SOLSTACKDocs

Tools

Token Inspector

Paste a mint for a 0–100 safety score plus its authorities, Token-2022 extensions, LP lock status, lookalike check, top-100 wallet forensics, price, liquidity, momentum and the deployer's track record. Read-only.

Open Token Inspector

Step by step

  1. Step 1Paste a mint address
  2. Step 2ScoredSafety score with every deduction listed, authorities, top holders, market data, trends, deployer history.

The safety score

Starts at 100 and takes fixed points off per finding. The weights are lopsided on purpose: the things that let one key take your tokens — a permanent delegate, a transfer hook, a freeze authority that has already been used, a live mint authority — cost far more than the things that merely correlate with a scam, like a token being hours old or thinly held. A critical finding caps the score at 20 regardless of everything else. Jupiter-verified tokens with deep liquidity get the authority penalties halved, since an issuer-backed token keeping its authorities isn't the same as a memecoin keeping them.

What a high score doesn't tell you

That the on-chain mechanisms for a rug are absent and the launch doesn't look coordinated — not that the token is a good buy. It can't read intent, judge the team, or simulate a trade. Treat it as one strong input.

Liquidity and the LP tokens

Revoked authorities don't stop a deployer withdrawing the pool. The inspector reads who holds the LP tokens of the deepest pool: burned, locked in a known locker, held by a program, or sitting in a wallet that can pull the liquidity. Bonding-curve tokens pass automatically. Concentrated pools have no single LP token and are reported as unchecked.

Wallet forensics

For each of the top 100 holders: their first buy next to their current share, who paid for that first buy, who sent the wallet its first SOL, and how old and active the wallet is. Sniper means a buy within five minutes of launch; Bundle means a shared first-buy fee payer; Cluster means a shared non-exchange SOL funder; Fresh means a wallet made in the last week with few transactions. Pools and program vaults are separated out, so the concentration figure is about wallets that can actually sell.

Lookalikes and momentum

A symbol or name that a Jupiter-verified token already owns, under a different mint, is flagged as a lookalike. Momentum reads the 24-hour price change, 24-hour volume and the holder count over the last week, so a token that's being dumped or emptied out shows it even when the on-chain controls are clean.

Market data

On mainnet: price with 24-hour change, liquidity summed across every indexed pool, 24-hour volume and market cap, from Jupiter with DexScreener as fallback, plus whether Jupiter lists the mint as verified. Price and holder trend charts come from GeckoTerminal and Birdeye. These are third-party feeds; if one is unreachable the score notes what it couldn't check and the rest of the page still works.

Deployer history

Every other fungible token the same update authority has created, and how many still have liquidity. Skipped for launchpad tokens, whose update authority is the launchpad's own program address.

FAQ

What does the Token Inspector show for a mint?

Its mint, freeze and update authorities, supply, decimals and holder count; for Token-2022 mints the transfer fee, close authority, permanent delegate, transfer hook and non-transferable flag, read straight off the mint. The top 100 holders come with each wallet's first buy and Sniper, Bundle, Cluster and Fresh tags. On mainnet it adds price, liquidity, whether the pool's LP tokens are burned, locked or sitting in a wallet, whether the name or symbol clashes with a Jupiter-verified token, 24-hour volume and market cap, price and holder trends, any website and socials DexScreener has on file, and the deployer's other tokens. All of it rolls up into one safety score at the top.

How is the safety score worked out?

It starts at 100 and takes fixed points off per finding, weighted toward what actually takes money. A permanent delegate, a non-transferable mint or a freeze authority that has already frozen accounts is critical and caps the score at 20 by itself. A live mint or freeze authority, a transfer hook, a 5%+ transfer tax, LP tokens sitting in a wallet or a symbol that belongs to a verified token costs 15–30. Then clustered, bundled and sniped launches, supply concentrated in a few wallets or the deployer's own, and a deployer whose other tokens are all dead. Momentum, liquidity depth and age cost the least: they're evidence, not a mechanism. Jupiter-verified tokens with over

M of liquidity get the authority penalties halved, since a stablecoin keeping its authorities isn't the same as a memecoin keeping them. Every deduction is listed with its points, and so is every check that couldn't run.

Does a high score mean the token is safe?

No. It means the on-chain mechanisms that make a rug possible are absent or weak, and the launch and holder pattern doesn't look coordinated. It can't read intent, judge the team, or simulate a trade, and a clean token can still go to zero. Treat it as one strong input, not a verdict.

Why did the score change a few seconds after it appeared?

The slow checks land after the rest: the wallet scan over the top 100 holders (first buy, funder and age for each — a few hundred RPC calls), the LP lock status, the lookalike check, the deployer's other tokens, the holder trend and the mint's age. The card shows a provisional number, marks the areas still checking in the strip and names them under the gauge; once nothing is pending, the score is final.

What are the Sniper, Bundle, Cluster and Fresh tags?

Sniper: the wallet's first buy landed within five minutes of launch (the bonding curve counts as launch) — a bot or an insider. Bundle: its first buy was paid for by an outside wallet that also paid for another top holder's. Cluster: it received its first SOL from the same wallet as another top holder — the bundle pattern with the fee payer hidden. Exchange and service wallets, which fund half of Solana, are excluded, so a cluster means a person's wallet. Fresh: under a week old with fewer than 50 transactions. Pools and program vaults are never tagged.

What does the LP check look at?

Who holds the LP tokens of the deepest pool. Revoking mint and freeze authority does nothing about the deployer withdrawing the pool, which is what most rugs literally are. Burned or locked in a known locker (Streamflow, Jupiter Lock, Raydium's locker, Solstack's LP Locker) is safe; LP tokens sitting in a wallet mean that key can drain the pool. Bonding-curve tokens pass automatically since the program holds the liquidity. Concentrated pools (Orca, Raydium CLMM, Meteora DLMM) have no single LP token, so the check reports that it couldn't run.

What's the lookalike check?

Whether a Jupiter-verified token already owns this symbol or name under a different mint. Same ticker, different token is the classic drainer and fake-airdrop setup, and it's the one thing a wallet's token list won't warn you about.

What does 'first buy' mean under Top holders?

Each top-10 holder's current share alongside their balance the first time they ever held the token, so you can see who's accumulated since versus who's already sold down from a bigger starting position.

What's 'Deployer history'?

For a mint whose update authority is a real wallet, every other fungible token that same wallet has created and how many currently have no meaningful liquidity — the fastest way to spot a serial deployer of dead tokens. Launchpad tokens (Pump.fun, LaunchLab) carry the launchpad's own program address as update authority, shared by every token it ever minted, so there's nothing to compare and the check is skipped. Mainnet only.

What's in the Trends section?

On mainnet, a Price chart from GeckoTerminal's deepest pool (5m/15m/30m candles, or 7D/30D/90D/All) and a Holders chart from Birdeye, with a top-10 concentration bar underneath. If the on-chain holder scan times out on a very large token, a Birdeye-backed 'Top holders' card fills in for it.

Can I share the top-holders card?

Yes — Share under Top holders renders the table, with its tags and first-buy bars, to an image. On a phone it opens the system share sheet; on desktop it copies the image to your clipboard and opens an X post to paste it into.

What if I paste a wallet address instead of a mint?

It still tells you what the address is, but the wallet view — holdings, portfolio value, profile, minted tokens — is the Account Inspector's job. Use that tool for anything that isn't a mint.

Does it need a wallet?

No. Read-only, and it works the same on any mint whether or not you hold it.

NextTransaction Inspector