Solana Rug Check: How to Tell if a Token is Safe (2026 Guide)#
Every day, hundreds of new Solana tokens launch — and a significant number are designed to fail. Whether it's a drained liquidity pool, a honeypot that traps buyers, a coordinated insider launch, or an outright clone of a popular token, the risks are real and largely invisible to the naked eye.
Jump2Coin's free Rug Check tool analyzes any Solana token across 20+ on-chain signals in under 5 seconds — no wallet connection required. This guide explains what each check means, how to read the results, and what to do if a token fails.
What Is a Solana Rug Pull?#
A rug pull happens when a token's creators remove liquidity or dump their holdings after attracting buyers, leaving the token worthless. On Solana, this can happen in multiple ways:
- Liquidity removal — Creator withdraws the SOL from the trading pool
- Mint authority abuse — Creator mints billions of new tokens and dumps them
- Honeypot — Token can be bought but not sold (locked sell logic or no route)
- Coordinated insider launch — Multiple insider wallets buy at launch and dump on retail
A proper rug check catches the warning signs before you buy.
How to Use the Jump2Coin Rug Checker#
- Go to jump2coin.com/rugcheck
- Paste any Solana token mint address — or a DexScreener/Solscan URL
- Click Check
- Review the safety score and individual checks (results appear in ~5 seconds)
No wallet connection required. Works for any SPL token, including tokens not created on Jump2Coin.
The Safety Score: 0 to 100#
Jump2Coin assigns every token a score from 0 to 100. Higher is safer.
| Score | Label | Meaning |
|---|---|---|
| 80–100 | ✅ SAFU | All major risks addressed |
| 60–79 | 🟢 Good | Minor concerns only |
| 40–59 | ⚠️ Caution | Significant risks present |
| 20–39 | 🔴 Risky | Multiple red flags |
| 0–19 | ☠️ Danger | Avoid — likely a rug |
The score is split across five categories. Here's what each one checks.
Category 1 — Authority (35 points)#
This is the highest-weighted category because authority control is the most direct rug vector.
Mint Authority (15 pts): If mint authority is still active, the creator can print unlimited new tokens and dump them. A revoked mint authority permanently caps the supply — this is a core trust signal.
Freeze Authority (15 pts): Freeze authority lets the creator freeze any wallet's tokens, effectively trapping buyers. Revoked freeze authority means no one can be blocked from selling.
Metadata Immutability (5 pts): If metadata is mutable, the creator can change the token name, logo, and description after launch. Immutable metadata locks these permanently.
Key insight: A token with all three authorities revoked earns 35/35 in this category and cannot be manipulated at the token level — the most important baseline for any serious project.
Category 2 — Liquidity (25 points)#
Liquidity determines whether your tokens can actually be sold.
Active DEX Pool (5 pts): The checker scans both Jump2Coin's database and DexScreener's API. A token with no trading pair cannot be sold on any DEX.
LP Burned or Locked (12 pts): This is the single most important liquidity signal. When LP tokens are burned, the creator permanently gives up their ability to withdraw the trading pool — they literally cannot rug the liquidity. LP locking is a weaker alternative (temporary commitment only). Unlocked LP is a risk.
Liquidity Depth > $1,000 (8 pts): Pools below $1,000 have extreme price impact — a single $100 buy can move the price by 10%+. Adequate liquidity indicates a serious project.
What if LP status shows "Unknown"? This means the token's pool was detected on DexScreener but wasn't created through Jump2Coin — we can confirm the pool exists and its liquidity amount, but cannot verify the LP burn/lock status on-chain. Check directly on Raydium or Solscan.
Category 3 — Distribution (20 points)#
Even with perfect authorities, concentrated token distribution is a dump risk.
Top Holder < 20% (8 pts): If a single wallet holds more than 20% of supply, one sell order can crash the price. The checker fetches the top 20 holders via Solana's getTokenLargestAccounts RPC method.
Top 10 Combined < 50% (8 pts): A group of coordinated wallets holding the majority is a classic coordinated dump setup, even if no single wallet triggers the threshold.
Total Holders > 50 (4 pts): Tokens with very few holders are either brand new or failed to gain traction — both require caution.
Category 4 — Transparency (10 points)#
Legitimate projects provide verifiable contact and identity signals.
Each of these earns 2 points: description, website, Twitter/X, Telegram, Jump2Coin verified badge.
A project with all five signals has invested in its public presence. Anonymous tokens with no social links aren't automatically rugs — many legit meme coins start this way — but the absence of any transparency adds to overall risk.
Category 5 — Age & History (10 points)#
Token Age > 3 days (2 pts) / > 7 days (4 pts total): Most rug pulls happen within the first 24–48 hours. A token that has survived a week is statistically much less likely to be an exit scam.
Creator Wallet Age > 30 days (2 pts): Fresh wallets are a classic rug indicator. A creator who funded their wallet yesterday specifically to launch a token has no track record.
Creator History Risk (2 pts): Jump2Coin queries the creator wallet's track record — total tokens launched, how many still have active trading pairs, and how many appear abandoned. A creator with many abandoned tokens earns a "high" rug risk rating and receives 0 bonus points in this check.
Danger Flags — Automatic Red Alerts#
Beyond the score, some conditions trigger automatic red banners regardless of total points:
- Honeypot Detected — Jupiter's quote API confirmed you can buy but not sell this token. Anyone who bought is trapped.
- Extreme Concentration — A single wallet holds more than 80% of supply. One sell = collapse.
- No Liquidity Pool — No active trading pair found. Token cannot be sold.
- Fresh Creator Wallet — Wallet is less than 7 days old with no transaction history.
- Coordinated Launch Detected — Bundle analysis found 3+ wallets bought in the same block at pool creation.
Honeypot Detection: Can You Actually Sell?#
A honeypot is a token that appears normal but has a hidden restriction preventing sells. Jump2Coin detects these by simulating the actual trade route:
- Buy simulation — Request a Jupiter quote for SOL → token (10,000 lamports)
- Sell simulation — Take the output amount and request a Jupiter quote for token → SOL
- If step 1 succeeds but step 2 returns an error: honeypot confirmed
This test runs automatically on every rug check. If "Honeypot Detected" appears as a danger flag, do not buy — everyone who has already bought cannot exit.
Insider Network Graph: Who Really Controls This Token#
The insider graph visualizes the top 10 token holders as a spoke-and-hub diagram. The creator wallet sits at the center; each holder node radiates outward with size proportional to their holding percentage.
Node colors:
- Purple — Normal holder (<15% of supply)
- Yellow — Warning (15–30% of supply)
- Amber — Whale (>30% of supply)
- Red — Insider flagged by bundle detection
If multiple large nodes are connected through the bundle detection system, it means those wallets bought at pool creation in coordinated transactions — a strong indicator of an organized insider group planning to sell into retail demand.
Bundle Detection: Did Insiders Launch Together?#
When a Raydium pool opens, the first 50 transactions are analyzed. If 3 or more wallets bought tokens in the same Solana slot (approximately 400ms), it indicates a coordinated launch — commonly achieved with Jito bundles.
Bundle detection answers: "Was this token fair-launched, or did insiders position themselves before anyone else could buy?"
A clean launch shows "No coordinated activity detected." A flagged launch shows the number of suspected insider wallets and the slot range they operated in.
Creator History: Has This Wallet Rugged Before?#
The creator card shows:
- Total tokens created by this wallet
- How many still have active trading pairs
- How many appear abandoned (no pool, token > 7 days old)
- Wallet age in days
A creator with 15 tokens created and 14 abandoned is a serial rug operator. A creator with a 6-month-old wallet and one active project is a completely different risk profile.
Dev Wallet Holdings: Is the Creator Still Holding?#
The dev holding tracker shows what percentage of total supply the creator wallet currently controls. This is fetched live from the Solana RPC on every check.
- 0% — Creator sold or distributed all holdings (positive signal)
- >15% — Warning: a single creator sell could significantly impact price
- >30% — Critical: creator holds enough supply to cause a severe price crash
This figure updates in real time. If a creator who held 5% yesterday now holds 25%, they've been accumulating — a serious warning sign.
Risk Score Trend: Is This Token Getting Safer or Riskier?#
Every time any user checks a token, Jump2Coin saves a timestamped snapshot server-side (stored in Redis, retained for 30 days). The trend chart shows how the safety score has changed over the last 10 snapshots.
A token that scored 30/100 three days ago but now scores 65/100 has likely revoked authorities and added liquidity — genuinely improving. A token trending downward (LP unlocked and withdrawn, new supply minted) is deteriorating.
Live Score Deductions: Real-Time Risk Signals#
Beyond the base score, Jump2Coin monitors real-time on-chain activity and applies live deductions (up to -15 points):
| Signal | Deduction |
|---|---|
| Dev wallet sold tokens in the last 24h | -2 to -8 pts (scaled to amount sold) |
| 1-hour sell pressure > 60% of transactions | -2 to -4 pts |
| 5-minute sell ratio > 80% (panic selling) | -3 pts |
| 1-hour price dump > 30% | -3 pts |
These deductions sit on top of the base score. A token can score 70/100 on static checks but drop to 58/100 if the developer has been actively selling.
The displayed score always shows: base score − live deduction = final score.
Pump.fun Token Analysis#
Jump2Coin detects pump.fun tokens automatically using two methods: DexScreener pair data and on-chain PDA (Program Derived Address) verification against the pump.fun bonding curve program.
When a pump.fun token is detected, the Pump.fun Panel replaces the standard liquidity analysis:
Bonding Curve Progress — Shows what percentage of the bonding curve has been filled (0–100%). The curve fills as buyers purchase tokens on pump.fun. At 100%, the token "graduates" to Raydium.
| Curve Fill | Liquidity Score | Meaning |
|---|---|---|
| ≥ 80% | 22 pts | Near graduation — strong organic demand |
| ≥ 50% | 16 pts | Healthy traction |
| ≥ 20% | 10 pts | Early but active |
| < 20% | 4 pts | Very early |
Danger flag: A pump.fun token with < 5% curve fill triggers a CRITICAL "VERY EARLY PUMP.FUN TOKEN" alert. These tokens have extremely thin liquidity — a small number of sells can crash the price entirely.
Graduated tokens show their Raydium pool and receive the standard liquidity analysis instead of the bonding curve display.
Token-2022 Risk Extensions#
Token-2022 is Solana's newer token standard that supports optional programmable extensions. While some extensions are legitimate, several represent serious risks to buyers:
What is a Token-2022 extension?
An extension is additional code embedded in the token's mint account that triggers automatically during transfers. Standard SPL tokens have none of these — Token-2022 is opt-in.
| Extension | Risk Level | What It Means |
|---|---|---|
| Transfer Fee | ⚠️ Warning | Creator takes a % cut of every trade |
| Permanent Delegate | ☠️ Critical | Creator can move or burn tokens in any wallet |
| Non-Transferable | ☠️ Critical | Token cannot be sold, sent, or traded |
| Freeze Extension | ⚠️ Warning | Any wallet can be blocked from transferring |
| Confidential Transfer | ⚠️ Warning | Transaction amounts are hidden from analysis |
| Interest-Bearing | ⚠️ Warning | Supply rebases automatically |
| Transfer Hook | ☠️ Critical | Arbitrary code runs on every transfer |
Jump2Coin parses all Token-2022 extensions on-chain and surfaces them as danger flags. A token with a Permanent Delegate extension should be avoided — the creator can drain your holdings at any time.
Clone Token Detection: Protecting Against Impersonators#
One of the most common scams in the Solana ecosystem is launching a token with the same name and symbol as a popular existing project. Jump2Coin checks every analyzed token against 20 major official Solana tokens:
BONK, WIF, POPCAT, BOME, SLERF, MYRO, TRUMP, MELANIA, MEW, PENGU, JUP, RAY, ORCA, PYTH, DRIFT, and others.
How it works:
- Check the token symbol against the official token map
- Check if the token name contains the official token's name
- If a match is found on a different mint address → CRITICAL: Clone/Impersonation Detected
Clone tokens typically have the same logo (fetched from the original's Arweave URI), identical descriptions, and matching social links — making them nearly indistinguishable in wallet UIs at first glance.
Example: If you see a token called "BONK" with a different mint address than the real BONK (
DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263), it's a clone scam. Jump2Coin flags this immediately.
Wash Trading Detection#
Wash trading involves the same wallets repeatedly buying and selling a token to simulate organic volume. This artificially inflates DEXScreener rankings and creates FOMO for retail buyers.
Jump2Coin analyzes the transaction graph of the top holders and early buyers for:
- Circular transaction patterns (wallet A → B → C → A)
- Same wallets repeatedly appearing in both buy and sell transactions
- Coordinated timing that suggests a script rather than human trading
When detected, the "WASH TRADING SUSPECTED" danger flag is shown. This doesn't guarantee the token is a scam, but it does indicate that the visible trading activity may not reflect genuine organic demand.
What to Do When a Token Fails a Check#
If mint authority is active: The creator can print more tokens. This doesn't mean they will — but the risk exists. Check if the project has publicly committed to revoking.
If LP is unlocked: The creator can withdraw SOL from the pool at any time. Higher liquidity with unlocked LP is less dangerous than low liquidity with unlocked LP — but neither is ideal.
If honeypot is detected: Do not buy. If you already hold the token, there is no exit via normal DEX routes.
If bundle is detected: Research the specific wallets. Some bundled launches are coordinated community buys — others are developer-controlled sniping. Size and distribution matter.
Fix It: For Token Creators on Jump2Coin#
If your own token fails a check and was created on Jump2Coin, the Fix It panel appears automatically when your creator wallet is connected. You can revoke mint authority, revoke freeze authority, and make metadata immutable directly from the rug check page — each action is a single transaction that improves your safety score immediately.
Frequently Asked Questions#
Is the Jump2Coin Rug Checker free? Yes, completely free. No wallet connection, no account, no limit on checks.
Does it work for tokens not created on Jump2Coin? Yes. It works for any SPL token on Solana mainnet — paste the mint address from anywhere.
How long does a rug check take? Approximately 3–5 seconds. The checker runs parallel data fetches (on-chain RPC, Metaplex metadata, DexScreener, holder analysis, creator history, honeypot simulation, bundle analysis) and aggregates results instantly.
Does the rug check work for pump.fun tokens? Yes. Jump2Coin detects pump.fun tokens automatically, shows the bonding curve fill percentage, and adjusts the safety score to reflect the bonding curve model rather than penalizing the token for lacking a Raydium pool.
What are Token-2022 risk extensions? Token-2022 is Solana's newer token standard with optional programmable extensions. Dangerous extensions include Transfer Fee (creator takes a % of every swap), Permanent Delegate (creator can burn tokens in your wallet), and Non-Transferable (token cannot be sold). Jump2Coin flags all risky extensions as danger alerts.
How does clone token detection work? Jump2Coin checks the token's name and symbol against 20 major official Solana tokens. If a match is found on a different mint address, the token is flagged CRITICAL as a clone/impersonation attempt — one of the most common scam patterns in the Solana ecosystem.
Can a token with a low score still be safe? Yes. Many legitimate new tokens have low scores simply because they're new (no age points), haven't yet revoked authorities, and have low liquidity. Score is a risk indicator, not a guarantee. Read the individual flags.
What's the difference between LP burned and LP locked? Burned LP is permanent — the creator literally cannot withdraw liquidity ever again. Locked LP is temporary — it's held in a vesting contract until a specific date, after which the creator can remove liquidity. Burned > Locked for long-term trust.
Can the score be manipulated? The score is derived entirely from on-chain data and public APIs. A creator can improve their score by genuinely improving their token (revoking authorities, burning LP, gaining holders) — but cannot fake it. There is no way to modify the score without making real on-chain changes.
What is a wash trading flag? Wash trading is when the same wallets repeatedly buy and sell a token to simulate organic volume. Jump2Coin analyzes the transaction graph of early buyers for circular patterns. A "WASH TRADING SUSPECTED" flag means visible volume may not reflect genuine demand.
Run a rug check now at jump2coin.com/rugcheck — free, instant, no wallet required.