Token Scanner is a free tool that analyzes public on-chain signals to detect rug pull or honeypot risks on Solana tokens. Here's exactly how it works.
Each scan adds up the score of every check that passes. The total score is out of 145 points.
Checks whether the mint authority (which can create new tokens) has been revoked. If still active, the creator can dilute the supply at will.
Checks whether the freeze authority (which can lock a token account) has been revoked. If still active, the creator can prevent a holder from selling - a strong honeypot signal.
Calculates the share of supply held by the 10 largest accounts. High concentration means a small number of wallets can crash the price by selling.
Checks whether the token's name, symbol, or logo (Metaplex metadata) can still be changed by the creator - a possible vector for deceptive rebranding.
Checks what share of the LP tokens in the main Raydium pool are burned or locked. If the creator keeps control of the liquidity, they can withdraw it (a classic rug pull).
Detects risky Token-2022 extensions: permanent delegate (direct theft of a holder's tokens), transfer hook (arbitrary code on every transfer), hidden transfer tax, accounts frozen by default.
For recent (< 7 days) and low-activity pools, analyzes the earliest transactions to detect whether a small number of wallets grabbed most of the supply at launch (sniping/bundling). Neutral for older or high-volume tokens - not reliably verifiable in those cases.
The risk level is calculated from the percentage of the total score obtained:
The API is free and open. The full schema (OpenAPI) is available at /api/openapi.json.
GET /api/scan/<adresse-du-mint>GET /api/history/<adresse-du-mint>Paste the token's mint address above and Token Scanner runs 7 automated checks - mint & freeze authority, holder concentration, LP lock, metadata mutability, Token-2022 extensions, and early sniper concentration - then gives you a risk score. No tool can guarantee 100% safety, but these checks catch the most common rug pull and honeypot patterns.
A rug pull is when a token's creator drains the liquidity pool or mints unlimited new tokens, crashing the price to zero and leaving holders with worthless tokens. Token Scanner's mint authority and LP lock checks are designed to catch this before it happens.
A honeypot is a token you can buy but can't sell - usually because the freeze authority is still active, or a hidden transfer tax/permanent delegate blocks or drains sell transactions. The freeze authority and Token-2022 extensions checks target exactly this.
No. A high score means the common on-chain rug pull and honeypot signals weren't detected - it's not financial advice and doesn't replace your own research (DYOR). See the Known limitations section below for what this tool can't catch.
Yes. Both the web interface and the underlying API are free and open - see the API section below to query it directly.
Paste the token's mint address into the scanner above - the 'Mint authority' result tells you whether it's been revoked. You can also query the API directly at GET /api/scan/<mint-address>.
This tool provides automated analysis of public on-chain signals. This is not financial advice and does not guarantee the safety of any token. Always do your own research (DYOR).