Uses dashboards, SQL queries, wallet labels, token flows, governance records, contract permissions, and liquidity data to evaluate protocols and investigate claims.