HostNexFlow › Guides
Token safety guides
Plain-English walkthroughs of what actually makes a token dangerous — and how to see it in the on-chain data before you swap. No jargon, no signup.
Free · 100 checks/day · Solana & EVM
Looking for one token? Every indexed read lives in the token safety index, and the safest Solana tokens ranking lists the ones that clear every check. New to the checks themselves? Start with mint & freeze authority explained and what "mint authority revoked" actually means — the two flags every scan leads with.
Start here
How to Read a Token Risk Scan — Every Field, Explained
What each field in a token risk scan means, and which ones are dealbreakers before you swap.
Read the guide →How Honeypot Tokens Trap You — And How to Spot One
A honeypot lets you buy but blocks the sell. The contract-level mechanism, the on-chain tells, and a 60-second pre-buy check.
Read the guide →Mint & Freeze Authority on Solana, Explained
What mint and freeze authority mean, why an active flag is a red line, and how to check before you buy.
Read the guide →Anatomy of a Rug Pull — The On-Chain Sequence
The predictable on-chain sequence of a rug pull, and the signals visible before the exit.
Read the guide →Address poisoning: the copy-paste trap
Lookalike addresses planted in your history, waiting for one careless copy. Industrial scale, simple defense.
Read the guide →Airdrop Scams, Decoded — Dust, Drainers, Fake Claims
Why unsolicited tokens appear in your wallet, what the claim link really does, and the one habit that defuses all of it.
Read the guide →Are tokenized stocks safe?
You own a claim on a token, not a share. What that means in practice, risk by risk.
Read the guide →Security Audit Badges — What an Audit Covers, and What It Never Can
What an audit really is, why a badge can't stop a rug, and how to read the report behind the logo.
Read the guide →Bridge-Wrapped Tokens — Who Actually Holds the Keys?
Every wrapped token is a claim on collateral someone else guards. How that custody works, fails, and how to check it.
Read the guide →How Copy-Trading Rugs Work
Seeded winner wallets, followers as exit liquidity, fake PnL, and how to audit a trader before you mirror them.
Read the guide →Crypto Dark Pools — Where Big Orders Go to Hide
How on-chain dark pools and hidden orders work, why private venues now move huge DEX volume, and what it means for your fills.
Read the guide →Crypto Recovery Scams
Why “fund recovery” pitches are structurally fake, and the few things genuinely worth doing after a loss.
Read the guide →Wallet drained? The first-hour playbook
Secure what's left, cut the drain paths, preserve evidence, dodge the second scam. In that order.
Read the guide →Dead Token Forensics — How Projects Actually Die On-Chain
Zombie liquidity, abandoned dev wallets, revival-pump traps — how to tell a dead token from a dormant one before buying the dip.
Read the guide →Dev Wallet Red Flags
How much the dev cluster holds, how it was funded, and whether it's already selling — read it before you buy.
Read the guide →EU Privacy Coin Delistings — What the 2027 Rules Say
What the EU AMLR actually prohibits from July 2027, what stays legal for holders, and how the privacy coin delisting wave is playing out.
Read the guide →Fake Airdrop Claim Sites
Bait tokens, cloned claim pages, and the signature that costs everything — anatomy of the trap.
Read the guide →Fake Communities & Bot Holders — Spotting Manufactured Hype
Padded holder counts, botted channels, and the wallet-level signals — age, funding, balance shape — that give the game away.
Read the guide →Fake Volume & Wash Trading — The On-Chain Tells
Sibling-wallet loops, bot ping-pong, volume that dwarfs liquidity, and turnover that never moves the price — how to spot manufactured volume.
Read the guide →The First Hour of a Token Launch
What's genuinely checkable at minute five, which signals must wait, and how to act on incomplete data.
Read the guide →Freeze-Authority Abuse — Anatomy of a Frozen-Wallet Trap
How a live freeze authority plays out in practice: selective freezes, AccountFrozen at sell time, and the extortion that follows.
Read the guide →Honeypot Variants — Sell-Tax Traps, Blacklists and Conditional Blocks
The main technical flavors of honeypot tokens, and the specific signal that gives each one away.
Read the guide →Copy trading on Solana, honestly
Mirroring a profitable wallet sounds simple. The mechanics — and the four ways copiers lose anyway.
Read the guide →How Much Liquidity Is Enough?
Pool depth is exit capacity — size it against your position, and know the traps in the number.
Read the guide →Prediction market odds, decoded
The price is the probability. The payout is the difference. Everything else follows.
Read the guide →How to Get a Token Jupiter-Verified
What the verification screens for, how the process works, and what to fix before applying.
Read the guide →How to Lock Liquidity on a Solana Token
Lock, burn, or DEX position lock — the three real options, the order that matters, and how buyers verify a lock is real.
Read the guide →Is Jupiter safe to use?
The router isn't the risk — what you route through it is. An honest read of aggregator safety.
Read the guide →Is Phantom wallet safe?
The wallet's architecture is sound. The losses come from what people sign. Here's the split.
Read the guide →Is Polymarket legit?
Real platform, real volume, real nuances: settlement, oracle disputes, and access rules.
Read the guide →Is pump.fun safe? The honest breakdown
The platform is real; the risk lives in the tokens. What the curve enforces and where losses actually happen.
Read the guide →Is USDC Safe on Solana?
Why active authorities on USDC aren't the memecoin red flag, what the depeg taught, and the bridged-copy trap.
Read the guide →Jupiter's Verified List — What Verification Actually Means
A legitimacy screen, not an endorsement. What the checkmark tests, what it ignores, and how it beats ticker clones.
Read the guide →Launch a Solana Token with a Revoked Mint Authority
The order that matters — mint, distribute, revoke — and the freeze, LP and concentration checks a null mint does not settle.
Read the guide →Liquid Staking Token Risks on Solana
LST risks are different in kind: exchange-rate mechanics, validator and contract risk, exit-liquidity gaps.
Read the guide →Liquidity Locks — What They Prove, and What They Don't
Locks block one rug vector, on a timer. Duration games, partial locks, and how to read lock status before you buy.
Read the guide →LP Tokens & Burned Liquidity — Why 'LP Burned' Matters
Whoever holds the LP tokens can empty the pool. Burning them destroys that power — here's how to verify it really happened.
Read the guide →The Memecoin Safety Checklist
Six checks in sixty seconds, in the order that catches the most scams fastest.
Read the guide →MEV Sandwiches — Why Your Fill Was Worse Than the Quote
How sandwich attacks tax your swaps through price impact, how to spot the damage in a fill, and which protections actually work.
Read the guide →Multisig vs Single-Key Treasuries — Who Really Controls the Funds?
Treasury custody is a due-diligence signal: real multisigs, theater multisigs, timelocks, and the red flags in signer history.
Read the guide →No-KYC Swaps — What the Label Actually Promises
What no-KYC, non-custodial swapping actually is, what it doesn't exempt you from, and how to spot honest venues.
Read the guide →Pig butchering scams: the full playbook
The long con that ends at a fake exchange. Every stage has a tell — here they all are.
Read the guide →How Presale & IDO Scams Work — Stage by Stage
The presale funnel, soft vs hard rugs, fake vesting dashboards, and how to verify a raise on-chain before sending funds.
Read the guide →Privacy Coins vs Privacy Middleware — Two Different Bets
Base-layer privacy coins vs shielded-pool middleware: mechanics, regulatory exposure, and what each model means for holders.
Read the guide →Proxy Contracts — When 'Renounced' Hides an Upgrade Switch
Upgradeable proxies can swap a token's logic after launch. Why renounced ownership isn't the whole story, and what to check instead.
Read the guide →Pump.fun Graduation, Explained
What migration changes mechanically — which risks it retires and which new ones it creates.
Read the guide →Pump.fun Launches — Mechanics and the Risk Profile
How bonding-curve launches work, what the platform's guardrails cover, and the risks that survive graduation.
Read the guide →Reading a DEX Chart for Structure, Not Price — A Safety Lens
What launch candles, one-sided ladders, thin-pair gaps, and volume mismatches reveal about a token's risk — a structural read, not trading advice.
Read the guide →Reading Holder Distribution — What Whale Concentration Really Tells You
Separate protocol wallets from real whales, trace funding sources, and learn what concentration actually means for rug risk.
Read the guide →“Mint Authority Revoked” — What It Actually Means
How revocation works on-chain, why it's permanent, and the risks it does not remove.
Read the guide →Shielded Balances & Viewing Keys — Auditable Privacy
How shielded balances hide on-chain amounts, how viewing keys make that privacy auditable, and where the model still leaks.
Read the guide →Slippage Settings for Memecoins
What the tolerance actually bounds, why memecoins need different numbers, and the sandwich-bot tax on loose settings.
Read the guide →Sniper Bots & Bundled Launches — Reading a Token's First Block
The opening seconds decide who can dump on whom. Snipers, dev bundles, funding trails, and the 0% dev holding illusion.
Read the guide →Solana Confidential Balances — Encrypted Amounts on SPL
Token-2022 confidential transfers: encrypted balances on Solana, auditor keys, wallet-support gaps, and the encrypted-compute wave.
Read the guide →How many tokens launch on Solana per day?
151,586 launches measured in five days, 82% from repeat wallets, one wallet shipping a token every 28 seconds. Counted, not estimated.
Read the guide →Stablecoin Depeg Risk — What Backs the Peg, and What Breaks It
How each peg design holds, how each one breaks, and the early tells a depeg gives before most people notice.
Read the guide →Telegram Trading Bot Safety
How the key model works, the impostor-bot problem, and the checklist before you deposit.
Read the guide →Token Approvals — How Wallets Get Drained and How to Revoke
Approvals are standing permissions on your tokens. How drainers abuse them, why Permit phishing needs no transaction, and how to claw permissions back.
Read the guide →Token Holder Counts — Meaning and Manipulation
What holder counts imply at each stage, how the number gets padded, and the cross-checks that expose it.
Read the guide →Token Impersonation — Name, Symbol and Metadata Red Flags
Token metadata is free text, not identity. How fake tokens borrow real names, and how to resolve the real one every time.
Read the guide →Token Taxes, Transfer Fees & Slippage — Where Your Trade Actually Goes
How tax tokens and slippage settings quietly decide what your swap delivers — and how to check the real rate first.
Read the guide →The Tornado Cash Case — What It Means for Users
What the Tornado Cash prosecution decided, what's still open as of August 2026, and what it means for ordinary crypto users.
Read the guide →How to Verify a Token's Contract Address Before You Buy
Tickers are costumes; the address is identity. The canonical-source chain, lookalike-address tricks, and the two-source rule.
Read the guide →Wallet Drainer Scams, Explained
Drainers get you to sign the theft yourself. How the kits work and the habits that make you a hard target.
Read the guide →Rugged? What to Do in the First Hour
Diagnose the failure, revoke approvals, save the evidence, and don't get hit by the recovery scam that follows.
Read the guide →NexFlow is an educational risk tool, not financial advice. On-chain data can be incomplete or manipulated; always do your own research. Free · no signup · a NexFlow product