DYOR stands for "do your own research." Appearing constantly in crypto, usually appended to a recommendation, it means investigate before buying rather than acting on what someone told you.
A second function gets less attention. Attached to a promotional post, it acts as a disclaimer, shifting responsibility to the reader while the promotion does its work.
Where DYOR came from
Investment forums, long before crypto, where it hedged stock tips legally.
Crypto adopted it and made it ubiquitous, for a specific reason. Because most jurisdictions restrict who can give financial advice, appending DYOR is how a promotional post attempts to avoid counting as one. Whether that works legally is a separate question from whether it works rhetorically.
What actually researching a token involves
Six checks, in the order that eliminates the most projects fastest.
1. Tokenomics. Total supply, circulating supply, and the allocation split. What percentage went to the team and early investors, and when does it unlock? A large unlock ahead of you is the single most predictive detail available.
2. Whether the token does anything. Plenty of projects describe a system that works fine without a token, then attach one. Where the function is "governance" and nothing else, ask what gets governed.
3. Liquidity against market cap. A large valuation with thin liquidity means a price nobody could realize at scale. Compare daily trading volume against the position you intend to take.
4. Holder concentration. Check a block explorer. Where a handful of wallets hold most of the supply, a handful of people can end it whenever they choose.
5. The team. Verifiable names, real histories, work you can look up. Anonymous teams are not automatically disqualifying, though they remove your recourse entirely.
6. What shipped. Compare the whitepaper roadmap against what exists. Nothing tells you more than a two-year-old roadmap with nothing delivered.
Sources worth using for token research
| What you want | Where to look |
|---|---|
| Supply, holders, transactions | Block explorers |
| Unlock schedules | Token vesting trackers |
| Protocol TVL and revenue | DefiLlama, Token Terminal |
| Code and development activity | The project's public repository |
| Audit reports | The auditor's site, not the project's summary of it |
| Regulatory status | The regulator's own public register |
Primary sources over commentary, every time. A project's own summary of its audit is not the audit.
What DYOR does not mean
Worth being direct, since the phrase gets stretched.
It does not mean reading the project's marketing. That is reading marketing.
Checking sentiment does not count. A busy Telegram group tells you people are talking, which is the easiest thing to manufacture. Pump and dump schemes seed groups with thousands of paid accounts.
Finding people who agree with you does not count either. Searching for confirmation is not research, and crypto communities are structurally optimistic about their own holdings.
Risk does not transfer. Appending DYOR to a recommendation has not made the recommendation safer.
Nobody becomes a professional this way. Reading a whitepaper carefully is worth doing, and it does not equal the analysis a specialist would perform.
The honest limits of DYOR
Certain risks fall with research. Others cannot.
Supply, holders, and code can be verified. Whether a team will execute, whether a market will materialize, or whether an audited contract hides an undiscovered bug cannot. Kelp DAO's contracts had been audited multiple times before roughly $292 million was taken in April 2026, through compromised infrastructure rather than code.
Nor does research tell you what suits your circumstances. Time horizon, risk tolerance, and what you can afford to lose are questions no amount of reading answers.
Red flags that end the research early
- Guaranteed or projected returns of any size
- Anonymous team with no verifiable history
- Concentrated supply with no lock or vesting disclosed
- Simultaneous promotion across accounts with no underlying news
- Countdown timers or urgency around a purchase decision
- Unlocked liquidity, which can be withdrawn at any moment
- No audit, or an audit summary the auditor did not publish
- A whitepaper you can find identical passages of elsewhere
Where mb.io fits
Research is one filter. A venue that reviews what it lists is another.
mb.io is a regulated crypto spot exchange backed by MultiBank Group, a financial institution founded in 2005 that serves more than 2 million clients across 100+ countries.
- Every listed asset is reviewed before it reaches the platform
- Regulated by VARA in the UAE and AUSTRAC in Australia
- 10/10 security score from Hacken, an independent blockchain security auditor
- Institutional-grade MPC custody powered by Fireblocks, with segregated client funds
- Buy, sell, and swap in three steps, from sign-up to purchase
- 24/7 multilingual customer support
Open your account and start trading on mb.io.
Frequently asked questions
What does DYOR stand for in crypto?
Do your own research. It means investigating an asset yourself rather than acting on someone else's recommendation, and it also functions as a disclaimer on promotional posts.
Why do people always say DYOR?
Two reasons. As genuine advice, since nobody else carries your losses. As a hedge, since most jurisdictions restrict who can give financial advice, and appending DYOR attempts to sidestep that.
What should I research before buying a token?
Tokenomics and unlock schedules first, then whether the token has a function, liquidity against market cap, holder concentration, whether the team is verifiable, and what has actually shipped.
Where do I check a token's holder distribution?
A block explorer for the relevant chain. Top holder lists are public, and concentrated supply is the precondition for most manipulation schemes.
Is reading a whitepaper enough research?
No. A whitepaper describes intent. Verifying that the code exists, that the roadmap shipped, and that the tokenomics match what was promised requires checking sources outside the document.
Does DYOR protect me from scams?
Many of them, yes, particularly those relying on concentrated supply, unlocked liquidity, and anonymous teams. Undiscovered contract bugs and operational compromise slip through.
What is the difference between DYOR and FUD?
DYOR encourages investigation. FUD describes negative sentiment, and the label frequently gets used to dismiss legitimate questions. Watch for it being applied to concerns rather than to actual misinformation.
How long should token research take?
Long enough that urgency becomes the disqualifying signal. Any token punishing you for spending an hour checking it is telling you something about itself.
