Scanner · Solana + EVM
Rug pull checker and token scanner
Paste a contract address: 8 on-chain checks, one grade from A to F.
Full guide and FAQ12 min read
On this page
- How the rug pull checker works
- The 8 checks, one by one
- What the grade from A to F means
- Rug pulls in numbers
- Honeypot check on EVM chains and on Solana
- Rug checker, honeypot checker or block explorer?
- Supported chains
- Scan a wallet: the risk of every token it holds
- How to check a token for a rug pull, step by step
- What an automated scan cannot see
How the rug pull checker works
Paste a token contract address, or type its name or ticker, and press Scan. The checker reads the token straight from the chain and from public data sources, runs eight checks and returns one scam score from 0 to 100 with a grade from A to F. Most scans finish in a few seconds.
Every check is explained in plain words next to the result, with the numbers behind it: who can mint, how much of the supply the top wallets hold, whether the liquidity can be pulled, whether the token can actually be sold. You see why a token got its grade, not just the grade.
Your first scan is free and needs no account. The result is automated on-chain data, not financial advice.
The 8 checks, one by one
Each check returns its own risk from 0 to 100. The scam score is the weighted average of the checks that returned data, so a missing source never counts as a pass. The table shows the weight of each check and the finding that, on its own, pushes the grade to F.
| Check | Weight | What raises the risk | Critical red flag |
|---|---|---|---|
| Mint & freeze | 20% | Mint or freeze authority still active | Active mint authority |
| Holders | 20% | Top 10 wallets above 20%, 35% or 50% of supply; fewer than 1,000 holders | One wallet above 20% |
| Liquidity | 15% | Under $50,000, $20,000 or $5,000; less than half of the LP locked | Liquidity can be pulled |
| Creator wallet | 15% | Creator holds more than 10% or 20%; 3 or more, then 10 or more tokens launched | Linked to confirmed scams |
| Selling & fees | 15% | Transfer fee or tax above 0%, then above 10%; owner can change the tax | Honeypot, permanent delegate, non-transferable, balance control |
| Token age | 5% | Younger than 30 days, 7 days, 24 hours | None |
| Metadata & contract | 5% | Name and image can change; contract unverified or upgradeable | None |
| Website & socials | 5% | Fewer than 3 links, or none | None |
Mint and freeze authority
The mint authority can create new tokens and dilute every holder; the freeze authority can lock the tokens in your wallet so you cannot sell. On a memecoin both should be revoked. On EVM chains the equivalent is an owner who can pause trading or blacklist wallets.
Holder concentration
We add up the share of the 10 largest wallets, leaving out pools, lockers, burn addresses and exchange wallets. Below 20% is spread out, 20 to 35% is worth watching, 35 to 50% is high, and above 50% a few wallets can crash the price. A single wallet with more than 20% is a critical red flag. Few holders raise the risk too: under 50 wallets the market is easy to manipulate.
Liquidity
Liquidity is the money in the trading pools. Under $5,000 even small sells move the price a lot; from $50,000 the check stops worrying about size. If wallets, rather than lock contracts, control at least half of the LP tokens, whoever added the liquidity can pull it: that is the classic rug pull.
Creator wallet
The wallet that created the token tells a lot. A creator still holding more than 20% of the supply can dump it; one that has launched ten or more tokens fits the serial launcher profile; one linked to confirmed scams is a critical red flag whatever else the token looks like.
Selling and fees
This check answers the only question that matters after you buy: can you sell, and at what cost? It covers honeypot code, buy and sell taxes, a tax the owner can raise later, and the Token-2022 traps described in the honeypot section below.
Token age
Most rugs happen in the first 24 hours, so a brand-new token carries more risk by default. The check weighs little, 5%, because age alone proves nothing: it only says there is not much history to judge.
Metadata and contract
On Solana: can the name, symbol and image still be changed, for example to impersonate another project later? On EVM chains: is the contract code published, and can it be upgraded so that the rules change after you buy?
Website and socials
Links to a website and social channels are easy to fake, so this check weighs only 5%. Their total absence is still a signal: a token with no site and no channels is anonymous by design.
What the grade from A to F means
The grade follows the score in steps of 15 points: A below 15, B below 30, C below 45, D below 60, E below 75, F from 75. Green means 0 to 29, yellow 30 to 59, red 60 to 100. When fewer than five checks have data the light stays grey: there is not enough information to judge.
Some findings are serious enough to decide the result on their own. An active mint authority, one wallet holding more than 20% of the supply, unlocked liquidity, a creator linked to confirmed scams, a non-transferable token, a permanent delegate, a confirmed honeypot or an owner who can change balances push the score to at least 75, so the grade is F whatever the other checks say.
Rug pulls in numbers
Rug pulls grew with decentralized exchanges, where anyone can list a token in minutes without an audit. According to Chainalysis, rug pulls took more than $2.8 billion from victims in 2021, 37% of all crypto scam revenue that year ($7.7 billion), up from 1% in 2020.
The pattern has not changed since: most of the damage happens to new tokens, in the first hours or days, before there is any history to look at. That is why the checker looks at what the contract allows and how the supply is spread, which can be read from the first block.
Honeypot check on EVM chains and on Solana
A honeypot is a token you can buy but cannot sell, or can only sell at a loss because of a huge tax. On Ethereum, Base, BNB Chain, Arbitrum and Polygon the checker uses honeypot.is and GoPlus Security to simulate a buy and a sell, read the buy and sell tax, and flag code that lets the owner pause trading, blacklist wallets, change balances or raise the tax later.
Solana tokens work differently, so the same traps take other forms. The checker looks for an active freeze authority, which can lock the tokens in your wallet, and for Token-2022 extensions such as a permanent delegate (an address that can move or burn your tokens), the non-transferable flag and transfer fees.
- EVM: sell simulation, buy and sell tax, owner-controlled tax, pause and blacklist functions, balance control.
- Solana: freeze authority, permanent delegate, non-transferable tokens, transfer fee.
Rug checker, honeypot checker or block explorer?
Three kinds of tools come up when you search how to check a token. They answer different questions, and they work best together.
| Rug pull checker | Honeypot checker | Block explorer | |
|---|---|---|---|
| Question it answers | Can the people behind this token hurt holders? | Can I sell this token, and at what tax? | What happened on-chain, transaction by transaction? |
| What it reads | Authorities, holders, liquidity, creator, fees, contract | Buy and sell simulation, taxes, blocking code | Raw accounts, transfers and balances |
| Result | One score and grade, each check explained | Pass or fail, tax percentages | Data to interpret yourself |
| Best for | A first decision in seconds | EVM tokens before selling or buying | Checking a specific wallet or transfer |
Supported chains
Solana: any SPL or Token-2022 token, including tokens still on a launchpad bonding curve, where the result shows the launch phase separately. EVM: ERC-20 tokens on Ethereum, Base, BNB Chain, Arbitrum and Polygon. A 0x address is matched to its chain automatically, and you can also pick the chain yourself.
If you type a name instead of an address, the checker lists up to five tokens with that name, sorted by trading volume, and flags pools whose liquidity looks inflated. Copycat tokens with the same name are common, so always compare the address with the one published by the project.
Scan a wallet: the risk of every token it holds
Paste a Solana wallet address instead of a token address and the checker offers to list the tokens that wallet holds, up to fifty, largest balances first. One tap scans any of them. It is a quick way to review your own wallet, or a wallet you are looking at, without connecting anything.
For EVM wallets the checker links to the chain explorer.
How to check a token for a rug pull, step by step
A scan takes seconds, but reading it well takes a minute. This is the order we suggest.
- Copy the contract address from the project's own channels, not from a reply or a direct message.
- Paste it in the checker and read the red flags first: any critical flag is enough to stop.
- Look at mint and freeze authority: on a memecoin both should be revoked.
- Look at the holders: high concentration in the top 10 or a creator with a large share means a few wallets can move the price.
- Look at the liquidity: thin or unlocked liquidity can disappear in one transaction.
- Check whether you can sell and at what tax.
- For a deeper look at who holds the token, open the holder report; to follow the numbers over time, add the token to the Monitor.
What an automated scan cannot see
On-chain checks see what the contract allows and how the supply is spread. They cannot see who the team is, whether promises made on social media will be kept, whether the volume is real or whether a group is coordinating a pump. A clean scan is the absence of known red flags, not a guarantee.
Things also change after a scan: liquidity can be removed, holders can sell, an upgradeable contract can get new rules. Scan again before any decision and keep an eye on the tokens you follow. The daily Rug Report shows which new tokens are being flagged right now.
Have a contract address? Check it now: the first scan is free.
Scan a tokenFrequently asked questions
What is the scam score?
A number from 0 to 100 built from the eight checks above. 0 to 29 is green (low risk), 30 to 59 yellow (be careful), 60 to 100 red (high risk). With fewer than five checks available the light stays grey.
Is the scanner free?
Your first scan is free and needs no account. After that, sign in with your Solana wallet: each scan uses credits, which you earn by completing tasks on the Rewards page or top up by converting NEMIRA tokens.
Which tokens can I scan?
Any Solana token (SPL or Token-2022, pump.fun included) and ERC-20 tokens on Ethereum, Base, BNB Chain, Arbitrum and Polygon. A 0x address is matched to its chain automatically; you can also pick the chain yourself.
Where does the data come from?
On Solana: the chain itself plus Dexscreener, RugCheck, Jupiter and pump.fun. On EVM chains: public RPC nodes, GoPlus Security, honeypot.is and Dexscreener. Each result shows which sources answered and when the scan ran.
Does a low score mean a token is safe?
No. The scan is automated on-chain analysis, not financial advice. A low score only means none of our checks found a problem: always do your own research.
Can a token with grade A still be a rug pull?
Yes. Grade A means none of the eight checks found a known red flag at the time of the scan. A team can still sell, abandon the project or mislead buyers off-chain. Treat the grade as one input, not as a verdict.
What is mint authority and why does it matter?
It is the key that can create new tokens. While it is active, the creator can mint any amount and dilute every holder, so the checker treats it as a critical red flag on Solana tokens.
Is locked liquidity enough to call a token safe?
No. Locked or burned liquidity removes one way to rug, but holders can still dump, the creator can still sell their share, and the token can still carry high taxes or a freeze authority.
Do I need to connect my wallet to scan a token?
No for the first scan. After that you sign in with your Solana wallet by signing a message: no transaction and never your seed phrase.
Does the checker work on tokens launched a few minutes ago?
Yes. New tokens are where most rugs happen, so the age check flags anything younger than 24 hours. Some sources need time to index a new token: if fewer than five checks have data, the light stays grey.
How is this different from other rug checkers?
It covers Solana and five EVM chains in one place, combines several public sources in each scan, explains every check in plain words and shows which sources answered and when.