Build a Token Dossier and Check Liquidity

A token dossier is a short, organised account of what you know, how you know it and what remains uncertain. It is more useful than a collection of favourable links. We will assemble identity, rights, supply, control and liquidity evidence, then practise writing a conclusion that can include a reason to stop.

Education only. Crypto assets can lose substantial value or become worthless. No lesson requires buying an asset, depositing money or sharing real passwords, private keys or recovery words.

A research file begins with evidence

Why check a token before you buy

Before buying a used car in Johannesburg, a careful buyer checks the logbook, asks a mechanic to look underneath and walks away if the seller insists on cash today. None of those checks proves the car is perfect. They do catch the most common tricks, and they cost far less than a bad car.

Tokens deserve the same habit, because the tricks are common and the losses are often permanent. Chainalysis, a blockchain-analysis firm, estimated that more than US$2.8 billion was taken through rug pulls in 2021, making them 37% of all crypto-scam revenue that year, up from 1% in 2020. It explained why: creating a token and listing it on a decentralised exchange is cheap and needs no code audit.

In the token purpose lesson in Level 5 you learned what tokens are for, and in the supply and allocation lessons in Level 5 how to read their supply. This lesson turns that knowledge into a set of checks. Where the car analogy stops working is recourse: a car dealer usually has an address and a licence, but an anonymous token team may have neither, and a confirmed blockchain transfer generally cannot be reversed. So the first checks are about the people behind the token.

Look for red flags in the people and the promises

Imagine a stranger in Istanbul offering to double your ₺10,000 (an invented amount) within a month. You would ask who they are, what their track record is and how they can promise such a result. Those three questions work for tokens too.

Anonymous teams with no track record. Some honest projects have anonymous founders; Bitcoin's creator used a pseudonym. But anonymity removes accountability. If nobody can be identified, there is nobody to hold responsible if funds vanish. The risk is highest when an anonymous team also controls the treasury, the contract and a large share of the tokens. Check whether team claims can be verified: past projects, public code and consistent identities over years.

Promised returns. The US Federal Trade Commission (FTC) warns that scammers promise you will make money, often big amounts quickly. No legitimate investment can promise that. A token whose website talks mainly about future price, daily rewards or "x100 potential" is selling a hope, not a product.

Pressure and secrecy. Countdown timers, "last chance" messages and requests to keep the deal quiet are designed to stop you thinking. The FTC also lists vague explanations, unverified testimonials and unsolicited contact as warning signs.

People and promises are only the outside of the box. Next, look inside, at the contract.

Read a whitepaper critically

A whitepaper is like a business plan handed out by someone asking you for money in Mexico City. A good one explains a real problem, a workable solution and how money will be spent. A bad one is full of grand words and short on checkable facts. Bitcoin's nine-page whitepaper from 2008 is a reminder that a strong idea can be explained plainly.

Read it with a pencil. For every big claim, ask what evidence would show it is true, and whether you can find that evidence yourself. The table gives common claims and the checks that match them.

Watch for copied text, vague technical language that never explains how anything works, a roadmap with dates that keep slipping, and token allocations that differ from what the contract shows. Then bring everything together in one place, so that your judgement is written down rather than left to mood.

Team disclosures can help identify accountability, but a public biography is not proof of competence or honesty. A source being official does not make every promotional interpretation correct. The dossier should remain understandable to a reader who has not watched the promotional videos.

Facts estimates claims and forecasts

A fact might be that a contract reports a specific total supply at a timestamp. An observation might be a visible order-book depth. An estimate might classify addresses into entities. An interpretation might conclude that concentration increases a governance risk. A prediction concerns a future outcome. These categories need different levels of certainty.

Use sentences that reveal the distinction: the published terms state, the sampled book shows, the provider estimates, or our interpretation is. Identify conflicts of interest and alternative explanations. A sponsored review can point you toward a question but should not become the only proof. Repetition across websites may simply repeat one original claim. Trace important statements to their origin and record disagreements rather than averaging incompatible definitions.

If a famous footballer advertises a sports drink, you probably assume they were paid. The same logic applies to tokens, but the stakes are much higher.

On 3 October 2022, the US SEC charged Kim Kardashian for promoting EMAX tokens, offered by EthereumMax, on Instagram without disclosing that she had been paid US$250,000 for the post. She agreed to pay US$1.26 million to settle the charges, without admitting or denying the findings. The SEC stressed that anyone promoting a crypto asset security must disclose the nature, source and amount of payment received.

The FTC adds a separate warning: celebrities are not contacting you through social media, and an account that seems to be a famous person offering a crypto deal is a scammer. Impersonation was covered in Level 0; here the point is that even genuine promotions are often paid advertising, not independent advice.

Paid promotion manufactures attention. Wash trading manufactures activity.

See who holds the tokens and where the liquidity sits

Imagine a small town market in Brazil where one trader owns most of the beans. That trader can set the price, and if they decide to sell everything at once, the price collapses for everyone else. Token markets work the same way.

Holder concentration means a small number of addresses own a large share of the supply. Most explorers have a "holders" tab listing the top addresses. Read it with care. Some top addresses belong to exchanges holding tokens for many customers, to locked vesting contracts or to the project treasury. Others may be one person spread across many wallets. Ask: who are the top ten holders, and could any of them sell enough to crash the price?

Liquidity is how easily you can sell without moving the price. Many new tokens trade mainly in a liquidity pool on a decentralised exchange: a contract holding two tokens that lets people swap between them. You will study how pools work in Level 6. For now, what matters is how much is in the pool, who supplied it and whether it is locked. Binance Academy lists unlocked liquidity as a red flag, because whoever supplied it can withdraw it.

When the people supplying liquidity also hold most of the tokens, the stage is set for the most famous token scam of all.

Understand rug pulls hard and soft

The name comes from the image of someone pulling a rug from under your feet. One moment the market looks solid; the next, it is gone.

Coinbase Learn distinguishes hard rug pulls, which are sudden and leave holders losing almost everything within a short time, from soft rug pulls, where the team keeps up an appearance of activity while quietly winding down and selling. Definitions vary between sources: some use "hard" for exits built into malicious code and "soft" for teams that dump their holdings without code tricks. Whatever the label, the mechanisms are similar.

The most common is liquidity removal. The creators launch a token, pair it with ether or a stablecoin in a pool, promote it until buyers pour in, then withdraw the pool's valuable side. The token is left with nothing to swap against. Chainalysis described AnubisDAO, launched on 28 October 2021, which raised nearly US$60 million in about 20 hours before the liquidity was withdrawn. Other routes include minting huge numbers of new tokens and selling them, or upgrading the contract to change the rules.

Chainalysis also counted the 2021 collapse of Thodex, a centralised exchange in Türkiye whose chief executive disappeared after halting withdrawals, as a rug pull. It accounted for about 90% of that year's rug-pull losses. Rug pulls are not only a decentralised-exchange problem.

Some traps do not need anyone to run away. The contract itself stops you leaving.

Recognise honeypots

A lobster pot lets the lobster climb in, but the shape of the trap makes it almost impossible to climb out. A honeypot token works the same way.

Binance Academy lists blocking users from selling among the ways a malicious contract can trap buyers. The chart of a honeypot often looks wonderful, because every trade is a buy and the price only rises. That is exactly what makes it convincing. The creator, who is exempt from the restriction, can sell at any time.

Honeypots and rug pulls are often launched alongside heavy promotion. That promotion sometimes takes the shape of a coordinated pump.

See how pump and dump schemes work

In a crowded market in Delhi, a few traders loudly praise one stall's mangoes, draw a crowd and sell their own stock to the crowd at a high price, then disappear. The crowd is left holding expensive mangoes. Crypto pump-and-dumps follow that script.

Chainalysis studied about 2.06 million tokens launched in 2024 and found that 3.59%, more than 74,000 tokens, showed patterns matching pump-and-dump schemes. In around 94% of the suspected cases, the liquidity pool was later drained by the same address that created it. Chainalysis is careful to say its method tracks patterns of behaviour, not intent, so a pattern alone does not prove manipulation.

Memecoins are especially exposed, because their price rests almost entirely on attention. A new memecoin can be launched, promoted through chat groups and social media, pumped and dumped within hours. You will study the emotions that make this work, such as fear of missing out, in Level 9.

These schemes can also use the celebrity promotion discussed in Step 2. A familiar face is not evidence that liquidity or holder incentives are sound.

Recognise wash trading and fake activity

Imagine a café in Hamburg where the owner pays friends to queue outside all day so passers-by think the coffee must be excellent. The queue is real people, but the demand is fake. Wash trading is the crypto version.

Chainalysis estimated that suspected wash trading on Ethereum, BNB Smart Chain and Base in 2024 may have reached up to US$2.57 billion of decentralised-exchange volume. In October 2024, US prosecutors announced charges against 18 people and companies after Operation Token Mirrors, in which the FBI created its own token, NexFundAI, to catch firms offering fake trading services. More than US$25 million in crypto was seized and bots behind wash trades in around 60 tokens were switched off.

For you, the lesson is that high volume on a data page, as in the supply and allocation lessons in Level 5, does not prove real interest. Compare volume with holder numbers, liquidity and the spread of trading venues. You will analyse on-chain metrics and their limits in Level 7. Bring these observations back to the whitepaper claims examined in Step 1. The dossier should connect promises with observable activity rather than treating each check in isolation.

For a pool, examine reserves, route, fee and expected impact under the actual version. Compare activity across a reasonable sample of times rather than relying on one calm screenshot. A simplified full sale receives USD 1,400 before fees, not USD 2,000. The book can change, so this is an illustration rather than a prediction.

Read audit claims within scope

An audit or security review identifies a specific code version, scope, method and set of findings. Read unresolved issues and later changes. A report for an earlier contract version cannot automatically certify an upgrade. A report focused on code does not establish safe administrators, sound token economics, honest reserves or legal enforceability.

Also inspect bug-bounty scope, incident history and response procedures where available. Absence of a public incident is not proof that all vulnerabilities are absent. Published code improves inspectability, but most beginners cannot independently verify every property. State where you rely on specialist review and what it does not cover. The purpose of the dossier is honest reasoning, not a checklist that automatically produces a safe label.

Write a conclusion with clear stop conditions

A useful conclusion identifies the researched product, important evidence, key dependencies, unresolved questions and the next permissible research step. It can say that evidence is insufficient or that an activity is unsuitable for the stated purpose. Avoid replacing uncertainty with a price target. Research quality is judged by the reasoning and documentation, not by whether the price later moves favourably.

Finish with a version date and conditions that would require revision, such as a contract upgrade, changed redemption terms or a major supply release. Use fictional quantities and no real account secrets. The next level applies the same evidence discipline to DeFi protocols, where several individually familiar assets and mechanisms can combine into a more complex risk path.

A pilot in Melbourne runs through a checklist before every flight, however experienced they are. The checklist does not fly the plane, but it stops important steps being skipped under pressure. Your token checklist does the same.

Use the template below for any token you consider. Record what you checked, the evidence and the date. A single red flag may be enough to walk away; several together almost always are. This template is the seed of the token research deliverable in the Level 10 graduation project, so keep your filled-in copies.

Now practise using these checks.

Try the following questions aloud or on paper before opening the worked answers. Compare your reasoning as well as your final answer.

References and further reading