Skills

Contract scan

What the token's contract lets someone do to holders: mint, pause, blacklist, tax, upgrade, freeze, or block selling.

What it answers

"Can this token's contract be used against the people who hold it?"

Inputs

A token address.

What you get back

Each flag comes with a one-line explanation.

On Ethereum, Base and BNB Chain

  • Owner powers: whether the contract has an owner, and what the owner can still change.
  • Mint: whether new tokens can be created.
  • Pause: whether transfers can be stopped.
  • Blacklist: whether specific wallets can be blocked.
  • Taxes: the buy and sell tax taken by the contract.
  • Proxy: whether the contract's code can be swapped for new code later.
  • Honeypot simulation: whether a test sale goes through. If it doesn't, you could buy but not sell.

On Solana

  • Mint authority: whether someone can still create new tokens.
  • Freeze authority: whether someone can freeze holders' tokens.
  • Token-2022 extensions: if the token uses Solana's newer token program, which extensions are on. Some, such as transfer fees or a permanent delegate, give someone extra control.
  • Risk flags reported by GoPlus Security and Rugcheck.

Sources

  • EVM chains: GoPlus Security.
  • Solana: the token's mint account, read on-chain through public RPC, plus GoPlus Security and Rugcheck.

Coverage by chain

ChainCoverageNotes
SolanaLiveMint and freeze authority and Token-2022 extensions read on-chain, plus GoPlus and Rugcheck risk flags.
EthereumLiveOwner powers, mint, pause, blacklist, taxes, proxy, honeypot simulation (GoPlus).
BaseLiveSame checks as Ethereum.
BNB ChainLiveSame checks as Ethereum.

Limits

  • A clean scan means none of these checks found a problem. It is not a code audit.
  • The honeypot simulation tests a sale under today's conditions. If someone still controls the contract, its behaviour can change later.
  • Taxes are shown as they are now. If the owner can change them, they can go up.
  • Solana tokens don't have an "owner" the way EVM contracts do. Mint and freeze authority are the closest thing.

Ask it like this

text
Is <token address> a honeypot?
What can the owner of <token address> still do?
Does <token address> still have mint authority?