We assume that a rising market rewards the most technically sound protocols. We assume that when capital floods into a sector, the projects that survive the next cycle are the ones with the strongest code, the most rigorous security audits, and the clearest value propositions. We assume that the market, over time, becomes a truth-telling mechanism โ that prices eventually reflect reality, that narratives eventually yield to fundamentals.
None of this is true. Not in 2021, not in 2024, and certainly not in the current cycle, where I have watched a freshly funded Layer 2 project with a $120 million valuation deploy a sequencer that cannot actually finalize batches under load โ and watched its token price double anyway. The market is not a truth-telling mechanism. It is a belief-telling mechanism. And in a bull market, belief outruns verification by a wide margin.
I have spent the past seven years inside this industry โ first as a product lead for a privacy-focused mobile payment startup in Berlin, then as an auditor of failed DeFi protocols during the 2022 collapse, and now as a decentralized protocol PM in Copenhagen. I have watched the same pattern repeat across cycles: euphoria masks technical debt, narratives outpace code maturity, and the projects that fail are rarely the ones that look broken โ they are the ones that look perfect on the surface while hiding structural flaws beneath.
This is why I have developed a nine-dimensional framework for protocol evaluation. It is not a checklist. It is a lens โ a way of seeing through the marketing layer to the structural reality beneath. In this article, I will walk through each dimension, drawing on my own audit experience and the protocols I have watched succeed and fail. The goal is not to provide a scoring system, but to give you a way of thinking that survives contact with a bull market.
Truth is not what is seen, but what is trusted. And trust, in this industry, is built on verification โ not on narrative momentum.
The Context: Why Frameworks Matter Now
Let me be precise about the problem. In the first quarter of this year, I reviewed the technical documentation of 14 protocols that had raised a combined $2.3 billion in the previous twelve months. Of those 14, only three had published complete threat models. Only two had undergone independent security audits that covered their full attack surface. And only one had a documented incident response plan that would actually work under pressure.
The other 13 were not necessarily bad projects. Some of them had genuinely innovative technology. But they were operating in a market where the incentive structure rewards speed over rigor, where the pressure to ship outweighs the pressure to verify, and where the consequences of failure are deferred to a future that no one wants to think about.
I have seen this movie before. In 2022, I retreated to a cabin in Jutland after watching several lending protocols I had publicly advocated for implode. I spent six months auditing 12 failed smart contracts, looking for the common thread. What I found was not a single technical flaw, but a pattern of structural neglect โ over-leveraged designs that ignored real-world utility for speculative yield, governance models that concentrated power in the hands of a few early investors, and risk frameworks that treated black swan events as theoretical rather than inevitable.
The protocols that failed were not the ones with the worst code. They were the ones with the most misaligned incentives. And the only way to see that misalignment was to look beyond the surface โ to examine the tokenomics, the governance structure, the team's actual track record, and the way the protocol would behave under stress.
This is what the nine-dimensional framework is designed to do. It forces you to look at a protocol the way an auditor would โ not the way a marketer would. It is not a substitute for judgment. It is a structure for judgment.
Dimension One: Technical Analysis
The first dimension is the one most people think they understand, but few actually apply rigorously. Technical analysis in blockchain is not about reading a whitepaper and nodding at the architecture diagram. It is about asking specific, uncomfortable questions: What is the actual consensus mechanism? How does the protocol handle state growth? What happens when the sequencer fails? Where are the single points of failure?
Based on my audit experience, the most common technical flaw I see in bull market projects is not a bug in the code โ it is an incomplete specification of failure modes. The protocol works beautifully under normal conditions. It breaks under stress. And because the stress test was never written, the breakage is discovered only when real value is at stake.
Consider the Layer 2 project I mentioned earlier. Its documentation described a sophisticated fraud proof system. Its code, however, had a critical flaw: the challenge period could be bypassed if the sequencer failed to publish a batch within a specific time window. This was not a subtle bug. It was a fundamental design flaw that would allow a malicious sequencer to finalize invalid state transitions. But because the project had raised $120 million and had a polished website, no one in the market was asking the question.
I asked. I was told the issue was "being addressed in a future upgrade." The token price doubled anyway.
This is the reality of technical analysis in a bull market: the market does not reward rigor. It rewards narrative. But the technical flaws do not disappear because the market ignores them. They accumulate. And when the cycle turns, they become the difference between a protocol that survives and a protocol that collapses.
The technical dimension is not about finding the perfect protocol. It is about finding the protocol whose flaws you can live with.
Dimension Two: Tokenomics
The second dimension is tokenomics โ the study of how a protocol's token is created, distributed, and used. This is the dimension where I have seen the most sophisticated investors make the most elementary mistakes.
The core question is not "What is the token price?" but "What is the token's role in the protocol's function?" A token that is essential to the protocol's operation โ that secures the network, that aligns incentives, that enables governance โ has a fundamentally different risk profile than a token that is merely a speculative vehicle.
In my 2022 audit of failed lending protocols, I found a consistent pattern: the tokens that collapsed were the ones that had no real utility beyond speculation. They were governance tokens in name, but the governance was so concentrated that the token holders had no actual power. They were staking tokens in theory, but the staking rewards were funded by inflation rather than by protocol revenue. They were "value capture" tokens in narrative, but the value was captured by the founding team, not the token holders.
The protocols that survived โ the ones that emerged from the 2022 collapse with their communities intact โ had a different structure. Their tokens had real utility. They were used to secure the network, to pay for services, to align the incentives of different stakeholders. The token was not a marketing device. It was a functional component of the protocol.
This is the test I apply now: if you removed the token from the protocol, would the protocol still function? If the answer is yes, the token is a speculative vehicle. If the answer is no, the token has real utility. And in a bull market, the speculative vehicles are the ones that pump the hardest โ and the ones that collapse the fastest when the cycle turns.
The tokenomics dimension is about understanding what the token actually does, not what the marketing says it does.
Dimension Three: Market Analysis
The third dimension is market analysis โ not price prediction, but structural market analysis. This means understanding the competitive landscape, the demand drivers, and the protocol's actual position within its market.
I have a specific perspective on this dimension, shaped by my work on the OP Stack versus ZK Stack debate. The technical community has spent enormous energy arguing about the relative merits of optimistic versus zero-knowledge rollups. But the real difference is not technical โ it is about who can convince more projects to deploy chains first. The market is not won by the best technology. It is won by the best distribution.
This is a hard truth for technical people to accept. We want to believe that the best technology wins. But the history of this industry โ and of technology in general โ suggests otherwise. Betamax was technically superior to VHS. It lost. The same pattern plays out in blockchain: the protocol with the best developer experience, the best documentation, the best ecosystem support, and the best marketing often wins, regardless of technical superiority.
This does not mean technical quality is irrelevant. It means technical quality is necessary but not sufficient. A protocol with excellent technology and poor distribution will lose to a protocol with adequate technology and excellent distribution. The market analysis dimension forces you to ask: who is going to win the distribution battle?
In the current cycle, I am watching this play out in the AI-crypto convergence space. There are dozens of protocols building decentralized compute networks, data marketplaces, and model verification systems. The technical quality varies widely. But the protocols that are gaining traction are not necessarily the ones with the best technology โ they are the ones with the best partnerships, the best developer onboarding, and the clearest narrative.
The market dimension is about understanding the competitive dynamics, not just the technology.
Dimension Four: Ecosystem Positioning
The fourth dimension is ecosystem positioning โ the protocol's place within the broader blockchain ecosystem. This includes its dependencies, its integrations, and its relationships with other protocols.
I have seen protocols fail because they were too dependent on a single ecosystem. I have seen protocols fail because they were too isolated. The healthiest protocols are the ones that have diversified their dependencies while maintaining a clear identity within their primary ecosystem.
Consider the cross-chain bridge problem. Bridges have been hacked for over $2.5 billion cumulatively, yet the industry still depends on them. This is a fundamental security paradox: we have built an ecosystem that relies on the most vulnerable component of the stack. The protocols that recognize this paradox โ that build redundancy into their bridge dependencies, that treat bridges as a risk to be managed rather than a solution to be trusted โ are the ones that will survive the next major bridge hack.
In my work on the decentralized identity protocol in 2025, I faced a similar challenge. The protocol needed to interact with multiple chains, which meant it needed bridges. But every bridge added a new attack surface. The solution was not to avoid bridges โ that would have made the protocol useless โ but to design the protocol so that a bridge failure would not compromise the core identity data. The identity data was stored on-chain, but the verification logic was designed to work even if the bridge was compromised.
This is the kind of thinking that the ecosystem positioning dimension demands. It is not enough to ask "What does this protocol do?" You must also ask "What does this protocol depend on, and what happens if those dependencies fail?"
The ecosystem dimension is about understanding the protocol's place in the web of dependencies that makes up the blockchain ecosystem.
Dimension Five: Regulatory Compliance
The fifth dimension is regulatory compliance. This is the dimension that most crypto-native participants dismiss, and the one that has the most power to reshape the industry.
I have spent the past two years working at the intersection of traditional finance and decentralized systems. In 2024, I joined a major Nordic fintech firm to design a custody solution for institutional clients that maintained non-custodial principles. I conducted 20 deep-dive interviews with CTOs, translating cryptographic guarantees into risk management frameworks. What I learned was that institutions do not care about decentralization as a value โ they care about decentralization as a risk mitigation strategy.
The regulatory landscape is shifting rapidly. The Bitcoin ETF approvals in 2024 marked a turning point: the traditional financial system began to take crypto seriously as an asset class. But with that seriousness comes scrutiny. The question is no longer "Will regulators act?" but "How will regulators act, and which protocols will be caught in the crossfire?"
The Howey test remains the dominant framework for determining whether a token is a security. But the application of the Howey test to decentralized protocols is deeply uncertain. Some protocols have structured their tokens to minimize security risk. Others have not. And in a bull market, the protocols that have not are the ones that are raising the most money โ because the regulatory risk is priced at zero.
This is a mistake. Regulatory risk is not zero. It is deferred. And when it materializes โ when the SEC or the European regulator takes action against a major protocol โ the impact will not be limited to that protocol. It will ripple through the entire ecosystem.
In my work organizing the Copenhagen Consensus in 2026, I brought together regulators, developers, and civil society to draft a voluntary code of conduct for AI-crypto integration. The breakthrough came when we stopped talking about compliance as a constraint and started talking about "compliance as code" โ embedding regulatory requirements into the protocol's design rather than treating them as external impositions.
The regulatory dimension is about understanding the legal landscape and designing protocols that can survive contact with regulators.
Dimension Six: Team and Governance
The sixth dimension is team and governance. This is the dimension where I have seen the most dramatic failures โ and the most dramatic successes.
The team question is not "Are the founders smart?" It is "Are the founders aligned with the protocol's long-term health?" I have seen brilliant founders build protocols that failed because their incentives were misaligned with the protocol's users. I have seen mediocre founders build successful protocols because they understood the importance of alignment.
The governance question is even more important. A protocol's governance model determines who makes decisions, how those decisions are made, and who bears the consequences. In my audit of failed DeFi protocols, I found that the most common governance failure was not malicious โ it was apathetic. The governance token holders did not participate. The decisions were made by a small group of early investors who had no incentive to prioritize the protocol's long-term health.
The protocols that survived had governance models that actively encouraged participation. They had mechanisms for delegating voting power to experts. They had transparent decision-making processes. They had accountability structures that made it possible to remove bad actors.
In my work on the AI-identity protocol, I implemented a "human-in-the-loop" verification process that required 15% of reputation updates to be manually reviewed by diverse community members. This was not the most efficient design. It was slower and more expensive than a fully automated system. But it ensured that the protocol's governance reflected the values of its community, not just the preferences of its technical elite.
The project launched with 10,000 active users. It proved that AI could enhance, not replace, human judgment in decentralized systems. And it demonstrated that governance is not a technical detail โ it is the protocol's soul.
The team and governance dimension is about understanding who holds power and how they are held accountable.
Dimension Seven: Risk Assessment
The seventh dimension is risk assessment. This is the dimension that most people skip because it is uncomfortable. But it is the dimension that determines whether a protocol survives.
Risk assessment in blockchain is not about identifying risks โ that is easy. It is about quantifying risks and understanding their correlations. The 2022 collapse was not caused by a single risk. It was caused by the correlation of multiple risks: market risk, liquidity risk, smart contract risk, and governance risk all materialized simultaneously.
I have developed a risk matrix for protocol evaluation that covers six categories: technical risk, market risk, operational risk, regulatory risk, competitive risk, and narrative risk. Each category is scored on a scale of one to five, and the scores are combined into an overall risk profile.
The key insight is that the risk profile is not static. It changes with market conditions. A protocol that is low-risk in a bear market can become high-risk in a bull market โ because the bull market attracts more capital, which attracts more attackers, which increases the consequences of any failure.
In the current cycle, I am particularly concerned about the risk correlation between AI and crypto. The AI-crypto convergence is exciting, but it introduces new risk vectors: algorithmic bias, model poisoning, data privacy violations. These risks are not well understood, and they are not well managed. The protocols that are building at this intersection are moving fast, but they are not moving carefully.
The risk dimension is about understanding what can go wrong and how the protocol will respond when it does.
Dimension Eight: Narrative and Expectations
The eighth dimension is narrative and expectations. This is the dimension that most technical people dismiss, and the one that has the most power over token prices.
A protocol's narrative is not a marketing device. It is a coordination mechanism. It tells the community what the protocol is trying to achieve, why it matters, and what success looks like. A strong narrative attracts developers, users, and investors. A weak narrative repels them.
But narratives have a lifecycle. They are born, they grow, they peak, and they decline. The protocols that succeed are the ones that manage their narrative through the full lifecycle โ that know when to lean into the narrative and when to pivot to a new one.
In the current cycle, I am watching the narrative around "decentralized AI" evolve. Six months ago, the narrative was about building decentralized compute networks to compete with the centralized AI giants. Today, the narrative is shifting toward "verifiable AI" โ using cryptographic techniques to prove that AI models are behaving as intended. This is a more sophisticated narrative, and it is attracting a different kind of investor.
The protocols that recognize this narrative shift and position themselves accordingly will benefit. The protocols that are still telling the old story will be left behind.
But there is a danger in narrative analysis: the temptation to believe that the narrative is the reality. It is not. The narrative is a map, not the territory. The protocol's actual capabilities โ its technology, its tokenomics, its governance โ are the territory. And in a bull market, the map is often more attractive than the territory.
The narrative dimension is about understanding the story the protocol is telling and how that story will evolve.
Dimension Nine: Industry Chain Transmission
The ninth dimension is industry chain transmission โ the protocol's impact on the broader blockchain ecosystem and the traditional financial system.
This is the dimension that I find most fascinating, because it is the one that connects the crypto world to the real world. A protocol does not exist in isolation. It affects miners, exchanges, DeFi protocols, NFT platforms, and traditional financial institutions. Understanding these transmission channels is essential for evaluating a protocol's long-term impact.
Consider the impact of the Bitcoin ETF approvals. The approval did not just affect Bitcoin's price. It affected the entire ecosystem: it legitimized crypto as an asset class, it attracted institutional capital, it created new demand for custody solutions, and it put pressure on regulators to clarify the legal status of other tokens.
The protocols that understood this transmission โ that positioned themselves to benefit from the institutional influx โ were the ones that thrived. The protocols that did not โ that continued to treat institutions as the enemy โ were left behind.
In my work on the custody solution for the Nordic fintech firm, I saw this transmission in action. The institutional clients did not want to hear about decentralization as a value. They wanted to hear about decentralization as a risk mitigation strategy. They wanted to know how the protocol would protect their assets, how it would comply with regulations, and how it would behave under stress.
I translated the cryptographic guarantees into risk management frameworks. I showed them how the protocol's non-custodial design reduced counterparty risk. I demonstrated how the protocol's transparency enabled better auditing. And I secured a pilot contract worth โฌ2 million.
The lesson was clear: values must be packaged in language institutions understand. The transmission dimension is about understanding how the protocol's value proposition translates across different audiences.
The industry chain dimension is about understanding the protocol's impact on the broader ecosystem and its ability to communicate its value to different stakeholders.
The Contrarian Angle: What the Framework Misses
I have spent the past several thousand words building a case for systematic evaluation. Now let me tell you what the framework misses.
The nine-dimensional framework is a tool for analysis. It is not a substitute for judgment. And the most important factor in protocol success โ the one that no framework can capture โ is the human element.
I have seen protocols with excellent technology, sound tokenomics, strong teams, and clear narratives fail because the founders lost faith. I have seen protocols with mediocre technology succeed because the community believed in them. The human element โ the passion, the resilience, the willingness to keep going when everything seems to be falling apart โ is the variable that no framework can quantify.
There is also a danger in over-reliance on frameworks. The framework can become a crutch. It can give you false confidence. It can make you believe that you have done your due diligence when you have only scratched the surface.
The truth is that no framework can fully capture the complexity of a protocol. The best you can do is to use the framework as a starting point โ as a way of organizing your thinking, of asking the right questions, of avoiding the most obvious mistakes. But you must always maintain a sense of humility. You must always be willing to admit that you do not know what you do not know.
Truth is not what is seen, but what is trusted. And trust is built not on frameworks, but on relationships โ on the willingness to be vulnerable, to admit uncertainty, and to learn from failure.
The Takeaway: Toward a More Honest Industry
I have been in this industry for seven years. I have watched it go through boom and bust, euphoria and despair. I have seen brilliant ideas die and mediocre ideas thrive. I have made my own mistakes โ I advocated for protocols that collapsed, I believed in narratives that proved false, I trusted people who did not deserve my trust.
But I have also seen the industry grow. I have seen the technology mature. I have seen the regulatory landscape evolve. And I have seen the emergence of a new generation of builders who are more thoughtful, more rigorous, and more committed to the values of decentralization than the generation that came before.
The nine-dimensional framework is my contribution to this evolution. It is not perfect. It is not complete. But it is a starting point โ a way of thinking that can help you see through the marketing layer to the structural reality beneath.
In a bull market, the temptation is to move fast, to chase the narrative, to ride the wave. But the protocols that survive โ the ones that emerge from the next cycle with their communities intact โ are the ones that took the time to build on solid foundations. They are the ones that asked the hard questions, that confronted the uncomfortable truths, that designed for failure rather than assuming success.
We are coding the next constitution. The protocols we build today will shape the digital infrastructure of tomorrow. They will determine who has access to financial services, who controls their data, who has the power to shape the future of the internet. This is not a game. It is a responsibility.
The market may not reward rigor in the short term. But the market is not the final judge. History is. And history will remember the protocols that built on solid foundations โ and the ones that built on sand.
I am not asking you to be perfect. I am asking you to be honest. I am asking you to look at the protocols you invest in, the protocols you build, the protocols you advocate for, with clear eyes. I am asking you to ask the hard questions, to confront the uncomfortable truths, and to build for the long term.
Because in the end, the only thing that matters is trust. And trust is not built on narratives. It is built on verification. It is built on transparency. It is built on the willingness to be held accountable.
That is the future I am working toward. That is the future I hope you will join me in building.