Crypto Due Diligence: Team, Investors and Red Flags

Lesson 4 of 8 · Intermediate

Anonymous or doxxed team: a trade-off in risk

Anonymity has a long history in crypto; Bitcoin's creator never revealed an identity either. So an anonymous team is not, by itself, proof of fraud. But you should know what you give up: accountability. If a project with an anonymous team fails or user funds vanish, there is almost no legal path to pursue anyone.

The reverse is also true: a known identity is no guarantee of honesty. The Cryptoland and BRG case in 2021, a large Iranian crypto scheme, is a cautionary example; according to reports, more than 51,000 people filed complaints, and the collapse followed the arrest of the founder. Having a face does not replace research.

To assess a team, look at:

• Traceable track record: what happened to the members' previous projects? Is their identity consistent across several independent platforms and over several years? Freshly created profiles and fake photos are cheap today.
• Development activity: is the code public and updated regularly, or has the repository been silent for months?
• Operational security: how many people hold the admin keys, and how are they protected?

Team security is part of your risk

The largest recent thefts have come more from human error and key compromise than from code bugs. Two 2026 examples:

• Drift (April 2026): according to Chainalysis, around $285 million left in about 12 minutes. Beforehand, the attackers had spent roughly six months on social engineering and tricked security council members into pre-signing transactions that were later used against the protocol.
• Kelp DAO (April 2026): according to CoinDesk and Chainalysis, about $292 million was lost. A forged cross-chain message passed through a single-verifier setup, and a developer's computer had also been compromised.

The lesson for due diligence is to ask: how many signers control the contract-upgrade and treasury keys? Is there a single point of failure? Does the team talk openly about its security practices and audits? An honest but careless team can still lose your money.

Venture investors: a big name is not a guarantee

The presence of venture capital (VC) funds means at least one professional institution examined the project. But keep three things in mind:

1. Their cost basis differs from yours. Compare private-round prices, where published, with today's FDV. If the current valuation is dozens of times the last private round, they are in profit even after a steep fall.
2. Their business model is a portfolio. A fund expects most investments to fail and a few successes to compensate. You usually do not hold a portfolio like that.
3. Verify the logo. A famous fund's logo on the project's site is not enough. Check the portfolio list on the fund's own website or official channel.

Hypothetical example: a fund bought tokens in a private round at a $50 million fully diluted valuation, and today's market FDV is $1 billion. On paper that fund is up twenty times. Even if the price fell 80%, it would still be up four times. Now picture yourself entering at that same $1 billion FDV: the same 80% fall means losing most of your capital. Two people hold the same token with completely different risk.

Paid influencer campaigns and fake partnerships

Many projects pay influencers, or KOLs (key opinion leaders), in cash or tokens to post about them. This is not inherently illegal, but it is often undisclosed, and sometimes KOL tokens have short vesting so they can sell early. Signs of a coordinated campaign:

• Dozens of accounts post about one token in a short window with nearly identical wording.
• An emphasis on urgency: "only a few hours left," "before the listing."
• No substantive analysis of the product, only price and excitement.

Fake or exaggerated partnerships are also common. "Partnership with a major company" sometimes just means the project used one of that company's public services or received a small grant. Claims of a security audit or an exchange listing must be confirmed on the other party's official channel, not from the project's screenshot.

Market-maker deals: what you usually do not see

A market maker is a firm that provides liquidity for a token by placing buy and sell orders. Every new token needs this, but the structure of the contract matters. In one common pattern, the project lends the market maker a quantity of tokens, and the market maker has the right to buy them later at a set price. If the incentives are poorly designed, selling the borrowed tokens can create supply pressure that appears in no unlock table.

These agreements are usually not public. What you can ask or search for: has the project named its market makers and the volume of tokens lent? Are those tokens in the allocation table? A complete lack of disclosure at least means you do not know part of the real supply.

📊 See real gold futures volume behind these ideas: free order flow course · today's gold volume map

Frequently asked questions

Is a project with an anonymous team always a scam?

No. But you lose accountability, so you should examine the other evidence, such as code, contract, token distribution and a traceable track record, more strictly.

How do I know whether a fund really invested in a project?

Check the portfolio list on the fund's own website or official channel instead of relying on a logo or screenshot on the project's site.

Are market makers good or bad?

Liquidity is needed for every token, so having a market maker is not negative in itself. The problem is undisclosed agreements that create hidden supply pressure.

Education only, not a recommendation to buy or sell; we never give signals. Price examples are illustrative. Test any method on a demo account first, with strict risk management.