The N/A Files: Why the Most Dangerous Words in Crypto Are the Ones Never Written

Over the past seven days, I tracked nine protocol analyses circulating through my Frankfurt signal groups and private channels. Only two mentioned admin keys. None disclosed the treasury runway. One — a sixteen-page document produced by a subscription research service — contained the phrase “N/A” forty-one times. Not Applicable. No data on the team’s background. No data on vesting schedules. No data on who controls the upgrade path. In those same seven days, the protocol I was watching lost forty percent of its liquidity providers; the reports did not mention that either. The document was not wrong, and that is precisely the problem. In a bear market, an empty analysis is not a neutral act. It is a risk vector dressed as rigor, and we have grown so used to it that we mistake the template for the truth. This is not a new observation, but the market has made it urgent. When liquidity was abundant, a lazy report was a minor sin. The rising tide lifted every narrative, and nobody was punished for reading carelessly. Now the tide has retreated, and the bodies are visible. But the reports that should have warned us never showed the bodies. They showed us frameworks. I want to show you what I look for when a protocol document lands on my desk, because I believe information gain is a moral obligation, not a style preference. Based on my years auditing multi-sig contracts in Frankfurt and designing governance systems during DeFi Summer, I have learned to read negative space. The blanks tell more than the conclusions. In the sections that follow, I walk through six fields that decide whether a protocol survives the next twelve months, why the industry leaves them empty, and what we should do when we find them empty. Field One: The Admin Keys Every DAO is the shadow of its multisig. I have written about this before, but in the calm of a bear market it deserves repetition. “Code is law” fails in governance because smart contract upgrade rights always sit with a handful of known signers. When a research report says N/A under “governance,” it is not admitting ignorance; it is hiding the most important question you can ask. Where do the upgrade rights live? Who are the signers? Has anyone verified that the threshold still requires majority consent? During my Parity wallet audit, I learned that a single self-destruct vulnerability could undo years of work. The code was the least of it; the humans who could push the button were the real attack surface. A protocol that will not name its admins cannot be honest about its security. If the report leaves this blank, treat the blank as an answer. The answer is: we did not want you to know. Field Two: The Treasury Runway I have met founders who talk about their protocol as if they were building infrastructure, while their runway math is a three-month panic. The flow of tokens out of the treasury is the blood pressure of a protocol, and it is almost never reported. In Aave governance design, I spent nights negotiating the tension between efficiency and inclusivity, but the real discipline was about reserves. How many tokens does the treasury hold? How much is liquid? How much is locked in illiquid positions? What happens if the governance token drops another fifty percent? A report that cannot answer these questions is not a report; it is a brochure. When I see N/A under “treasury,” I assume the runway is shorter than the founders’ vesting period, because the people who have healthy treasuries are usually eager to tell you. Field Three: The Unlock Schedule An unlock schedule is not a footnote; it is the plot of the entire story. The difference between a token that will be diluted by thirty percent next month and one that will be diluted by thirty percent next year is the difference between night and day. But research reports treat this as an afterthought, often because the data is complex and requires digging through explorer transactions. I respect the complexity; I do not respect the omission. If a report cannot give you the cliff, the linear vesting period, and the allocation percentages for the team, investors, and ecosystem, then it is not protecting you from the largest physical risk in crypto: the moment when early buyers decide to sell at the same time. The unlock schedule is not a detail. It is the schedule of when the story’s villains appear. Field Four: The Revenue-to-Emissions Ratio In the bull market, we allowed protocols to pay for growth with printed tokens and called it incentive alignment. In the bear market, the math becomes visible, and it is not forgiving. A rough rule I use: if real revenue — actual fees, actual interest, actual protocol income — is less than thirty percent of what the protocol pays out in token emissions, then it is not a business; it is an expense report with a login page. I am not saying such protocols cannot survive; I am saying they depend on a steady stream of new believers, and belief is the one thing that is currently in short supply. When an analysis says N/A under “economic sustainability,” the protocol is likely draining its own reserves to keep the APR green. And the green is a marketing color, not a financial one. The costume changes with each cycle — “yield” one year, “points” the next — but the math wears the same skeleton. Field Five: The Infrastructure Centralization I have spent months researching zero-knowledge proofs, and I remain in love with their mathematical discipline. But “zero-knowledge” does not mean “zero-trust” in every corner of the stack. A zk-rollup still depends on a sequencer, and a sequencer can be a single entity hiding behind a cloud provider. The privacy is real; the decentralization is conditional. A report that lists “Layer 2” under “decentralized infrastructure” without specifying who runs the sequencer is writing poetry, not analysis. The cost of this omission is not theoretical. It is the difference between a bridge that pauses for a weekend and a bridge that takes decades to unwind. The N/A here is a promise of a future incident. When I read a report that calls a protocol “secure” but cannot tell me who holds the sequencer keys, I know the report has chosen branding over investigation. Field Six: The Audit Provenance I have a confession. In 2017, during the ICO mania, I joined a small security firm in Frankfurt and audited the Parity multi-sig contract. I found a vulnerability in the self-destruct logic — a bug that, if exploited, could have drained millions. I hesitated for three days to report it because reporting it could delay the launch and disappoint people who believed in the project. I submitted it privately, and the team fixed it before deployment. That experience taught me that the audit report is not the deliverable; the conversation about what to do with the findings is the deliverable. A five-line summary with a clean verdict tells you nothing. What matters is: how many findings were critical? How many were fixed? How many remain open? Who is responsible for the ones that remain? If a research report stops at “audited by X,” it is describing wallpaper. The N/A under “residual risk” is where the fire lives. Why the Voids Are Filled with Style I have to ask why the industry tolerates this. The answer, I think, is that empty reports are a feature of the market structure, not a flaw in individual writers. In a bull market, the report’s job is to justify the price, and the price is rising, so the fastest path to circulation is confidence. Accuracy is expensive; confidence is cheap. The researcher who writes “I don’t know” today is punished by the algorithm and by the group chat. The researcher who writes “solid fundamentals” gets retweeted. Over time, the incentives select for the warm, empty document. The frame becomes more important than the content, and we end up with a world where forty-one N/A fields are considered a minor inconvenience. The more complex the protocol, the more tempting the blank. Uniswap V4’s hooks turned the DEX into programmable Lego, but many reports will summarize that with a single phrase — “programmable liquidity” — while hiding the complexity that will scare off ninety percent of developers. The blank is easier than the description. The same dynamic is visible in regulation. MiCA gives Europe the appearance of clarity, but the compliance costs of stablecoin reserve requirements and CASP obligations will quietly kill small projects. The reports that celebrate “regulatory clarity” rarely mention the teams that will not survive it. They leave that field empty, too. We applaud the frame and ignore the bodies. But I also have to ask the harder question: what did the empty reports do to us during the FTX collapse? This is where the stakes become personal. I was in Frankfurt when the news broke. I remember the documents about FTX. They were full, not empty. They had charts, balance-sheet approximations, and growth curves. They were convincing because they were complete. And yet the completion was the lie. The real data — actual user funds, actual liquidity, actual decision-makers — was in the blanks that the documents had decorated. I spent months after the collapse researching ZK-rollups because I needed mathematical certainty, something that could not be painted over with a competent slide deck. But the ZK-rollup cannot protect you from the report that never asks about the withdrawal controller. The proof is sound; the question must still be asked. The Contrarian View: N/A as Honesty Here is the uncomfortable thought I keep returning to. The empty report might be morally superior to the fabricated one. The N/A-filled analysis is at least a confession of ignorance, however unwitting. The filled-in lie is a deliberate construction. I have started to believe that we should rehabilitate the N/A — not as a mark of failure, but as a legitimate answer. A protocol that says “we will not disclose the admin keys” is honest about its secrecy. A researcher who writes “we could not verify the state commitments” is being a scientist. The problem is not the blank; the problem is the blank hidden inside a frame that pretends to be complete. If we normalized the honest blank, the first line of every analysis would be: here is what we do not know. That is information. That is the real information gain. This is also why I resist “more data” as the universal solution. Data is not trust. Data is the ingredient that belief consumes, but only when it is honest. A report with a thousand fake metrics is poorer than a report with three true ones. Trust is the new token — and like every token, it is subject to protocol risk. It must be modeled, audited, and stress-tested. The N/A field is the smart contract of trust, and it is currently unaudited. In the bear market, the protocols that survive will not be the ones with the most dashboards. They will be the ones whose documentation admits where authority truly lives, whose treasuries are published not because a regulator demands it but because the community knows it, whose remaining audit findings are discussed in public calls instead of sealed in PDFs. What I Will Do with the Next Report The next time a protocol analysis lands in my inbox, I will not ask whether the conclusion is bullish or bearish. I will count the N/A fields first, then ask a single question: if this document had to be submitted to a jury, which blanks would empty the courtroom? The admin keys. The runway. The unlock schedule. The revenue ratio. The sequencer operator. The open findings. These are not details; they are the entire case. And I will remember that the document is not a mirror of the protocol. It is a mirror of whoever paid for the ink. I am not writing this to shame the research industry, though it deserves a share of that shame. I am writing it because I believe we can build something more honest. Code has conscience, but only when the people who read the code decide to also read the omissions. The next cycle will not be built by the loudest voices or the densest charts. It will be built by the readers of silence, by people who can look at a table full of N/A and say: now I know what to investigate. Liquidity flows where belief resides, and belief, this time, will reside where the blanks are acknowledged — not where they are hidden. So ask yourself, the next time you read a beautiful, complete, confident analysis of a protocol: what did they not want you to ask? The answer is the asset. The answer is the market. The answer, in the end, is the only thing worth having.