Complete Solana Token Safety Guide — Avoid Rug Pulls
How to audit any Solana token for rug pulls, honeypots, and scams. Red flags, tools, and best practices for safe trading.
Why Token Safety Matters
Solana's low fees and fast transactions make it ideal for token trading, but they also make it cheap for bad actors to launch scam tokens. Rug pulls, honeypots, and authority abuse cost traders millions every month. Unlike Ethereum, where high gas fees create a natural barrier, anyone can deploy a Solana token for less than a dollar.
The good news is that the same on-chain transparency that makes Solana easy to scam with also makes scams easy to detect — if you know what to look for. This guide walks you through the top red flags, a step-by-step checking process, and the tools you can use to audit a token before you buy.
Top 5 Red Flags
- 1. Mint authority not revoked. If the creator can still mint new tokens, they can dump unlimited supply into the market at any time. This is the single most common rug pull mechanism on Solana.
- 2. Freeze authority active. A freeze authority lets the creator freeze any token account, preventing holders from selling. Legitimate projects revoke both mint and freeze authority after launch.
- 3. Low liquidity. If the liquidity pool has less than a few thousand dollars, a single seller can crash the price to zero. Low liquidity also makes it impossible to exit a meaningful position.
- 4. High holder concentration. If one or two wallets hold more than 50% of the supply, a coordinated dump is inevitable. Check the top 10 holders on Solscan before buying.
- 5. Suspicious creator history. If the token creator's wallet has launched dozens of tokens in a short period, it is likely a serial scammer. Check the creator address on Solscan for prior token deployments.
How to Check a Token — Step by Step
- Step 1: Copy the token mint address from the DEX or chart you are viewing.
- Step 2: Paste it into a safety checker like our Safety Check tool to automatically scan authorities, holders, and liquidity.
- Step 3: Review the mint and freeze authority status. Both should be revoked.
- Step 4: Check the top 10 holders. No single wallet (excluding liquidity pools and team-locked wallets) should hold more than 10-15% of supply.
- Step 5: Verify liquidity is locked or burned. If the liquidity provider tokens are in the creator's wallet, they can pull liquidity at any time.
- Step 6: Look at the creator wallet history on Solscan. A wallet that has created many short-lived tokens is a red flag.
Tools for Checking Tokens
You do not have to check everything manually. Several tools automate the process:
- CreateSolana Safety Check: A free tool that audits mint authority, freeze authority, holder concentration, and liquidity in seconds. See the Safety Check tool guide for details.
- Solscan: Use for manual deep dives into holder lists, transaction history, and creator wallet activity.
- DexScreener & Birdeye: Check liquidity depth, trading volume, and price history. Low volume with high market cap is suspicious.
- RugCheck: A third-party scanner that scores tokens based on on-chain risk factors.
For a broader overview of the ecosystem, see our list of best Solana token creator tools.
What to Do If You Suspect a Scam
If you have already bought a token and suspect it is a scam, act quickly. Try to sell immediately — if the sale fails, the token may be a honeypot with a frozen account. Do not buy more hoping to average down. If you cannot sell, report the token address to community scam-tracking channels and move on. Recovering funds from a rug pull is extremely rare on any blockchain.
Going forward, always run a safety check before buying any new token. It takes under 30 seconds and can save your entire position. Treat any token with unrevoked authorities as high risk regardless of how popular it appears.
Frequently Asked Questions
What is a rug pull on Solana?
A rug pull is when a token creator abandons the project and removes liquidity or dumps their holdings, crashing the price to near zero. It is the most common scam in crypto.
What is a honeypot token?
A honeypot is a token you can buy but cannot sell. The creator uses freeze authority or smart contract logic to block sells while allowing buys, trapping buyer funds.
Can a token be safe today and risky tomorrow?
Yes. If mint authority is not revoked, a creator can mint new tokens at any time. Always re-check authorities before large purchases, even on tokens you have traded before.
Is revoking mint authority enough to make a token safe?
It is necessary but not sufficient. Also check freeze authority, liquidity lock status, and holder concentration. A token with revoked mint authority can still be risky if liquidity is not locked.
Ready to build on Solana?
Non-custodial tools, transparent fees, no signup. 30–50% cheaper than Smithii.