HostNexFlow › Library › How to read a token grade
How to read a token safety grade: what the letter is actually measuring
A NexFlow grade is a power audit, not a health score — it grades what the contract can do to you, then lets the numbers around it say how it's doing. This is the anatomy of the read, with real tokens as the illustrations.
Every graded token page on this site leads with a letter and a number — A (100) down to F — and the most common mistake readers make is treating it like a credit score for the asset. It isn't. The grade is computed from a checklist of contract powers and market-structure facts: can this contract mint new supply? Can it freeze your balance? Can the owner rewrite holdings? Is the liquidity deep enough to exit? The letter summarizes the answers to a fixed set of questions about power and fragility — it says nothing direct about whether the token is a good investment, and it deliberately can't.
That distinction is the whole skill. Once you internalize "the grade audits powers, the numbers audit health," a token page stops being a verdict and becomes a report. Here's how to read it end to end.
Start with the flag list, not the letter
Under every grade sits the reasons list — the individual checks, each marked bad, warn, or ok. Two tokens can share a letter for completely different reasons, and the reasons are where the real content lives. Compare two real reads from September 27, 2026:
Chainlink on Ethereum grades A (100): cannot mint, cannot freeze, verified source, trust-listed, ~$24M liquidity, 919,439 holders over 1,727 days — a checklist with nothing open. Chainlink's bridged receipt on Optimism grades D (47): the contract can mint new supply, and the contract owner can change balances — it could zero a holder out. Same asset, same brand. The difference is the contract, and the reasons list is the only place that difference is visible. The letters A and D are just the summary of those two lists.
Read the reasons before you read the score. A D with "thin liquidity" as its only flag is a different object than a D with "owner can change balances" — the first is fragile, the second is powerful, and the remedies (more liquidity vs. different holder incentives) don't overlap.
The three flag families and what each is asking you to trust
Every flag in the checklist lands in one of three families, and each family points at a different trust object:
Supply powers — mint and burn. "The contract can mint new supply" means someone can dilute your holding at will. On a bridged token that's the bridge operator's accounting mechanism; on an issuer token like a wrapped asset or a synthetic dollar, minting IS the product. Transfer powers — pause, blacklist, whitelist. "Can pause or blacklist transfers" means your balance can be frozen in place; "transfers are restricted to a whitelist," like the one on CAKE's Arbitrum deployment (D, 52 as of September 27, 2026), means you may not be able to sell even while the market trades. Ownership powers — balance rewriting, hidden owners, proxies. "Owner can change balances" is the bluntest instrument in the set; "hidden owner" and "upgradeable proxy" mean the contract's rules can change under you without notice.
A useful mental model: supply powers threaten your share, transfer powers threaten your exit, ownership powers threaten the rules themselves. Which of the three you can tolerate depends on what the token is for — custodial stablecoins carry transfer powers by regulatory design, while a community memecoin carrying them is a different signal entirely.
The numbers around the grade are health, not safety
Grade says what could happen; the market metrics say what is happening. Read them together:
Liquidity is the exit budget. Worldcoin on Optimism (D, 47, September 27, 2026) shows ~$123K of tracked liquidity against a reported cap near $2B — even before you weigh the mint flag, a $123K exit door on a billion-dollar asset is its own risk statement. Holders × age measures how baked-in the token is: LINK on Ethereum's 919K holders across 1,727 days means the contract has been adversarially lived-in for years; a 60-day-old contract's clean flags haven't been tested the same way. Volume tells you the market data is real — a token with holders but no daily volume is a museum, not a market.
Watch for the shape of the combination, not any single figure. POL's bridged deployment on Ethereum grades D (41) — mintable, freezable, hidden owner — while the same symbol grades A (92) on Polygon, where the checklist notes "the chain's native asset — there is no deployer contract to abuse." Same ticker, 51-point spread. The numbers explain it: the Ethereum contract is a migration-era ERC-20 with live admin keys; the Polygon deployment is the gas asset itself, where "the contract" isn't a thing that can betray you.
Try it on something you hold: run the address through nexflowscan.com/check-token — the grade, the reasons list, and the dated numbers are what this guide teaches you to read. Every metric on the page is a snapshot, recomputed on a schedule, and dated.
What the grade deliberately doesn't see
A checklist of contract powers is honest about its blind spots, and knowing them is part of reading the grade:
Off-chain trust objects. USDe on Ethereum grades B (75) as of September 27, 2026 — its flag is mintability, which is how the product issues supply. But the real risk in USDe lives in the hedge book that backs it, an off-chain position no contract flag can observe. The B is accurate about the contract and silent about the mechanism. Economic design. A rebasing token, a fee-on-transfer token, or a bonding curve can lose you money with a perfectly clean flag set — the checklist audits power, not incentive design. Freshness. Every read is a dated snapshot. A page read on September 27, 2026 describes the contract as of that date; a proxy upgrade or an owner renounce the next week changes the flags, and the next scheduled recompute changes the grade.
This is why the reasons list matters more than the letter: the letter compresses, and compression loses exactly the detail that tells you which blind spot applies to the token you're holding.
A working reading order
In practice, the read that catches the most goes like this: open the token page, ignore the letter for thirty seconds, and read every bad flag first — those are the powers that can actually take your balance. Then read the warn flags — they're the fragilities: thin liquidity, hidden owner, unverified controls. Only then look at the letter, which should now feel like a summary you could have written yourself. Finish with the dated numbers — liquidity, holders, volume, age — and ask whether the market data supports the size of the position you're imagining.
Two habits make it stick. First, cross-check the same asset on another chain — the OPTIMISM-vs-ETHEREUM LINK gap (D 47 vs A 100) exists for many bridged majors, and the spread itself is a fact about the bridge. Second, re-read the page after you've decided: if your thesis requires the grade to be wrong ("the mint key doesn't matter because..."), say that out loud. Grades compress; powers don't.
Where the read fits in a bigger check
A token page is one dated snapshot of one contract. For a position you're sizing seriously, the natural companions are the token's standing in the dated rankings — which sorts by the same on-chain reads, so an outlier position is visible at a glance — and the market structure on the markets surface, where thin liquidity shows up as the gaps and spreads a reasons list can only point at. The grade is the contract-level floor of your diligence, not the ceiling.
Frequently asked
What does a token safety grade actually measure?
Contract powers and market structure — can the contract mint supply, freeze balances, rewrite holdings, and whether liquidity supports an exit. It's a power audit: the letter summarizes the reasons list, which is where the real content lives.
Can an A-grade token still lose money?
Yes — the checklist audits powers, not economic design or off-chain backing. A rebasing token, a bad peg mechanism, or an unaudited hedge book can all lose money with clean flags. The grade is the contract-level floor of diligence, not the ceiling.
Why does the same token grade differently on different chains?
Because the checklist grades the contract, not the brand. LINK is A (100) on Ethereum and D (47) on Optimism; POL is D (41) on Ethereum and A (92) on Polygon — the bridged or canonical deployments carry different powers.
What do 'bad' vs 'warn' flags mean?
Bad flags are powers that can take your balance — mint, freeze, balance-rewriting. Warn flags are fragilities — thin liquidity, hidden owner, unverified controls. Read the bads first; they're the ones with teeth.
How current is a token page?
Every page is a dated snapshot, recomputed on a schedule — a grade reflects the contract as of the read date. An owner renounce or a proxy upgrade changes the flags on the next pass.