract? Where does the liquidity exit if everyone runs at once? Everything else is commentary, and most of it is marketing.
I want to be careful not to romanticize emptiness, though, because there is a version of this argument that is just fatalism wearing a lab coat. The point is not that all analysis is futile. The point is that analysis must be tethered to something falsifiable, and in crypto, the falsifiable things are the on-chain ones. Wallets can be traced. Contracts can be read. Vesting can be computed. Flows can be measured. Node distributions can be mapped. Every single question that matters has an empirical answer, or it has no answer, and "no answer" is a legitimate and important result. The failure mode is not the empty report. The failure mode is the report that dresses "no answer" as a shaded cell.
The Dencun upgrade gives us a concrete example of how quickly the ground shifts beneath a framework. When proto-danksharding shipped with EIP-4844, it introduced blob-carrying transactions and instantly cut the cost of posting data to Ethereum for rollups, which cut rollup fees, which flooded the modular ecosystem with cheap blockspace. Every existing due-diligence template assumed a world where rollup data costs were high and falling slowly. Dencun broke that assumption overnight. And here is the part that most analyses miss: blob space is a scarce resource with its own fee market, and if rollup demand grows the way the roadmap assumes, blob space will saturate, and the marginal cost of the last byte of data will climb, and rollup fees will rise again. I have said for some time that within roughly two years of Dencun, blob competition will push rollup costs back up—and when it does, every protocol whose economics assumed permanently cheap data will have to reprice itself. A static nine-dimension template cannot catch that. Only a model can.
The same is true on the interoperability axis. Dencun lowered the cost of moving value between rollups, which is genuinely useful, but it did almost nothing for the user experience, which remains orders of magnitude worse than simply withdrawing to a centralized exchange. Cross-chain transfers still involve multiple signatures, wrapped assets, and trust assumptions that a CEX user never thinks about and never has to. The infrastructure improved. The experience did not. And a framework that measures infrastructure instead of experience will keep declaring the problem solved long after the users have left.
So here is the takeaway, and it is a warning dressed as a forecast. The bear market will not be survived by better templates. It will be survived by fewer of them. The analysts who matter over the next two years will be the ones who delete seven dimensions, keep two, and fill those two with data that can be checked on-chain. They will write N/A without flinching. They will name the multisig, trace the treasury, read the circuit, and measure the blob market, and they will refuse to shade a cell just to make a report look finished. The empty document that landed at 03:14 is not a failure of the process. It is a preview of the process working—finally, and reluctantly, telling the truth. The question the next cycle will answer is whether the industry can stomach a report that says nothing, or whether it would rather keep buying nine beautiful dimensions of fiction. Follow the data, not the hype, and be willing to leave the page blank.