Crypto Presale Risks: A 12-Point Checklist Before You Buy

The main crypto presale risks are delivery failure, smart-contract bugs, unaudited code, supply concentration, thin liquidity at launch and plain fraud. A short checklist applied before you pay will not remove them, but it will help you spot projects that skip basic disclosure.

Why presales are a distinct kind of risk

When you buy a listed token, you can see its market. In a presale you pay today for tokens that will exist later, if the project launches as planned. Everything in between is a promise. Prices are set by the project, not discovered by a market, so a presale price tells you what the team chose, not what the token is worth.

The risk page on Bitcoin.one is a useful example of what candour looks like. It opens by telling readers not to invest unless they are prepared to lose everything, and it lists total loss, no investor or deposit protection, liquidity, volatility, technology, wallet, third-party, concentration, project and regulatory risks. Whatever you buy, you should find an equivalent list.

The 12-point checklist

#	Check	What you want to see
1	Primary source	A whitepaper that states mechanics with numbers
2	Draft status	Honest labelling if legal review is pending
3	Team and entity	Named people, legal entity and jurisdiction
4	Audit	A named firm, public report and scope
5	Admin powers	Clear list of who can change what
6	Vesting	Locked, immutable schedules for insiders
7	Supply	Fixed cap and no hidden mint function
8	Liquidity	Lock length and size stated
9	Payment flow	Funds forwarded to a treasury, not pooled
10	Dependencies	Third parties listed, with fallbacks
11	Refunds and terms	Written terms, not just a chat promise
12	Official links	One verified domain, no lookalikes

Applying it to a real draft

Take the Bitcoin.one whitepaper. It scores well on specificity: stage sizes, prices, a hard cap, contract names, fee ceilings and a vesting contract described as having no owner or pause function. It is honest that it is a draft not reviewed by legal counsel, and honest that an external audit is planned and not completed. It is weak on identity: the paper does not state the team, legal entity or jurisdiction. And it does not name the audit firm. Those gaps are why checklist items 3 and 4 stay open, and why we would not call it safe or unsafe, only unverified on those points. The presale walkthrough covers the mechanics.

Key takeaway: specificity is not safety. A detailed paper shows effort and can be checked, but only an independent audit and a track record reduce delivery risk.

Risks the checklist cannot remove

Smart-contract bugs

Even audited contracts can fail. The paper’s testing claims (31 Foundry tests including fuzz tests, Slither with no actionable findings) are self-reported and are not a substitute for an external review. See smart-contract audits before launch.

Concentration

The paper allocates 30% of supply to the treasury, unlocking weekly over 52 weeks, and notes owner keys are team-held. Insider supply is a central price risk. We unpack the schedule in token vesting explained.

Oracles and bridges

Presales that accept multiple coins rely on price feeds and cross-chain tools; if they fail, pricing or minting can go wrong. The paper names LayerZero, Chainlink and Pyth as dependencies that could fail.

Regulation and tax

Laws differ by country, and the project says it does not geo-block. You are responsible for local rules and taxes, so check your own jurisdiction’s current guidance before buying.

Lookalike sites

Scammers copy presale pages. Type the domain yourself or use a link from a source you have verified, and never share a seed phrase with anyone.

A sensible process

1. Read the primary source start to finish.
2. Fill in the 12-point table; leave blanks as blanks.
3. Decide a maximum loss in advance and keep it small relative to your savings.
4. Test with the smallest purchase the project allows.
5. Write down the date you will re-evaluate.

The Bitcoin.one risk page offers a rule of thumb of capping high-risk investments at 10% of your money. That is general guidance from the project, not personal advice. Learn the mechanics with our guide to reading a crypto whitepaper, and remember nothing here is investment advice.

Scam patterns that look like presales

Not every presale is a legitimate project with weaknesses. Some are built to take money. Patterns to recognise:

• Urgency with no mechanism. Countdown timers and “last chance” banners, without stated stage rules.
• Guaranteed returns. Any promise of profit is a red flag. Legitimate papers, like the one from Bitcoin.one, state that buybacks are not a price floor and that you may lose everything.
• Anonymous everything, no code. No contract addresses, no source, no audit plan.
• Pooled wallets. Payments sent to a personal wallet rather than a contract. The Bitcoin.one paper says its presale contracts forward payments to the treasury in the same transaction, with no pooled funds, which is a verifiable design claim.
• Support by direct message. Real teams do not ask for your seed phrase or ask you to “validate” your wallet.

What honest uncertainty looks like

Compare two sentences. One says “Audited by leading firms.” The other says “An external audit is planned before the token launch and the report will be published; the contracts are not yet externally audited.” The second is less impressive and more useful. Favour projects whose documents contain sentences like the second, and treat their absence as a cost.

Sizing and discipline

Risk management matters more than any checklist. Decide in advance:

1. The maximum amount you can lose without changing your life.
2. The date and condition under which you would reconsider.
3. Whether you will claim and hold, or claim and sell, and why.

Write these down before the purchase, because emotions change once a price moves. If you cannot answer the first question, you should not buy.

After you buy

Keep records of every transaction for tax. Watch for claim instructions from official channels only. Be ready for delays, because launch dates in a roadmap are targets. And re-read the token vesting article so that you know when new supply can arrive at the market.