How to check a Solana token for a rug pull before you buy

Most rug pulls on Solana aren't clever. They rely on people buying before they look. The good news: the biggest warning signs are written on the blockchain itself, and you can read them in a few minutes without any technical background.

Here are the five checks we run on every token, in the order we'd do them.

1. Can someone create more tokens?

Every Solana token has a mint authority: the address that is allowed to create new tokens. If it is still set, that person can create millions of new tokens at any moment and sell them, and every existing holder's share shrinks.

For a token that has launched, you want the mint authority disabled (shown as empty or "none"). A fixed supply is the norm for community tokens.

2. Can someone freeze your tokens?

The freeze authority can lock the tokens in any wallet. A frozen token can't be sent or sold. This is behind the classic "you can buy but you can't sell" trap.

Stablecoins like USDC keep a freeze authority on purpose, because they are regulated and can freeze stolen funds. For a new meme or community token there is no good reason for it. You want it disabled.

3. Are there hidden rules?

Newer tokens can use Token-2022, a version of the Solana token program with optional extras. Most are harmless, but a few deserve a closer look:

• Transfer fee: part of every transfer or sale goes to the creator, and the fee can often be raised later.
• Permanent delegate: one address can move or burn tokens from any wallet, without asking.
• Transfer hook: every transfer runs a program chosen by the creator, which could block selling.
• Default frozen: new holders start frozen until the creator unfreezes them.

4. Is the name a copycat?

Scammers love famous names. A token called "USDC" or "BONK" with a different contract address is not the real one. The same goes for new projects: a fake with the same name and logo often appears minutes after a real launch. The only address that counts is the one the project publishes on its own website, never one from a DM, a reply or an ad.

5. Who holds the supply?

Look at the largest holders. A liquidity pool or a bonding curve holding a big share is normal: that's where trading happens. One ordinary wallet holding a large share is a risk, because it can sell into everyone else at once.

Do all five in one go

We built a free tool that runs these checks for you and explains the result in plain words: the Token Safety Checker. Paste a contract address; no wallet or sign-up needed, and we don't store what you check.

Two honest limits: no tool can see whether the liquidity is really locked, who is behind a project or whether a website is genuine. And no red flags never means a token is safe. It means the most common traps aren't there.

How $ODDI is set up

Oddi Forge launches with mint and freeze authority disabled, a public bonding curve with no presale, and team tokens vested on-chain. You can run every check above on $ODDI yourself once it's live. The official contract address goes to the waitlist first and will only ever be published on oddiforge.com.