Last month a founder pushed a deck across the table for a rollup carrying a hundred-million-dollar raise and asked for a verdict by Friday. I ran it through the same nine-cell grid I have used since 2017 โ technical, tokenomics, market, ecosystem, regulatory, team, risk, narrative, transmission. Eight of the nine cells came back blank. Not negative. Blank. No repository with commits older than the token announcement. No vesting schedule. No jurisdiction of incorporation. The tokenomics table was a screenshot with the allocation column blurred by compression artifacts. I sent back one line: "Information insufficient. Cannot evaluate." He replied within the hour: "Understood โ but what is your gut?"
That exchange is the entire industry compressed into a paragraph. In a bull market, the market pays for verdicts and punishes the word "unknown" โ which is precisely why "unknown" is the most underpriced position you can hold. The founder did not want analysis. He wanted permission. Permission is the one commodity a code auditor should never sell, and the discipline of withholding it is the entire job.
I have watched this pattern repeat across three cycles, and I have the scars to prove it. So let me do something I rarely do. Instead of reviewing a project, I am going to review the grid itself โ the nine dimensions every serious analyst claims to run โ and ask what each one actually does when you feed it nothing at all.
The framework did not descend from a consulting slide. It grew out of the mania of late 2017, when I launched a Telegram-based education group in Bangkok called ChainLogic and manually audited whitepapers for fifteen emerging ICOs in a single quarter. I flagged problems in eight of them โ not by reading the glossy prose, but by opening the GitHub and counting commits, checking whether the named advisors had any verifiable history, and comparing the token allocation against the marketing promise. More than five hundred early adopters followed those audits. What I learned in that quarter became the founding axiom of everything I write: the deck describes what a project wants to be; the repository describes what it is. Those are frequently two different documents, and only one of them is admissible in the only court that matters.
By 2020, during DeFi Summer, the grid had grown teeth. I partnered with the SushiSwap team to audit their initial fork mechanism, and I ran three rapid-fire workshops in Bangkok teaching two hundred developers to interact with Uniswap and Aave. I also did something less glamorous: I tested liquidity mining with my own money and lost fifteen percent to impermanent loss. That loss is why I now treat tokenomics as a forensic discipline rather than a spreadsheet exercise. The number that matters is never the APR; it is who pays the APR, and for how long.
The next year, the grid taught me something the pure engineers had missed. During the 2021 NFT craze I launched a platform called Digital Artisans Thailand, connecting local artists to Web3 tooling. I guided fifty artists through minting on Ethereum and Flow, learning the technicalities by deploying test contracts on my own. We ran two drop events and generated fifty thousand dollars in secondary sales. That experience moved my center of gravity from code to culture, because it proved something a whitepaper cannot: ownership is not a feature of the code, it is a feeling in the holder โ and feelings cannot be audited, only earned. Then Terra/Luna collapsed in 2022, and I pivoted hard, from retail education into institutional compliance. I spent six months mastering Thai securities regulations and certified thirty fintech professionals on anti-money-laundering protocols. Every one of those experiences feeds a different cell of the grid. That is the point. The grid is not a checklist. It is a set of scars.
So here is what each cell actually does when the input is empty โ and why the emptiness, not the content, is the finding.
Start with the technical cell. This is where I do my real work, and it is the easiest to fake. A project will tell you it is "modular," "DA-first," "rollup-native." I open the code. Nine times out of ten the data-availability layer is theater โ a dedicated DA solution bolted onto a rollup that processes a few kilobytes of calldata per block. The DA layer is the most over-hyped line item in the current stack; ninety-nine percent of rollups will never generate enough data to need dedicated availability at all. Dedicated DA is a solution to a scale problem most chains have not reached and may never reach. When the technical cell comes back blank, it usually means the team has a narrative but no throughput. No throughput, no need for the architecture they are fundraising to build. Alpha hidden in the noise is real, but there has to be noise first โ and an empty cell is not noise, it is silence dressed as a roadmap.
Now the interoperability cell, which most frameworks quietly fold into technical. I have followed Cosmos since before IBC shipped, and I will say the unfashionable thing out loud: IBC is one of the most elegant pieces of engineering this industry has produced, and it has yielded one of the most fragmented application ecosystems in it. The protocol is beautiful; the applications do not talk to each other in any way a user can feel, and ATOM captures almost none of the value that flows across the bridges it enables. Elegance without capture is a hobby, not an investment. When I see a cross-chain pitch with an empty ecosystem cell โ no live apps, no developer commits, no users โ I know exactly what I am looking at. Code doesn't lie, but narratives do, and the cross-chain narrative has been lying about value accrual for four years running.
Then the DeFi cell, where the complexity spike lives. Uniswap V4's hooks turn the DEX into programmable Lego โ genuinely one of the most interesting primitives to ship this cycle, and I mean that as a compliment. But every hook is a new attack surface, and the configuration space is now so large that I expect it to scare off the majority of developers rather than empower them. Hooks will not democratize the DEX; they will concentrate it among the small number of teams that can audit their own composability. When the DeFi cell comes back empty on a V4 fork, the question is not "what does it do," it is "who can read it." Most people cannot, and a primitive no one can read is a primitive no one can trust.
The tokenomics cell is where 2022 lives, and where the empty cell does the most damage. A token can have a flawless emission schedule and zero value capture; the emission schedule is exactly what the missing document would have hidden. Vesting cliffs are the most honest document a project publishes, because they are the one number a founder cannot dress up. When there is no vesting schedule, there is no honesty โ full stop. I have lost money to this exact omission, and the fifteen percent I gave to impermanent loss taught me more than any yield calculator ever did.
The regulatory cell is the one retail ignores and institutions cannot. Howey is not complicated: it asks whether you are buying a security, which turns on whether there is an expectation of profit derived from the efforts of others. An empty regulatory cell โ no jurisdiction, no legal wrapper, no KYC posture โ is not neutral. It is a deferred liability, and in a bull market deferred liabilities are the ones that get repriced all at once, usually in a single afternoon. Trust is the new currency, and a project that will not tell you where it is incorporated is asking you to extend it credit with no collateral and no contract.
The team and governance cell is where I look for the multisig. Who holds the keys? How many signatures? Is there a timelock? An anonymous team is not automatically malicious โ plenty of good code has been written by people who value privacy. But an anonymous team running an upgradeable proxy contract with no timelock is a loaded weapon pointed at every holder. The empty governance cell is the most dangerous of all the empty cells, because it means the contract can be changed after you buy and before you can sell, and the only person who knows when is the person who wrote it.
The market cell asks whether the news is already priced in. In a bull market, the answer is almost always yes before you finish reading the headline. The risk cell is the one people get wrong most often: they read "unknown" as "low risk." It is not. Unknown is not the absence of risk; it is risk that has not yet been priced, and unpriced risk is the most expensive kind because it arrives without warning. The narrative cell asks what story is being sold and who profits from your belief in it. The transmission cell asks how the news travels through the industry chain โ from infrastructure to applications to tokens to your wallet โ and where the value actually stops. Nine cells. When eight come back empty, the correct output is not a gut call. It is a refusal.
Here is the contrarian part, and it is the part I most want you to sit with. Most analysts treat empty cells as a research backlog โ a signal to dig harder, hire more analysts, wait for the data to arrive. I treat them as a signal in themselves. When a project's data is missing, ask who removed it. A team that has raised a hundred million dollars and cannot produce a vesting schedule is not disorganized; it is selective. The absence of data is data. The blurred allocation column is a decision that someone made, with a keyboard, on purpose.
There is a second, harder truth buried here. The nine-cell framework is itself a seductive lie, because it implies that if you fill all nine cells you will have certainty. You will not. Filling the cells reduces uncertainty; it never eliminates it, and the confidence a completed grid gives you is often more dangerous than the discomfort of an empty one. The discipline is not in completing the grid. It is in knowing when to stop and say "cannot evaluate" โ the only verdict that never gets you sued, liquidated, or quietly fooled. The analyst's real edge is not the ability to produce a number. It is the willingness to withhold one.
For twenty-four years I have watched intelligent people lose money not because they lacked a framework, but because they refused to let an empty cell stay empty. They filled it with a story. The story felt like analysis. It was not. And the market, which does not care how good the story felt, charged them full price for the difference.
So here is where I land, and it is a forward-looking judgment rather than a summary. The next wave โ AI agents transacting on-chain, autonomous wallets, machine-to-machine settlement โ will make this problem worse before it makes it better. In 2025 I launched the Autonomous Ethics Lab in Bangkok, co-developed a curriculum for a hundred developers on securing AI-driven smart contracts, and ran a hackathon where twenty teams built AI-agent wallets. The lesson from that room was simple and uncomfortable: an AI agent will fill every empty cell instantly, confidently, and wrongly, because a model trained to answer will always answer. The most valuable skill of the coming decade will not be reading the grid. It will be knowing when to leave it blank โ and having the nerve to say so while everyone around you is buying. The founder who wanted my gut never got it. He raised anyway. He may even win. But when the cycle turns, the survivors will be the ones who respected the empty cells, not the ones who painted over them. So ask yourself the question the market will never ask you: which cells in your own portfolio are blank right now, and who blurred them?
