DeFi Security Alliance

Personas and market

Tokenomics Audit: Report Scope and a Scan of 16 Firm Sites

A useful tokenomics audit tests economic assumptions and connects them to the rules a token actually enforces. Request reproducible scenarios and a findings report with explicit limits. Our scan found an explicit service offer on 1 of 16 readable member sites, showing why topic mentions need a closer check.

Hourglass filled with tiny coins draining onto a gridded base, representing a tokenomics audit of emission and vesting schedules.

Key facts

Original site scan
1 explicit tokenomics audit offer among 16 readable sites from a fixed list of 23 origins; 7 were unreadable
Mentions versus offers
3 automatic topic matches became 1 service offer and 2 blog-only matches after reading the evidence
Scope overlap
Code audits can include economic attacks; the signed scope determines whether longer-term economic assumptions are tested
Review artifact
Require a versioned model, reproducible scenarios and findings that can be retested
Survey limit
An unreadable or unmatched site is unknown evidence about service availability, not a negative capability verdict

Why tokenomics needs scope beyond a code audit

A tokenomics audit reviews the economic rules a token enforces and the assumptions those rules depend on. Its useful output is a set of reproducible findings: which incentive fails, under what conditions, who absorbs the loss and which change should be tested. A token allocation chart cannot answer those questions.

The boundary with security review needs care. Hacken's smart contract assessment methodology explicitly includes economic attacks and checks emission and fee mechanisms. Its separate token economy methodology includes code verification. There is overlap. The missing work is whatever your signed scope does not cover, especially assumptions about demand and participant behavior over time.

Consider a vesting contract that releases exactly the promised allocation. The implementation can be correct while recipients gain access to more tokens than available market depth can absorb under the modeled selling scenario. Neither finding contradicts the other. They concern different claims.

Commission the economic review against a versioned model and connect it to the deployed rules. For an existing report, start with the scope and finding status fields. For a new engagement, require the reviewer to state whether it tests the design, checks implementation or does both. A clean conclusion applies only to the tested assumptions and scope.

Our scan found one service offer on 16 readable sites

Finding a firm that discusses tokenomics is easier than finding a defined economic review. Our scan of an existing member-site list produced three topic matches. Reading the evidence reduced that to one explicit service offer. The difference matters when a founder is assembling a shortlist from search results.

Method

Source population
All 23 origins in the directory's earlier security disclosure survey, with their historical names retained and redirects followed.
Retrieved
, local time in Kyiv. The saved request timestamps use Coordinated Universal Time.
Page selection
Homepage and sitemap discovery, including at most 3 alphabetically sorted child sitemaps, followed by up to 6 same-host candidate pages whose addresses or home-page link text matched tokenomics, token economy, economic or vesting language. Service-looking addresses preceded blog, news and audit archive paths.
Readable denominator
16 of 23 homepages returned HTTP 200 and at least 200 visible characters. The other 7 were excluded from the readable-site denominator.
Classification
Count configured economic terms first. Then read every matching page and require a description of tokenomics review work to classify an explicit offer. An educational article alone does not qualify.

Results

Member-site scan results, retrieved
ObservationCountDenominator
Readable homepages1623 origins
Automatic topic matches316 readable sites
Explicit tokenomics audit offer116 readable sites
Blog-only matches216 readable sites
No configured term found1316 readable sites
Unknown because homepage was unreadable723 origins
Hand classification of the three matched firms
FirmEvidenceClassification
ShellBoxesDedicated service page with a review processExplicit offer
CyberscopePresale guide and a design principles articleBlog only
QuillAuditsIntroductory tokenomics articleBlog only

The reproducibility files are seo/research/member-tokenomics-survey.py and seo/research/member-tokenomics-survey-2026-09-05.json. They are retained in the repository, not published as downloads. The output preserves request outcomes and matched passages. A repeat run reproduced the headline counts.

Limits

Reasons the seven excluded origins remained unknown
Homepage outcomeOriginsInterpretation
Transport or certificate failure3No readable homepage response
HTTP 4031Request denied
Short HTTP 200 shell3Below the visible-text threshold
  • This historical directory sample does not represent the whole market.
  • No match means no configured phrase appeared in the pages checked. It does not establish that a firm lacks the service. The crawler also encountered unavailable sitemaps.
  • Hacken is a useful counterexample: its main site returned HTTP 403 in the scan, while its token economy methodology was independently accessible. The provider comparison below therefore uses additional primary sources.

What the report should contain

Ask for evidence that another reviewer can inspect. A rating without its input data cannot tell you whether the problem is an unsafe mechanism, an unsupported assumption or an absent document. Our proposed acceptance checklist below is a commissioning framework, not an industry certification standard.

Evidence to request in a token economics audit
Report componentRequired artifactAcceptance check
Scope and versionModel revision, contract references and exclusionsThe conclusion names the design it covers
Value flowsMap of who pays and who receives each assetToken transfers are separated from external revenue
Supply reconciliationAllocation ledger and emission scheduleOpening supply reconciles with additions and removals
Vesting auditRecipient schedules and modification permissionsContract behavior matches the written release policy
Stress testingScenario inputs and outputsFailures can be reproduced from retained assumptions
Control analysisVoting and parameter-change authority mapEconomic assumptions include the actors able to change them
Findings and retestImpact, proposed change and response statusThe revised model is tested against the original failure

A supply reconciliation must distinguish minting from unlocking. Minting increases issued supply. Unlocking changes availability according to the applicable schedule. Treating every unlock as newly minted supply can double-count the same allocation. Keep a separate ledger for tokens that are issued but unavailable, and state how treasury holdings enter the circulating-supply definition.

Price assumptions deserve their own input record. If rewards are paid in the protocol's token but operating expenses are payable in another asset, a token-denominated surplus does not establish that bills can be paid. Ask for the cash-flow result when token demand weakens, with the conversion assumption visible. Economics Design's due diligence scope explicitly includes scrutiny of financial-model assumptions.

For simulations, retain the model version and random seed where relevant. Specify participant policies rather than labeling everyone rational: a liquidity provider that exits when rewards decline behaves differently from a treasury that must sell on a fixed schedule. A reviewer should be able to change that behavior without rebuilding the entire report. Gauntlet's parameter methodology describes models tuned to actual market data; calibration is a question to ask, not a word to accept on the cover.

Also request a missing-input register. Tokenomics.com's published methodology scores an absent required input like an alert. That is a scoring policy. Your decision still needs the underlying distinction: missing evidence calls for investigation, while a demonstrated failure calls for a design response.

A usable finding identifies a causal chain. An unlock becomes available; some recipients sell under the stated policy; executable liquidity cannot support that flow within the specified tolerance. The reviewer can then test a changed release schedule against the same scenario. An observation that the token might fall in price supplies no comparable retest.

Failure classes: dilution, unlocks, yield and control

Use failure classes to choose scenarios, then decide which scenarios fit the actual mechanism. A large allocation or a high reward rate is an input to investigate. It is not a finding on its own.

Coins released from glass compartments collect at a narrow channel leading to a blue basin, illustrating an unlock meeting limited liquidity.
A release schedule needs a liquidity scenario. This conceptual illustration shows the bottleneck a reviewer should test; it does not depict measured market data.
Economic failure scenarios and the evidence needed to assess them
Failure classScenario to testEvidence to preserve
DilutionEmissions continue while demand weakensNet issuance and each participant's changing supply share
Unlock shockRecipients sell into reduced market depthRelease schedule and executable liquidity at the chosen tolerance
Unsustainable yieldSubsidies shrink before external revenue replaces themReward funding source and participant exit assumptions
Whale concentrationRelated holders act togetherAddress classifications and the uncertainty in entity attribution
Governance captureA coalition changes an economically important parameterVoting power, delegation rules and execution permissions

An emission schedule review needs the denominator that matches the question. A recipient cares about its share of issued supply; a trader cares about tokens that can reach the market; governance depends on the voting rules. Applying one supply percentage to all those jobs produces reassuring numbers with incompatible meanings.

Unlocks need market structure as well as dates. A volume figure measures past trading, not the liquidity available to absorb a sale at an acceptable price. Identify the venues and the pricing snapshot used in the scenario. Test the loss of a liquidity provider or venue access when that dependency matters to the launch.

Yield should be decomposed by funding source before it is annualized. New token issuance, trading fees and temporary third-party incentives behave differently when usage declines. An annualized reward display is not a promise that the funding source persists. Model the participant who exits when an incentive ends, including the effect of that exit on the remaining participants.

Applying the questions to Aerodrome

The Aerodrome documentation, read on , illustrates why roles matter. Liquid AERO rewards liquidity providers; locked veAERO carries voting rights and access to exchange revenue. Voting power depends on both the amount locked and the remaining duration. The page also says a deposit cannot earn swap fees and AERO rewards concurrently.

A model that treats all AERO holders as earning the same yield therefore misses a contractual distinction. So does a concentration check that ranks liquid balances as though they were voting power. Trace the rights attached to the position before deciding which balances belong together.

Choose an economic test by the right attached to a position A liquid reward position leads to a supply-share test. A locked voting position leads to a control-coalition test. An external revenue flow leads to a funding-persistence test. Each branch uses a different denominator, so adding the positions into one yield figure loses the distinction. Position or flowTest to request Liquid token rewards Share after net issuance Locked voting rights Control after delegation External fee revenue Funding after usage falls
Our review map separates dilution, control and funding. It is a way to scope tests, not a risk rating of Aerodrome.
Liquid reward position
Test net issuance against the participant's retained share. Include the assumed sales or reinvestment of rewards.
Voting position
Evaluate usable voting power under the actual locking and delegation rules.
Revenue flow
Check whether external payments continue under the weaker-usage scenario and which participants can claim them.

Do not freeze a protocol's policy from an old explainer. Aerodrome's current page says further details of the AERO Fed's operation with Aero are still to come. Record that uncertainty as an unresolved model input. Pool-allocation voting should not silently become an assumption that holders control every aspect of monetary policy.

Wallet concentration has a similar attribution problem. An exchange custody address may represent many users, while related addresses can represent one decision maker. Keep both the address-level measurement and the entity-level interpretation, with unresolved ownership marked unknown. A reviewer who cannot explain those classifications has not established the control distribution.

When in the lifecycle to run the review

Begin once the team has an economic model that can be challenged, before commitments make changes expensive. ShellBoxes lists both prelaunch reviews and reviews after significant design changes. Economics Design describes its due diligence service as an engagement for clients who already have a basic model. Neither means waiting until an exchange deadline.

  1. Name the decision the review must support.
  2. Freeze the input package: allocation ledger, unlock schedule, role permissions and the financial assumptions. Assign a version so a later report cannot accidentally describe a different launch.
  3. Run economic scenarios while the design can still change. Feed findings into implementation requirements and the code-review scope.
  4. Retest the revised model, then reconcile the relevant deployment parameters with it. Preserve unresolved findings beside the approval decision.
  5. Set rerun triggers based on the assumptions that mattered, such as an emission change or a material loss of liquidity. Give someone responsibility for noticing the trigger.

The purpose of an audit schedule is to put evidence before the decision it is supposed to support. If the vesting commitments are already fixed, say which remedies remain available. A report can recommend a change the team lacks authority to make; the implementation plan must expose that constraint.

For an existing protocol, connect the trigger list to contract monitoring and preserve the off-chain assumptions as well. A market-maker withdrawal will not necessarily produce a contract event. Our discussion of crypto launch models provides context for deciding which commitments deserve review before they become binding.

Provider comparison by published scope

Choose the kind of work before choosing the firm. The following comparison uses provider-owned material opened during this research. It is not a ranking, and the supplementary sources are outside the bounded member-site scan.

Published scopes inspected on
ProviderPublished evidenceQuestion to resolve in the proposal
HackenToken economy method covering structural analysis, distribution and code verificationWhich model scenarios and deployed contracts are included?
ShellBoxesTokenomics audit process ending in a findings reportDoes the quote include quantitative simulation and a retest?
Economics DesignEconomic due diligence with financial-model review and optional redesignWhere does review end and redesign begin?
GauntletRisk-parameter recommendation methodologyIs the proposed work ongoing parameter management or a token launch review?
Tokenomics.comPublished test and scoring frameworkCan findings be traced to supplied inputs and verified assumptions?

Service labels do not make these engagements interchangeable. An existing lending market may need parameter research, while an issuer with an incomplete allocation model needs design work before independent review can be meaningful. If the designer also reviews the model, ask which assumptions receive a separate challenge and how disagreements are documented.

Search snippets can also misstate the current offer. Our direct retrieval of the Chaos Labs homepage described enterprise artificial intelligence infrastructure, while search results displayed financial-risk service copy. That discrepancy does not establish that those services ended. It leaves current tokenomics-review availability unverified, so we have not listed it as a confirmed comparable offer.

No verified like-for-like price set emerged from these sources. Request a quote against the same input package and deliverables. ShellBoxes states that pricing follows scoping. Compare the modeling effort and retest coverage before comparing totals; a redesign project and an assessment of an existing model purchase different work.

Use our member directory and ShellBoxes profile for firm context. In an audit brief, name the economic question and the evidence required to close it. A request for a tokenomics badge leaves too much room for incompatible proposals.

Code audit vs tokenomics audit

Resolve overlap by assigning evidence ownership. The two reviewers may need to examine the same reward function, but they should not leave each other responsible for an assumption neither tested.

Questions to allocate when commissioning both reviews
DecisionCode-review questionEconomic-review question
Emission scheduleDoes implementation enforce the specified rule?What happens under weaker demand and changed participant behavior?
VestingCan release timing or permissions be bypassed?What selling scenarios follow the scheduled releases?
GovernanceWho can execute a parameter change?Which incentives and coalitions could motivate that change?
RemediationWas the implementation fix checked?Did the revised model remove the demonstrated failure?

A small immutable token without rewards may not justify the same simulation effort as a protocol whose incentives govern liquidity. Scope accordingly. The review still needs to account for distribution commitments and any off-chain dependencies it relies on.

Before accepting the combined result, match the model version to the implementation references and read the remaining findings. The due diligence checklist covers the separate task of linking deployed contracts to evidence. Keep the economic model beside that evidence, with its unresolved inputs and the conditions that require another review.

Frequently asked questions

Can confidential investor allocations stay out of the public report?

Separate the reviewer input package from the public artifact. The reviewer needs enough detail to test the schedule and concentration assumptions. Agree on redaction before the work starts, and make the public report state which conclusions rely on undisclosed data so readers can judge the verification limit.

Can I substitute an automated score for a commissioned review?

Use a score to prioritize questions, then inspect its inputs and rules. A tool cannot resolve undisclosed side agreements or prove an assumed participant response merely by assigning a number. Commission additional work when the decision depends on facts the scoring process did not observe.

Does a tokenomics report satisfy an exchange listing request?

Ask the exchange which document and scope it requires before commissioning the report. A tokenomics assessment and a smart contract security report answer different questions. The term audit in a listing checklist does not by itself establish that either document will be accepted.