Security
How to Check if a Solana Token Is Safe Before Buying
A practical checklist to assess a Solana token before buying: authorities, Token-2022 extensions, holder distribution, liquidity and on-chain activity.
On this page
Before you buy: start with the mint address
A token name, logo or social media account can be copied. The mint address is the token's unique on-chain identifier. Always obtain it from a source you trust, then check that exact address in an explorer.
â ī¸ The most important rule
Never rely on a ticker or a search result alone. Scammers can create tokens with the same name and symbol as legitimate projects.
Get it from the project's official website or another independently verified channel.
Search the exact address on Solscan or Solana Explorer.
Compare the mint address, name, symbol and metadata with the project's official information.
2. Look for Token-2022 extensions
Solana tokens can use the original Token Program or Token-2022. Token-2022 adds optional extensions that can change how a token behaves. Do not assume that checking Mint and Freeze Authority is enough.
| Extension or feature | Why it matters |
|---|---|
| Permanent Delegate | A designated authority can transfer or burn tokens from any token account for that mint. Holders cannot remove this delegate from their own accounts. |
| Transfer Fee | A fee can be withheld on transfers. Check the fee rate, maximum fee and who controls the fee configuration or withheld tokens. |
| Transfer Hook | Transfers can invoke an additional program. Understand what that program does and whether it can affect transfer behavior. |
| Default Account State | New token accounts can be initialized in a frozen state, subject to the extension's authority configuration. |
đĄ A useful distinction
An extension is not automatically a red flag. It is additional functionality. The important questions are what it does, who controls it and whether its behavior matches what the project tells users.
3. Examine holder distribution
A token can have renounced authorities and still be highly concentrated. Review the largest holders and determine whether a small number of wallets could heavily influence the market.
| What to inspect | Questions to ask |
|---|---|
| Top holders | What share of supply do the largest addresses control? |
| Creator and team wallets | Are allocations disclosed? Could insiders sell a large amount at once? |
| Liquidity pool | Is the pool address included among the largest holders? Do not mistake pool balances for a single investor. |
| Related wallets | Could several addresses belong to the same entity? Separate wallets do not necessarily mean independent owners. |
| Distribution over time | Are holdings becoming more distributed, or are large amounts moving to a few addresses? |
â ī¸ Do not use a concentration threshold blindly
There is no universal percentage that makes a token safe or unsafe. Exchange wallets, liquidity pools, burn addresses, treasuries and vesting accounts can distort the ranking. Identify the largest addresses before drawing conclusions.
4. Verify liquidity and trading conditions
A displayed market capitalization does not tell you how much money can actually be traded. Check the liquidity available in the relevant pool and compare it with the size of the trade you intend to make.
| Metric | What it tells you | Potential warning sign |
|---|---|---|
| Liquidity | How much value is available in the trading pool. | Very little liquidity relative to the token's displayed valuation. |
| Trading volume | How much has been traded over a given period. | Unusually high volume with little depth or suspiciously repetitive activity. |
| Price impact | How much your own trade may move the price. | A small trade causes a very large price change. |
| Liquidity control | Who can withdraw or modify the liquidity position. | A concentrated or withdrawable position may create sudden liquidity risk. |
âšī¸ Liquidity is not the same as market cap
Market cap is a valuation estimate based on price and supply. Liquidity is the capital available to facilitate trades. A token can show a large market cap while having very little liquidity.
5. Review recent on-chain activity
A snapshot can miss important behavior. Look at recent transactions and the history of the creator and largest holders. Focus on patterns, not one isolated transfer.
| Activity to review | Why it matters |
|---|---|
| Large transfers | May indicate distributions, exchange deposits or potential selling pressure. |
| Creator wallet activity | Can reveal whether the creator is moving tokens or interacting with liquidity. |
| Liquidity changes | A sudden reduction in available liquidity can make exits difficult. |
| Holder growth | Sustained organic growth is more informative than a single holder-count snapshot. |
Use transaction details to identify the actual accounts and instructions involved. A wallet label or automated risk score is a starting point, not a substitute for checking the underlying activity.
6. Use independent tools, but understand their limits
| Tool | Useful for | Remember |
|---|---|---|
| Solscan | Mint details, authorities, holders, transactions and token analytics. | Explorer data helps you inspect the chain; it does not certify a project. |
| RugCheck | Automated risk signals such as authorities, holder distribution and liquidity. | A score or report can miss context and should not be treated as a guarantee. |
| Solana Explorer | Inspecting token accounts and checking token verification information. | A verified identity is not an endorsement of the token or its investment merits. |
â ī¸ No scanner can guarantee safety
Automated tools can identify useful warning signs, but they cannot prove that a project is honest, that a market will remain liquid or that a token's price will not collapse.
Your pre-purchase checklist
| Check | What you want to establish |
|---|---|
| Correct mint address | You are examining the intended token, not an imitation. |
| Mint and Freeze Authority | You understand who can mint tokens or freeze accounts. |
| Token-2022 extensions | You know whether additional permissions or transfer rules apply. |
| Holder distribution | You understand concentration and have identified major wallets. |
| Liquidity | There is enough real trading depth for the trade you are considering. |
| Recent activity | You have checked creator, holder and liquidity movements. |
| Independent research | You have compared on-chain evidence with the project's claims. |
đĄ Make the decision from evidence
If you cannot explain who controls the token, how its supply is distributed and where its liquidity sits, you do not yet have enough information to assess the risk.
Frequently Asked Questions
Does renouncing Mint Authority make a Solana token safe?
No. It prevents further minting through that authority, but says nothing by itself about holder concentration, liquidity, insider behavior, metadata or the legitimacy of the project.
Is an active Freeze Authority always a scam signal?
No. It gives its holder the ability to freeze token accounts, which may be required by some permissioned or regulated projects. Buyers should understand who controls it and why it remains active.
Can a token with a verified badge still be a bad investment?
Yes. Verification can help identify the canonical token, but it is not an endorsement, a security audit or a guarantee of value.
What is the safest way to identify a Solana token?
Use the exact mint address from a trusted source and verify it independently on a blockchain explorer. Do not rely on the name, ticker or logo alone.
Is a high RugCheck score a guarantee?
No. Automated risk tools provide signals, not guarantees. Review the underlying on-chain data and the project's claims yourself.
Does high market capitalization mean a token has enough liquidity?
No. Market capitalization is a valuation estimate, while liquidity measures the assets available for trading. Always inspect the actual pool depth.
Ready to launch your own token?
Create an SPL token directly on Solana in less than a minute. No coding. No custody. Everything happens on-chain from your wallet.
Create your token âContinue reading
What is an SPL Token? A Beginner's Guide to Solana Tokens
Learn what an SPL Token is, how it works, what information it contains, and how it differs from Ethereum's ERC-20 standard.
What is Mint Authority?
Learn what mint authority is on Solana, why it matters for your token, and when you should revoke it.
What is Freeze Authority?
Learn what Freeze Authority is on Solana, when it should be revoked, and why investors pay close attention to it.
How to Revoke Mint Authority and Freeze Authority
Learn when and why to revoke your token authorities, how to do it with Token Creator and how to verify the result on-chain.
How to Create a Liquidity Pool on Solana
Learn how to create a liquidity pool on Solana, set your token's initial price and make it tradable on decentralized exchanges.