Check a Solana token for rug pull risks before you buy

A Solana token is defined by its mint account, owned by the SPL Token program or Token-2022. An active mint authority can create more tokens at will and sell them into the pool, so it fails for anything but recognised issuers such as USDC, USDT, PYUSD or JitoSOL. An active freeze authority can freeze any holder's account so it cannot sell, which is how honeypots work, so it warns. Both are removed with one SetAuthority instruction, which the Revoke Mint Authority and Revoke Freeze Authority tools send.

Token-2022 mints can carry extensions that change what a transfer means. The checker decodes every extension present: transfer fees (with the rate and whether the fee authority can raise it), permanent delegate, which can move tokens out of any wallet and always fails, transfer hooks, default frozen accounts, non-transferable and pausable mints. Mutable metadata and an unreachable metadata URI are reported too, because a mutable name or logo can be changed after you buy.

Pools are found through DexScreener's public token API and then read on chain, where the owner program decides the venue. For pools that issue LP tokens, Raydium AMM v4, Raydium CPMM, PumpSwap and Meteora DAMM v1, the pool records how much LP it issued. Burning LP with the token program lowers the LP mint's supply but not that record, so burned LP is the difference plus any LP sent to a burn address. LP held by Raydium's Burn & Earn authority or by accounts of Jupiter Lock, Streamflow or a Meteora lock escrow counts as locked; the rest is unlocked and can be withdrawn by whoever holds it.

Meteora DAMM v2 has no LP token. Each position stores unlocked, vesting and permanently locked liquidity, and the checker adds them up over every position in the pool. Worked example: a pool whose 2 positions hold 99.99% permanently locked liquidity and 0.01% unlocked shows 99.99% locked and passes. Raydium CLMM, Orca Whirlpool and Meteora DLMM use individual positions with no LP supply, so they are listed but not scored. The liquidity check passes at 95% or more burned or locked, weighted by each pool's USD liquidity, warns from 50% and fails below; tokens still on the pump.fun curve show curve progress instead, since no LP exists yet.

Top-10 concentration is computed over the largest holders with pool vaults and burn addresses excluded, so a pool holding 40% of supply does not look like a whale. The creator is read from the pump.fun bonding curve or the Raydium LaunchLab pool when the token launched there, otherwise from the payer of the mint's first transaction when its history is short enough to reach. A creator holding 5% or more warns and 20% or more fails, because one sell from that wallet moves the price.

On-chain configuration says nothing about intent. A token with every authority revoked and all LP burned can still collapse because insiders bought the first blocks through many wallets, or because the team sells tokens it holds elsewhere. Thirty wallets holding 2% each can be one person, and this report does not trace funding between wallets. Treat it as the first ten minutes of research, not the last.