All articles
Web3 FoundationsJuly 14, 202611 min read

How to Analyze a DeFi Protocol in 20 Minutes: Docs, DefiLlama, Dune

A security auditor's four-stop route for reading any DeFi protocol cold: the docs, DefiLlama, Dune, and the token page. Twenty minutes to know what the machine is and who pays whom.

By Carlos (Bloqarl)

TL;DR

  • You can read any DeFi protocol in about twenty minutes with a fixed four-stop route: the docs (what is the machine), DefiLlama (is anyone actually here), Dune (who is here), and the token page (what does holding it get you).
  • The number that is expensive to fake is fee revenue: money users actually paid to use the thing. TVL can be rented; fees have to be earned.
  • Protocol quality and token opportunity are two separate findings. A sound machine with a bad token schedule is common, and blending the two reads into one verdict is the classic retail error.
  • Twenty minutes buys you comprehension, not due diligence. It makes you the person who can explain the protocol, not the person cleared to deposit savings into it.
  • Every read has to answer one question at least once: who is paying, and why? If your summary never names a payer, you toured with feelings instead of a route.

How do you analyze a DeFi protocol?

You analyze a DeFi protocol by walking a fixed four-stop route, docs, DefiLlama, Dune, then the token page, where each stop answers exactly one question, until you can explain the whole protocol in six plain sentences.

Someone drops a protocol name in a chat you respect. Everyone nods, so you nod. Later, alone, you open the website: a hero line, four buzzwords, a docs link. Ninety seconds later you close the tab knowing nothing.

That is how house buyers tour: they walk the rooms, absorb a vibe, and come home with feelings. A house inspector walks the same rooms in the same twenty minutes and comes home with a verdict, because the inspector has a route: foundation, plumbing, wiring, roof. Fluency in DeFi is not knowing every protocol. It is having the route.

One scoping note before we walk it. If you want a general-purpose method for evaluating any crypto project, the team, the claims, the red flags, the scam patterns, that broader checklist lives in how to research a crypto project. This article is the DeFi-specific deep route: it assumes the project is a live protocol with money in it, and it goes straight at the machinery, the cash flows, and the token. Use that checklist to decide whether something deserves attention at all; use this route to understand what it is.

The four stops, and the one question each exists to answer:

  1. The docs: what is the machine?
  2. DefiLlama: is anyone actually here?
  3. Dune: who is here?
  4. The token: what does holding it get you?

Answer all four and you can explain the protocol to a friend. Miss one and you have a partial read that feels complete.

Stop 1: what is the machine?

Open the protocol's documentation and read two pages only: the overview and the "how it works" section. You are not studying. You are classifying.

Every DeFi protocol is built from a small set of core machines: a swap pool, a lending market, a receipt printer like liquid staking, a vault that runs a strategy on your behalf. Your job at stop 1 is to name which machine this is, or, if it is several stacked together, to count the layers. Protocols that stack machines inherit the risks of every layer underneath them, which is the whole argument of money legos and composability.

Set a timer for ten minutes. If the timer rings and you still cannot name the machine, that is not your failure. It is your first finding. Complexity that resists a one-page explanation is a cost, and someone always pays that cost. Usually the user.

Everything after this stop depends on it: fee numbers mean nothing until you know what service generated them.

Stop 2: is anyone actually here?

Stop 2 is a single tab: the protocol's page on DefiLlama, the free public dashboard that tracks value and fees across DeFi. Three lines to read.

First, TVL, as a trend, never as a level. Total value locked is the headline number every protocol markets, and a big level impresses without informing. A trend informs: is capital arriving, staying, or quietly leaving? If TVL as a metric is new to you, how to read DeFi metrics covers why the headline numbers mislead and how analysts read them instead.

Second, fee revenue, the line that is expensive to fake. Fees are money users actually paid to use the machine. A team can rent TVL with token incentives, and marketing can inflate everything else, but nobody pays fees to a product they are not using. When you ask the master question, who is paying, this is where the answer shows up on a chart. Real fees mean real users paying for a real service. No fees means whatever the pitch says, nobody is at the counter.

Third, emissions next to revenue. Many protocols pay out their own token to attract deposits. Put the emissions line next to the fee line and ask where the yield is flowing from: a spring, meaning users paying for a service, or a parked truck, meaning the protocol printing its own token to rent a crowd. The five honest sources of yield, and how to tell them apart, are the subject of where DeFi yield comes from.

Here is the pattern that makes this stop pay for itself. Suppose TVL has tripled in a month while fees stayed flat, and an emissions program launched a few weeks before the climb. That is not organic growth. Users who found a product they love would use it, and use shows up as fees. Flat fees plus tripled TVL means the new capital is not customers. It is liquidity chasing emissions, and it will leave the moment the truck does. The gap between the two lines is the finding.

Stop 3: who is here?

DefiLlama told you money is present. Dune tells you whose money.

Dune is a platform where analysts publish community dashboards built from raw blockchain data, and they are free to read. Search the protocol's name, open the most-used dashboard, and read three things: user counts over time, holder concentration, and whether activity spreads across many wallets or stacks up in a few.

The question this stop answers is blunt: is this a thousand real users, or three whales in a trench coat pretending to be a crowd? A protocol can show healthy TVL and real-looking fees while a handful of wallets generate almost all of it. That is a very different building from one full of independent tenants, and it fails differently too: when one whale leaves, the "community" leaves with it.

Notice what you are not doing here: computing. The analysts already did the work. Your job is to read their instruments and to know which gauge answers which question.

Stop 4: what does holding the token get you?

The last stop is the token page, and the question is precise: what does holding this token actually get you?

There are only two honest answers. A share of the fees, or a governance seat. Everything else, "alignment," "ecosystem utility," "community," is decoration. If the token gives you neither cash flow nor a vote, then holding it gets you nothing, and here is the part nobody warns beginners about: nothing is a legitimate answer. Plenty of good protocols have tokens that do nothing for the holder. That is not a flaw in your read. Write it down and move on.

Then read the schedule. Compare the circulating float to the fully diluted valuation, and look at the unlocks ahead: how much locked supply is scheduled to hit the market, when, and into whose hands. A token where most of the supply has not been released yet is a token with a scheduled flood on the calendar, and the only question that matters about a flood is who buys that water, and at what price.

What does the route look like on a real protocol?

Watch the route produce a read on a machine worth knowing: Aave, one of the largest lending protocols in DeFi.

Stop 1, the docs. Aave is a lending market. Users deposit assets into shared pools, borrowers post collateral worth more than they borrow, and interest rates are set automatically by a utilization curve, code that raises rates when a pool runs hot. One machine, one floor, named well inside ten minutes.

Stop 2, DefiLlama. The deposits are real and have stayed through multiple market cycles, which is what durability looks like on a chart. And the fee line is the honest kind: borrowers paying interest for a service they chose to use. A spring, not a truck. Who is paying? Borrowers, because they want the loan. That is the healthiest answer the question has.

Stop 3, Dune. Community dashboards show a wide base of depositors and borrowers spread across many markets, activity distributed rather than stacked in a few wallets. A crowd, not a trench coat.

Stop 4, the token. Holding AAVE is a governance seat: votes on which collateral gets listed and how the risk parameters are dialed. Fees flow to depositors and to the protocol, not automatically to token holders. A vote, not a dividend. An answer, not a flaw.

Now the finish move. Close the tabs and say what you learned out loud, in six sentences: what the machine is, how it prices, who pays whom, whether the money and the users are real, and what the token is for. That spoken card is the protocol read. And notice that sentence about borrowers paying interest: every good read names a payer somewhere. If your six sentences never name who is paying, you toured the house with feelings. Walk the route again.

What if the protocol is good but the token looks bad?

Here is a hypothetical that teaches the route's most important discipline. Imagine you run the four stops on a lending protocol you have never heard of. The docs name the machine in ten minutes: a clean lending market. TVL is steady, fees are real, users are broad enough. Then stop 4: 80 percent of the token supply unlocks over the next year, to the team and early investors.

What is the honest read?

Not "the unlock proves the protocol is secretly broken." The machine did not change because the roof is loud; the docs, plumbing, and wiring all passed. And not "the machine is sound, so the token will absorb the unlocks," because quality does not repeal supply. Someone has to buy 80 percent of a token as it lands, and hope is not a buyer of size.

The honest read is two findings, both true, kept on separate lines: a sound machine with real fee revenue, and a token facing a scheduled flood. The protocol read and the token read are separate answers. Conflating them, in either direction, is the retail error that funds every unlock. Use the machine if it serves you. The token is a different decision entirely.

Is a 20-minute read the same as due diligence?

No, and this is the line that keeps the route honest.

Twenty minutes and four stops give you comprehension: what the machine is, who pays whom, whether the crowd is real, what the token does. That is the difference between nodding along in the group chat and being the person who can explain the thing.

What the route never gave you: a green light for your savings, position sizing, or underwriting. Deeper commitments deserve deeper work, more time, more sources, and sizing discipline that a reading route does not teach. An inspector's report tells you what the house is. It does not size your mortgage, and it promises nothing about next year's weather.

But do not swing to the opposite error, that without professional tools reading is pointless. Reading is the entry fee to better questions. In every corner of this market, the unread pay the read, and twenty minutes per protocol is the cheapest way ever invented to switch sides.

If you want to build this skill in order rather than piecemeal, this route is the capstone of Your First 90 Days in DeFi, our free interactive course. It teaches the machines first, then the metrics, then hands you this exact route to run live. The first three checkpoints need no account.

Related questions

What is the best free tool to analyze a DeFi protocol? Two free tools cover most of the read: DefiLlama for value locked, fee revenue, and emissions, and Dune for community dashboards showing user counts and holder concentration. The protocol's own docs cover the rest.

How long does it take to research a DeFi protocol? About twenty minutes for a comprehension read: ten in the docs naming the machine, and roughly ten across DefiLlama, Dune, and the token page. Deeper commitments deserve proportionally deeper work.

What is the most important metric for a DeFi protocol? Fee revenue, because it is the hardest number to fake. TVL can be rented with token incentives and marketing can inflate attention, but fees only exist when real users pay for a real service.

Is high TVL a good sign for a DeFi protocol? Not by itself. TVL is a level, and levels impress without informing. Read it as a trend, and read it next to fees: rising TVL with flat fees usually means rented capital chasing emissions, not customers finding a product.

Can a good protocol have a bad token? Yes, and it is common. Protocol quality and token opportunity are separate findings: a sound machine can sit under a token with no utility and a heavy unlock schedule.

Where to go next

The route is the take-home, not this article. Four stops, one card, six sentences, and the discipline of keeping protocol findings and token findings separate. Run it once this week, for real, on a protocol you have only ever nodded at.

If you want the supporting skills, how to read DeFi metrics sharpens stop 2, where DeFi yield comes from explains the springs behind the fee line, and how to research a crypto project is the general-purpose sibling for anything that is not yet a live protocol. And once you can read any protocol cold, the next question is where you fit in all of it, the question how to get into DeFi maps out.

Tagged

DeFiProtocol AnalysisCrypto for Beginners