Solana makes launching a token cheap and almost instant — which is exactly why it's also the easiest chain to launch a scam on. Most rug pulls aren't clever. They leave the same handful of fingerprints in the contract and the chart, every time. Learn to check for these four, and you'll filter out the majority of bad tokens before you ever risk a dollar.
1. Mint and Freeze Authority
Every SPL token on Solana can have two special permissions attached to it: mint authority and freeze authority. Mint authority lets whoever holds it create new tokens out of thin air, at any time, in any amount. Freeze authority lets them lock any wallet's tokens so that wallet can no longer sell.
Legitimate projects almost always renounce both shortly after launch — meaning nobody, including the creator, can use them anymore. If a token still has an active mint or freeze authority, the developer has a standing button that lets them dilute every holder to zero or trap buyers with tokens they can never sell.
2. Liquidity That Isn't Locked
When a token launches, its creator pairs it with real capital (usually SOL) inside a liquidity pool — that pairing is what lets anyone buy or sell. The classic rug mechanic is simple: the developer removes their side of that pool in one transaction, the price collapses instantly, and every holder is left with a token worth nothing.
This is why locked or burned liquidity matters. Locking sends the LP tokens to a time-locked contract the developer can't touch for a set period; burning destroys them permanently. Either one means the pool can't be pulled. If a token has meaningful volume but you can't find any lock or burn confirmation, treat that as unproven, not safe.
If you're not sure what liquidity means as a number on an alert or chart, our meme coin glossary breaks that down alongside MCap, FDV, and every other metric you'll see.
3. Who Actually Holds the Supply
Every Solana explorer lets you see the top holders of any token. What you're checking for is concentration: if the top five or ten wallets — excluding the liquidity pool itself — hold a large share of the total supply, one of them selling can crash the price on everyone else. There's no single universal cutoff, but the pattern to distrust is a handful of wallets holding most of the supply while thousands of small buyers split the rest.
Watch especially for wallets that received tokens directly from the deployer wallet before public trading opened. That's the insider allocation, and it's the supply most likely to be dumped on early buyers.
4. Volume That Doesn't Match the Story
Organic hype has a shape: buyers trickle in, volume grows with social activity, and price moves in both directions as people take profit. Manufactured hype looks different — a burst of near-identical buy sizes seconds apart, volume with almost no sells, or a token with heavy 24-hour volume but a Twitter or Telegram presence that's days old and barely active. None of these prove a rug on their own, but stacked together they're a strong signal the activity is coordinated rather than real demand.
Checking All Four in Under a Minute
Manually pulling up an explorer, reading the contract, and counting top holders works, but it's slow — especially on Solana, where a token can double before you finish reading it. This is exactly the gap DexsAlertBot's Token Checker closes: paste any contract address and it returns a risk score out of 100 and a plain GOOD or RISK verdict, condensing these same signals into one message.
Want the full manual walkthrough, explorer and chart included? See our step-by-step contract verification guide.
Quick pre-buy checklist
- Mint authority and freeze authority are both renounced
- Liquidity is locked or burned, not just sitting with the deployer
- Top holders (outside the pool) aren't dominated by a handful of wallets
- Volume and social activity tell a consistent, believable story
Frequently Asked Questions
Can a rug pull happen even if liquidity is locked?
Yes. A liquidity lock only prevents the pool from being pulled. It doesn't stop an active mint authority from diluting holders, or a concentrated group of wallets from dumping supply. Locked liquidity removes one risk, not all of them.
Is a token safe once mint and freeze authority are renounced?
Renouncing those authorities removes two specific attack paths, but liquidity and holder concentration still need to be checked separately. Treat renouncement as one passed check, not a full safety guarantee.
How fast can a rug pull actually happen?
A liquidity pull is a single transaction and can drain a pool in seconds, with no warning beyond the signals covered in this guide. That speed is exactly why checking beforehand matters more than reacting after.
Can these checks be done automatically?
Yes. DexsAlertBot's Token Checker reads these same contract-level signals and returns a risk score and verdict in seconds, so you don't have to check each one manually.
Speed matters here for a reason: our guide on why traders miss early gains covers why checking fast, while a token is still early, matters as much as checking thoroughly.
Run this checklist in one message
DexsAlertBot's Token Checker scores these signals for you — free, instant, right inside Telegram.
Try the Token Checker →⚠️ This article is educational and not financial advice. No checklist eliminates risk entirely — always do your own research (DYOR) before buying any token.