ما الذي قد يسوء

Customer assets are pooled and reused, lent, posted as collateral, or traded, so the same units back more than one obligation at once.

الدليل: Read the custody and yield terms for language granting the venue the right to use, lend, or pledge assets. Ask whether balances are held in named or omnibus wallets and whether any regulator requires segregation for that entity. On-chain, look for regular…

One custodian, one signing arrangement, or one operations team stands between holders and their assets, so a single failure can be terminal.

الدليل: Establish who can sign, in what quorum, under what recovery procedure, and whether any independent party has tested the key ceremony and the disaster recovery plan. Check whether the custodian is a regulated trust company or similar, what its financial…

A venue holding customer assets fails, and the balance shown in the account becomes a claim in a bankruptcy rather than an asset the customer controls.

الدليل: Read the terms of service on title, segregation, and what happens in insolvency, since the language is usually explicit once found. Check whether the venue publishes proof of reserves, whether that exercise includes liabilities, and who performed it.…

Self-custody puts the holder in charge of a secret that cannot be reset, so losing it or destroying the only backup is permanent.

الدليل: On-chain dormancy metrics show how much supply has not moved in many years, part of which is generally understood to be permanently inaccessible. For an individual arrangement, the testable facts are whether a restore has actually been performed from the…

Attackers take assets by persuading holders to sign a transaction or reveal a secret, without breaking any cryptography or contract.

الدليل: Review outstanding token approvals with an allowance viewer, since standing approvals are the main mechanism and are visible on-chain. Check whether the wallet decodes calldata into a plain-language action and whether the project pins its front end to a…

A large share of stake is operated by a few providers or on shared infrastructure, so one mistake can cause correlated penalties or systematic censorship.

الدليل: Look at stake share by operator, by liquid staking protocol, and by client software, and at the share of blocks produced through the largest relays and builders. Check the cloud provider and geographic distribution disclosed by large operators, and whether a…

A token representing an asset held elsewhere is only as good as the entity or contract holding the underlying and honoring redemption.

الدليل: Identify who holds the underlying, whether the reserve addresses are published and verifiable on-chain, and who is permitted to redeem at par and on what terms. Compare the wrapper's historical price against the underlying, since past deviation is the…

Fee and revenue figures come from code that reads each protocol differently, so a number can change because an adapter changed rather than because activity did.

الدليل: Read the adapter source for the specific protocol on whichever dashboard you are quoting, and note the exact definition of the metric, since fees, revenue, and earnings are used inconsistently across providers. Compare two independent providers for the same…

Historical series are recomputed, backfilled, and corrected over time, so a chart today may not match the same chart pulled last month.

الدليل: Check whether the provider publishes a changelog, versions its methodology, or timestamps revisions, since most do not. Snapshot any series you rely on, store it, and re-pull it later to measure whether history moved. Step changes that align with a…

The same value or activity can be counted on more than one chain or assigned to the wrong one, inflating totals when figures from different sources are added.

الدليل: Check whether the provider deduplicates double counting and whether it publishes the rule it applies, and compare a protocol's reported total against the underlying assets it actually custodies. Where wrapped versions exist, check whether chain-level totals…

Circulating supply is often a number supplied by the project, computed under rules that differ between data providers and can change without notice.

الدليل: Reconstruct supply from the token contract itself, subtracting balances in vesting contracts, identified treasury addresses, and burn addresses, then compare that with the provider's published figure. Read the provider's methodology document and its revision…

An issuer states that assets back what it has issued, but the claim may be unverified, point-in-time, or cover only one side of the ledger.

الدليل: Check who signed the report, under what standard, as of what date, at what frequency, and whether liabilities are in scope, since these five facts separate an audit from a marketing document. Where wallet addresses are published, examine flows immediately…

An asset designed to track a reference value stops doing so because its backing, its redemption path, or its arbitrage loop fails under stress.

الدليل: Establish who may redeem at par, on what schedule, with what minimum size, and what the reserve is actually invested in, then read the attestation's date and scope. On-chain, look at the depth of the primary trading pair, the collateralization ratio where…

Most fee income comes from one application, one trading pair, or one temporary activity, so the income stream is far narrower than the totals suggest.

الدليل: Break fees down by application, by contract, and by trading pair rather than reading the chain-level or protocol-level total, and look at how concentrated gas consumption is across the top few contracts. Check whether the metric you are reading counts gross…

New units are created faster than demand to hold them grows, so each existing unit represents a smaller share of the same network.

الدليل: The emission schedule is in code and documentation and can be checked against realized issuance on-chain, and net issuance, burn rate, and the staking ratio are standard metrics. Compare issuance against fees actually paid by users to see how much of…

Deposits and trading depth that exist only because a token subsidy pays for them, and that leave promptly when the subsidy stops or moves.

الدليل: Compare rewards paid per unit of value locked against fees earned by that same capital, and look at what share of total value locked sits in incentivized pools versus uncompensated ones. Retention after an emissions reduction is the direct test and is visible…

An advertised yield is paid mostly in newly issued tokens rather than out of fees, so a holder can earn a rate while their network share shrinks.

الدليل: Decompose rewards into the issuance component and the fee component, which is disclosed for most proof-of-stake networks and computable for most protocols. Real yield metrics that net issuance out of the headline rate are published by several data providers,…

A token is used as collateral to borrow against itself or a sibling asset, so a price decline forces sales that push the price down further.

الدليل: Measure what share of a lending market's collateral is the protocol's own token or a token issued by an affiliated project, and examine treasury composition against any obligations denominated elsewhere. On-chain positions reveal recursive borrowing, since…

The payment that funds honest block production declines as issuance falls, and if fees do not replace it, the cost of attacking the chain falls with it.

الدليل: The security budget, meaning issuance plus fees paid to producers over a period, is computable from public data, as is the share of it contributed by fees rather than subsidy. For proof-of-work chains, compare the cost of renting hash power for an hour…

Large allocations to insiders and early investors become transferable on a published schedule, adding sellable supply the tradable float has never absorbed.

الدليل: Read the vesting contracts directly to obtain cliff dates, release curves, and beneficiary addresses, and compare circulating supply, total supply, and fully diluted valuation, which is total supply valued at the current price rather than any amount ever…

A small set of keys can pause, upgrade, mint, or move assets, so the system's safety depends on those keyholders and their operational security.

الدليل: Enumerate the privileged roles in the deployed contracts and resolve each to an address, then check whether that address is an externally owned account, a multisig, or a timelock, and what the multisig threshold and signer count are. Check whether signers are…

Decisions are made by a foundation, core developers, or private discussion, with token voting confirming outcomes rather than determining them.

الدليل: Read the foundation's own disclosures: treasury addresses and holdings, grant reports, employment of core developers, and whether it holds any protocol keys. Trace where proposals originate and how much changes between first draft and final vote, and check…

Token votes decide protocol parameters, but only a small share of tokens usually votes, so a modest holding can carry a proposal.

الدليل: Read turnout as a share of circulating supply for each historical proposal rather than for a single flagship vote, and read the quorum rule and how it is calculated. Check whether voting power is snapshotted before a proposal is announced, whether tokens in…

The contract that holds funds can be pointed at new code, so the audited behavior of today is not necessarily the behavior of tomorrow.

الدليل: Check whether the address is a proxy by reading the standard implementation and admin storage slots, then identify who holds the upgrade right and whether upgrades pass a timelock. Count how many times the implementation has changed and compare the currently…

Voting power is proportional to tokens held, so a few large holders can determine outcomes regardless of how many other participants disagree.

الدليل: Look at the distribution of voting power across the top delegates and holders, and compute how many addresses are needed to reach a majority of a typical vote, which is a governance analogue of a concentration coefficient. Check whether custodial addresses…

Digital asset markets trade without pause, so a move that equities would spread across sessions and halts can complete in minutes with nothing interrupting it.

الدليل: Compare depth and spread during weekend and overnight hours against weekday peaks on the same venue, and look at the largest observed short-interval ranges rather than at daily candles. Cross-venue price divergence during past stress windows is observable and…

Assets that behave differently in calm markets tend to move together in stress, so apparent variety within digital assets narrows exactly when it matters.

الدليل: Measure rolling correlations across regimes rather than reading a single long-run average, and look specifically at correlation during the largest historical drawdowns. Map shared infrastructure: overlapping market makers, shared lenders, shared collateral,…

Most trading, price discovery, and often custody for an asset sit at one or two venues, so a venue's problem immediately becomes the asset's problem.

الدليل: Look at volume share by venue after filtering, at which venues feed the relevant index or oracle, and at whether the asset trades meaningfully in more than one regulatory jurisdiction. On-chain balances at exchange-labeled addresses show how much supply is…

A small tradable share of supply sets the reference price for a much larger total, and whoever controls the remainder can shape that price.

الدليل: Examine holder concentration, excluding known exchange and contract addresses, and count how much supply sits in vesting contracts, treasury addresses, and market-maker wallets. Compare fully diluted valuation against market capitalization, and read the terms…

Leveraged positions are force-closed automatically, and the resulting market orders trigger further force-closures in a self-reinforcing sequence.

الدليل: Compare open interest against spot order-book depth, since the ratio indicates how much forced flow a market may have to absorb. Funding rates at persistent extremes indicate crowded positioning, and aggregate liquidation prints show what actually cleared.…

A large market capitalization can rest on a small amount of genuine order-book depth, so modest selling moves the price much further than the headline implies.

الدليل: Measure bid and ask depth within one and two percent of the mid price on the venues that actually matter, and estimate realized slippage for a defined order size rather than reading a volume number. Compare market capitalization against genuine daily volume,…

Reported trading volume can include trades where the same party stands on both sides, making an asset or a venue look more liquid than it is.

الدليل: Cross-check volume against order-book depth and against settlement observed on-chain, since real flow generally leaves traces in deposits, withdrawals, and transfers. Examine trade size distributions for unnatural regularity, spreads that are implausibly…

A venue can remove an asset for regulatory, compliance, or commercial reasons, cutting its liquidity and its fiat gateway in that market.

الدليل: Track listing status by venue and region over time, and read the venues' own delisting notices, which usually state a reason and a timetable. After a removal, look at the share of remaining filtered volume and at whether depth actually migrated or simply…

Action against one critical intermediary, such as an issuer, custodian, bridge operator, or staking service, can disable a function the asset depends on.

الدليل: Map the intermediaries standing between the protocol and an ordinary user, including the issuer, the custodian, the fiat rails, the oracle operator, the sequencer, and the front-end host, then note where each is incorporated and what license it holds. For…

Addresses, protocols, or privacy tools can be sanctioned or restricted, and assets that touched them may be frozen or refused by regulated intermediaries.

الدليل: Check whether the issuer has a freeze function, whether it has been used, and how often, since these actions are visible on-chain. Look at whether addresses associated with the asset appear on sanctions lists, how major venues describe their screening…

Whether a token is treated as a security, a commodity, or something else remains unresolved in several jurisdictions, and the answer changes who may list or hold it.

الدليل: Check whether the asset has been named in enforcement filings, registration statements, or approved regulated products, and how regulated venues and custodians in each jurisdiction actually treat it. Look at whether an identifiable issuing entity exists and…

Rules on what may back a payment stablecoin, who may issue one, and how redemption works can force changes to reserves, availability, or the product itself.

الدليل: Read the issuer's attestation, noting who signed it, under what standard, as of what date, and what instruments the reserves hold. Establish who may redeem at par, in what minimum size, and within what period, and identify the issuing entity's jurisdiction…

How staking rewards, forks, airdrops, wrapping, and lending are taxed varies by jurisdiction and is unsettled in places, creating liabilities that surprise holders.

الدليل: Read the specific published guidance for the relevant jurisdiction and note exactly which events it addresses and which it leaves open. Check whether venues and custodians issue tax statements and what basis method they apply, and whether the protocol…

A trading venue may operate without licenses that would apply to a comparable regulated market, so customer protections differ from what the interface implies.

الدليل: Read which licenses the venue actually names, in which jurisdiction, and for which activity, then check whether client assets are segregated by rule or only by promise in the terms. Look for an independent auditor, a published market-surveillance policy, and…

Assets locked on one chain to mint a representation on another are stolen, or the minting authority is subverted, leaving the wrapped tokens unbacked.

الدليل: Determine whether the bridge verifies the source chain with a light client and proofs or trusts an attestation committee, and if it is a committee, how many signers exist, what the threshold is, whether the signers are independent, and whether their keys are…

Most of the network runs a single software implementation, so one bug in that program becomes the network's bug rather than a contained failure.

الدليل: Client distribution dashboards report the share of nodes or stake by execution and consensus client, and the protocol's own thresholds give the reference points that matter, such as the one-third of stake that can delay finality and the two-thirds that can…

A defect in the consensus rules or in their implementation makes nodes disagree about valid history, halting the chain or splitting it into two.

الدليل: Look for a public incident history of halts, deep reorganizations, and emergency releases, and for whether the chain has a documented restart procedure. Client diversity data shows how many independent implementations validate the rules, and time-to-finality…

A hash function, signature scheme, or proving system that a network depends on proves weaker than assumed, undermining ownership, history, or validity.

الدليل: Identify which primitives and curves the chain uses, whether any proving system involved required a trusted setup and how many independent participants took part in the ceremony, and whether the circuits have been independently audited or formally verified.…

The transaction data needed to reconstruct or challenge a chain's state is not published, so users cannot prove what they own or exit on their own.

الدليل: Establish where data is posted, what the retention window is, and who is expected to archive it after that window closes. For committee-based designs, look at the number of members, the signing threshold, and whether members are independent entities. Where…

A protocol reads a price from an external feed, and someone moves that price cheaply in order to trigger borrowing, liquidations, or settlement in their favor.

الدليل: Read the oracle configuration: how many independent sources feed it, whether it is a spot read or a time-weighted average and over what window, what deviation and heartbeat thresholds trigger an update, and what the contract does when the feed goes stale.…

A sufficiently large error-corrected quantum computer would break the elliptic-curve signatures that authorize transactions, though no machine near that scale is known to exist.

الدليل: On-chain data shows how much supply sits at addresses whose public keys are already exposed through reuse or early output types, which is the directly measurable part of this exposure. Check whether the protocol has an upgrade path that allows new signature…

A rollup relies on one operator to order transactions, so if that operator stops or censors, users need a working escape hatch to the settlement layer.

الدليل: Check whether the sequencer is permissioned and who runs it, whether a forced-inclusion mechanism exists in the deployed contracts, what its delay window is, and whether anyone has demonstrably used it. Read who can upgrade the bridge and the proof system,…

A flaw in deployed contract code lets funds be moved, locked, or destroyed in ways the designers never intended.

الدليل: Check whether the deployed bytecode matches published verified source, when the implementation last changed, and how much value the contract has held without incident, since value held multiplied by time live is a cruder but harder-to-fake signal than an…

The data a full node must store and process grows over time, so fewer people can run one and verification concentrates in a smaller set of operators.

الدليل: Chain size, state size, and their growth rates are published, as are the hardware requirements in official documentation and the practical requirements for archive nodes. Count reachable full nodes and look at their geographic and hosting distribution, and…

A protocol upgrade or token migration goes wrong, splitting the network, stranding holders on an old contract, or breaking dependent applications.

الدليل: Read the activation mechanism and the share of nodes or stake signaling readiness before the fork block, and read client release notes, public testnet runs, and shadow-fork results to see how much rehearsal happened. For a token migration, check whether the…