You found a Solana token. Maybe someone sent you a contract address, maybe you spotted it on DexScreener, maybe it's trending on pump.fun. Before you put any money in, there are five checks you should run — every single time, on every token, without exception.
This guide walks through each check: what to look for, what a dangerous result looks like, what a safe result looks like, and how each one maps to a signal in Pumpora.
⚡ Fast track: Paste any Solana token address or pump.fun URL into @PumporaBot on Telegram and all five checks run automatically in under 60 seconds. Free, no signup. The rest of this guide explains what each check actually means so you can interpret the result intelligently.
Why Five Checks and Not One?
There is no single metric that tells you a token is safe. A token can have revoked mint authority and still be a rug. A token can have a clean creator wallet and still have a bundle problem. Each check targets a different attack vector — a different way a malicious deployer can take your money.
The five checks below are ordered by how quickly each can destroy your position and how reliably each signal predicts a bad outcome. You don't need to understand Solana's smart contract architecture to use them — you just need to know what you're looking at.
Step 1: Check Mint Authority
What it is
Mint authority is a permission on the token's on-chain account that allows the holder to create new tokens — inflating the total supply at will. If mint authority still exists and is held by the deployer, they can print unlimited new tokens at any time.
| Result | What it means | What to do |
|---|---|---|
| ✅ Revoked | No one can create new tokens. Supply is fixed. This is the standard for any legitimate project. | Safe on this check. Continue to Step 2. |
| 🔴 Active | The deployer can inflate supply and destroy the token's price instantly. A classic rug mechanic. | Treat as high risk. Only proceed if there is a documented and verifiable reason (e.g. staking emissions with published schedule). |
Where to check manually: Paste the contract address into Solscan → Token tab → look for "Mint Authority" field. If it shows a wallet address, it's active. If it shows "–" or "Disabled", it's revoked.
In Pumpora: Mint authority status is checked as part of the Authority layer — an active mint authority increases the token's risk score.
Step 2: Check Freeze Authority
What it is
Freeze authority allows the token creator to freeze any wallet holding the token, preventing that wallet from executing any transactions — including selling. If active, the deployer can lock you out of your position at any moment.
| Result | What it means | What to do |
|---|---|---|
| ✅ Disabled | No wallet can be frozen. You can always sell your position regardless of what the deployer does. | Safe on this check. Continue to Step 3. |
| 🔴 Active | The deployer holds the power to prevent you from selling at any time. This is a honeypot vector. | Do not buy unless you have extraordinary reason to trust the team. This is rare to be legitimate. |
Freeze authority is particularly dangerous because it's invisible in normal trading. Your buy will go through fine. Your sell may not — and by the time you find out, it will be too late.
⚠️ Mint + Freeze both active: If a token has both mint authority active and freeze authority active, it is almost certainly a honeypot or a scam. Exit immediately. These two permissions together give the deployer complete control over every holder's position.
Step 3: Check Creator Wallet History
What it is and why it matters most
The wallet that deployed this token has a history. Every token it has ever launched is visible on-chain. If that wallet has previously deployed tokens where liquidity was drained or abandoned, it will almost certainly do the same again.
This is the single most predictive signal for whether a token will rug. A serial rugged doesn't suddenly go legitimate. The data from thousands of historical pump.fun tokens shows that a creator with prior rug history is the strongest individual predictor of another rug — stronger than bundle activity, stronger than holder concentration, stronger than any description red flag.
| Result | What it means | What to do |
|---|---|---|
| ✅ Clean history | No prior rug-pull tokens detected from this deployer wallet. First launch or consistently legitimate track record. | Safe on this check. Continue to Step 4. |
| 🔴 Prior rug history | This deployer has run the same playbook before. They launch, manufacture hype, drain liquidity, and move on. | Do not buy. No chart setup, no narrative, and no social proof changes this calculus. |
How to check manually: Find the deployer wallet address on Solscan, then look through its transaction history for token deploy instructions. Trace each token to see whether its liquidity pool still exists. This is tedious and takes 10–20 minutes per token.
In Pumpora: The Creator layer (max 25 points) cross-references the deployer wallet against a continuously updated database of known rug-pull wallets. A score of 15 or above on this layer means confirmed or likely prior rug history.
Step 4: Check for Bundles at Launch
What it is
A bundle is a set of coordinated transactions executed in the same block or within the same Jito bundle — effectively simultaneous. When a token launches and the first 20, 30, or 50 buys all happen in the same block from different wallet addresses, those are not 50 independent retail traders. That is one entity controlling 50 wallets, buying a large percentage of supply before the public even sees the token.
Bundle buying at launch serves one purpose: manufacturing the appearance of demand while concentrating supply in hands that will sell into genuine retail buyers. When the bundler sells, it hits all at once — a single coordinated dump that outpaces any retail exit.
| Result | What it means | What to do |
|---|---|---|
| ✅ No bundles detected | Early trades show organic distribution across unrelated wallets. The buy pressure was real retail demand. | Safe on this check. Continue to Step 5. |
| 🔴 Bundles detected | Coordinated wallets accumulated supply at launch. A sell event is coming — the question is only when. | Avoid, or enter with the explicit understanding you are buying ahead of a coming coordinated sell. |
In Pumpora: The Bundle layer (max 25 points) analyzes the first block and first few blocks of trading activity to detect wallet clustering, same-block buys, and inter-wallet funding patterns. See also: Pumpora's full bundle detection guide.
Step 5: Check Holder Concentration
What it is
Holder concentration measures how much of the total token supply is held by the top wallets. If the top 10 wallets hold 70% of supply, a coordinated sell from just those wallets will crater the price before anyone else can exit. You are always last when you are retail in a highly concentrated token.
| Top 10 holder % | Risk level | Notes |
|---|---|---|
| < 30% | Low | Well distributed. No single group can crash the price alone. |
| 30–50% | Medium | Moderate concentration. Manageable if wallets are diverse. |
| 50–70% | Elevated | A coordinated exit can do significant damage. Be cautious. |
| > 70% | High | A single sell event by top holders will destroy price before retail can exit. |
Where to check manually: Solscan → Token → Holders tab shows the top 20 holders and their percentage. Add up the top 10.
In Pumpora: The Holder layer (max 10 points) checks top-wallet concentration and flags wallets that appear to be linked (same funding source, same timing of purchases).
Running All 5 Checks at Once with Pumpora
Manual checks across Solscan take 15–20 minutes per token. On a fast-moving launch, you don't have 15 minutes. You have 60 seconds before the price moves or the window closes.
Pumpora runs all five checks — plus five additional signals including wash trade detection (Benford's law), timing analysis for bot activity, description NLP, logo fingerprinting, and semantic similarity — in a single scan returning results in under 60 seconds.
✅ What a safe token looks like
Mint authority revoked. Freeze authority disabled. Creator has no prior rug history. No coordinated bundles at launch. Top 10 holders under 35% of supply. Pumpora score 0–24.
🔴 What a dangerous token looks like
Active freeze authority. Creator wallet with 3 prior abandoned tokens. 40 wallets bought in the same block. Top 5 wallets hold 68% of supply. Pumpora score 75+.
✅ The rule worth memorizing: If a token passes all five checks — revoked mint authority, disabled freeze authority, clean creator wallet, no bundles, holder concentration under 40% — the on-chain rug risk is low. The remaining risk is market risk: the token might not go up, might lose interest, or might simply die quietly. That's normal meme token risk. The five checks filter out the active malice.
Run all 5 checks in 60 seconds
Paste any pump.fun link, DexScreener URL, or Solana contract address into @PumporaBot
Open @PumporaBot free →3 free scans on first /start · no signup · no credit card
Frequently Asked Questions
How do I know if a Solana token is safe to buy?
Run five checks before buying: (1) verify mint authority is revoked, (2) verify freeze authority is disabled, (3) check the creator wallet for prior rug history, (4) check for coordinated bundle buys at launch, and (5) check holder concentration. Pumpora runs all five automatically in one scan.
What is mint authority on a Solana token?
Mint authority is a permission that allows the token creator to print additional tokens after launch. If it is not revoked, the deployer can inflate the supply at any time and destroy the price. A safe token has mint authority revoked — verifiable on Solscan or automatically checked by Pumpora.
What does freeze authority mean on a Solana token?
Freeze authority allows the creator to freeze any wallet holding the token, preventing that wallet from selling. If active, the deployer can lock you out of your position at any time — a core honeypot mechanic. Safe tokens have freeze authority disabled.
How do I check if a Solana token creator has rugged before?
You need to trace the deployer wallet address through all its prior token launches on Solscan and verify whether those tokens still have active liquidity. This is slow to do manually. Pumpora automates this check and cross-references the creator wallet against a database of known rug-pull wallets in every scan.
Related reading: How to Detect a Rug Pull on Solana · pump.fun Token Checker · Solana Bundle Detection · Rugcheck.xyz Alternative