HostNexFlow › Solana rug checker
Solana rug checker
Paste a token's mint address and read its safety grade in seconds — authorities, liquidity, holder concentration, deployer history. Free, no signup, no wallet connect.
Scan a token right now
Paste any Solana mint address — or an exact name/ticker — and the checks below run against live chain state.
Most Solana rugs are not clever. They are the same four or five moves run at industrial scale — tens of thousands of launches a day through this network's launchpads, and the overwhelming majority designed to end the same way: the deployer keeps a switch or a pile that empties the pool once real buyers arrive. A rug checker exists because every one of those moves leaves a mark in public account state, and the mark can be read before you buy instead of after.
The five checks that catch almost every rug
A rug is a property of powers and positions — who can print, who can freeze, who holds, and whether the exit liquidity can be pulled. None of it is opinion; all of it is on-chain.
| Check | What a bad result means | Pass looks like |
|---|---|---|
| Mint authority | Deployer can print unlimited new supply and sell it into the pool — your share dilutes toward zero | Renounced (set to null) |
| Freeze authority | Issuer can freeze your token account — you hold coins you can never sell | Renounced |
| Liquidity lock | LP tokens unlocked means the pool's real money can be withdrawn in one transaction — the classic rug | Burned or locked |
| Holder concentration | A few wallets holding most of the supply is a dump waiting for volume — the "community" is often one person | Broad, organic spread |
| Deployer history | A wallet that launches five tokens a day is a factory, not a founder — prior launches ending at zero is the pattern | Clean or singular |
The one-line version: mint authority live means they can print the floor away; freeze authority live means you can never sell; unlocked liquidity means they can take the pool and leave. Any one of the three on an anonymous token is a complete answer — you do not need the others.
What a clean scan does not tell you
A rug checker reads hard state — the fields a scammer cannot fake. It cannot see the soft side of the con: an unlocked dev allocation waiting for a pump, bought social volume, fifty "holders" that are one wallet split fifty ways, or a project that passes every check today and is simply abandoned next month. Launchpad tokens deserve a specific calibration too: pump.fun creates its tokens with mint and freeze revoked by design, so a renounced flag there is table stakes — the differentiators on launchpad coins are concentration, liquidity depth and the deployer's track record, not the authority flags.
Scale, from our own capture layer: NexFlow logged 35,663 new Solana token launches on September 1, 2026 alone, and on September 4 about 65% of the day's launches came from wallets that minted five or more tokens that same day. Factory output is the norm, not the exception — which is exactly why deployer history is a first-class check and not a footnote.
How the scan works
The checker reads the token's mint account (the two authority fields), its trading pools (liquidity amount and whether the LP position is locked or burned), the holder distribution, and the deployer wallet's launch history — all public account state, read fresh at scan time. The grade rolls those signals into one letter; the breakdown underneath shows which checks passed and which failed so the grade never asks to be taken on faith. It runs against Solana tokens by mint address, and by exact name or ticker when the symbol resolves cleanly.
If you are checking a token someone shilled you, the fastest honest answer is the order of operations: authorities → liquidity lock → concentration → deployer history. Stop at the first hard failure. A token that survives all four earns the right to be evaluated on the soft stuff — team, chart, narrative — rather than the other way around.
Check it before you buy it
Thirty seconds of on-chain reads beats a week of holding a rug.
Frequently asked
How do I check if a Solana token is a rug pull?
Paste the token's mint address into a scanner that reads on-chain state. The checks that matter: mint and freeze authority renounced, liquidity locked or burned, holder concentration, and the deployer's history of prior launches. A clean scan is a snapshot, not a guarantee — but every red flag is a hard fact you can see before you buy.
What does a rug checker actually check?
The on-chain fields a scammer cannot fake: whether mint authority can still print supply, whether freeze authority can lock your tokens, how much liquidity exists and whether it is locked, how concentrated the top wallets are, and what else the deployer wallet has launched. Marketing can lie; account state cannot.
Is a clean rug check a guarantee the token is safe?
No. A clean scan means the hard dealbreakers are absent at that moment — it cannot see an unlocked dev allocation about to dump, a coordinated social pump, or a project simply abandoned next week. Treat a clean grade as "the obvious traps are not present", size positions accordingly, and re-scan before you trade.
Can scammers fake a good rug-check result?
They cannot fake the on-chain fields themselves — a renounced mint authority is verifiably null, locked liquidity is verifiably locked. What they can fake is everything around it: fake volume, fake holders spread across their own wallets, fake audits. That is why concentration and deployer-history checks matter as much as the authority flags.
What is the single biggest red flag a rug checker catches?
An active freeze authority on a freely-traded token — it lets the issuer lock your account so you can never sell. Close behind: live mint authority (unlimited dilution) and unlocked liquidity (the classic pull). Any one of the three on an anonymous token is reason enough to walk away.
Do I need to connect a wallet to use a rug checker?
No. A real scanner reads public account state — the token's mint account, its pools and its holder list — so it works from the mint address alone. If a "checker" asks you to connect a wallet or sign a transaction to scan, leave.