Module 5: Fundamental Analysis and Tokenomics
Evaluating DeFi Protocols
Chapter 10 of 15 · about 5 minutes
10.1 Two lending protocols
Mint was comparing two lending protocols. Both let users deposit assets to earn interest and borrow against collateral. Protocol One had $2 billion in TVL and had operated for five years. Protocol Two had $600 million in TVL, launched six months ago, and offered much higher yields.
"Protocol Two pays more," said Mint. "Isn't that better?"
"Higher yield usually means higher risk, or temporary incentives, or both," said Hash. "Let's evaluate them properly. DeFi protocols need two kinds of analysis: is it a good business, and is it safe?"
The DeFi module goes deep into how these protocols work. This chapter focuses on how to evaluate them as investments.
10.2 The business questions
Using Chapters 6 and 7, start with the business.
| Question | What to look for |
|---|---|
| What does it earn? | Fees and protocol revenue over at least several months |
| What does it spend? | Token incentives and operating costs |
| Is it profitable? | Revenue minus incentives |
| Who are its users? | Many users, or a few large ones? |
| Is the usage organic? | Does activity stay when incentives fall? |
| How does the token capture value? | Fee sharing, buybacks, staking roles, or governance only |
| How does it compare with competitors? | Valuation ratios and market share (Chapter 8) |
10.3 The safety questions
DeFi protocols hold user funds in smart contracts. Their failures can be sudden and total. So safety deserves as much attention as business performance.
| Risk | Questions to ask |
|---|---|
| Smart contract risk | Has the code been audited by reputable firms? How long has it run without incident? Is there a bug bounty? |
| Oracle risk | Which price oracles does it use? Can thin markets be manipulated? (Module 3, Chapter 12) |
| Admin and upgrade risk | Can the team upgrade contracts instantly? Is there a time delay? Who holds the keys? |
| Collateral risk | Which assets are accepted? Are risky or illiquid tokens used as collateral? |
| Liquidity risk | Can depositors withdraw when they want, even in a crisis? |
| Dependency risk | Does it rely on other protocols, bridges, or stablecoins that could fail? |
| Governance risk | Could a large holder push through a harmful proposal? |
10.4 Time without incident
One of the most valuable safety signals in DeFi is the Lindy effect: the longer a protocol has operated securely while holding significant funds, the more confidence it earns. Every day that a contract holds large amounts without being exploited is a real-world test, run by attackers with strong incentives to find bugs.
| Protocol One | Protocol Two | |
|---|---|---|
| Time live | 5 years | 6 months |
| Peak TVL held | $5 billion | $600 million |
| Audits | Several, from multiple firms | One |
| Major incidents | None in core contracts | None yet |
| Bug bounty | Large | Small |
Protocol Two might be perfectly safe. But Protocol One has been tested far longer under far more pressure.
"So new code is guilty until proven innocent," said Node.
"Not guilty," said Hash. "Just unproven. And it should pay you more for taking that risk, which partly explains its higher yields."
10.5 Where does the yield come from?
Recall Module 2, Chapter 11: if you can't identify where a return comes from, you may be the source. For DeFi yields, break them down.
| Yield source | Sustainable? |
|---|---|
| Interest paid by borrowers | Yes, as long as borrowing demand lasts |
| Trading fees paid by traders | Yes, as long as trading volume lasts |
| Staking rewards from the underlying network | Generally, though tied to network issuance |
| Token incentives from the protocol | Temporary; paid through dilution |
| Points or expected future airdrops | Speculative; may never become valuable |
Protocol Two's higher yield turned out to be 4% from borrower interest plus 11% from token incentives. Protocol One paid 4.5% from borrower interest alone.
"So Protocol Two's real yield is actually lower," said Mint. "The rest is paid in its own token, which is being diluted."
10.6 TVL quality
As Chapter 7 explained, TVL can be misleading. For DeFi protocols, ask:
How sticky is it? If incentives dropped tomorrow, how much would leave?
How concentrated is it? If a handful of large depositors provide most of the TVL, their exit could cause sudden drops and liquidity crunches.
What assets make it up? TVL in major assets and stablecoins is generally more robust than TVL in the protocol's own token or other volatile tokens.
Is it double counted? Is TVL made of receipt tokens from other protocols, creating chains of dependency?
10.7 Revenue durability
Some DeFi revenue is cyclical. Trading fees rise in volatile, busy markets and fall in quiet ones. Borrowing demand rises when traders want leverage in bull markets and falls in bear markets.
When evaluating a protocol, look at revenue across a full market cycle, if possible. A protocol whose revenue only exists in bull markets deserves a lower valuation than one with steady revenue through good and bad times.
10.8 Mint's scorecard
Mint built a simple scorecard for the two lending protocols.
| Factor | Protocol One | Protocol Two |
|---|---|---|
| Revenue and growth | Steady, moderate growth | Fast growth, from a small base |
| Profitability | Positive earnings | Negative, due to incentives |
| Value accrual | Buybacks from revenue | Governance only |
| Track record | 5 years, no core exploits | 6 months |
| Admin controls | Time-locked upgrades via governance | Team multisig can upgrade instantly |
| Yield quality | Mostly borrower interest | Mostly token incentives |
| Valuation | Moderate P/S | High P/S given negative earnings |
"Protocol Two isn't necessarily bad," said Mint. "But I'd need a much better reason, and a much smaller position, to choose it."
"That's a sensible conclusion," said Hash.
10.9 Try it yourself
Choose two DeFi protocols in the same category. Fill in the scorecard from section 10.8 using their documentation, audit reports, analytics dashboards, and governance forums. Break down the advertised yield of each into its sources, as in section 10.5.
Key takeaways from this chapter
- DeFi protocols need both business analysis and safety analysis.
- Business questions cover revenue, costs, profitability, users, organic usage, value accrual, and valuation.
- Safety questions cover smart contracts, oracles, admin keys, collateral, liquidity, dependencies, and governance.
- Time operating safely with significant funds is one of the strongest safety signals.
- Break yields into sources. Borrower interest and trading fees are more sustainable than token incentives or points.
- Evaluate TVL for stickiness, concentration, composition, and double counting.
- Look at revenue across a full market cycle, not just a bull market.