CryptoPulse / Guides / How to Check a Token Before Buying: A Pre-Trade Safety Checklist

How to Check a Token Before Buying: A Pre-Trade Safety Checklist

Before buying any newly listed token, run four checks in under five minutes: whether the contract's mint and freeze authority have been revoked, whether liquidity is locked and for how long, how concentrated the holder list is, and whether a simulated buy-and-sell actually clears (a honeypot check). One red flag alone isn't necessarily fatal, but two or more together are a strong signal to walk away — and passing every check still doesn't make a token a good investment, only a less obviously rigged one.

Mint and Freeze Authority: Can the Creator Change the Rules After You Buy?

On Solana, mint authority controls whether new units of a token can be created after launch, and freeze authority lets whoever holds it lock individual token accounts, preventing transfers — including yours — according to Solana's own documentation. If either authority is still active and held by an anonymous wallet, the creator retains the power to dilute supply or freeze holdings unilaterally, at any time.

The practical check: look up the token's mint account and confirm whether mint authority and freeze authority show as revoked or 'none.' Most block explorers and token-scan tools surface this directly without requiring you to read raw contract data. Similar concepts — owner or admin roles that can mint new supply or blacklist addresses — exist in EVM-based token contracts too, just implemented in code rather than as a native account property.

LP Locks: Can the Liquidity Just Disappear?

A new token's liquidity pool pairs it with a base asset like ETH, SOL, or USDC. If the liquidity-pool tokens representing that pool sit in the deployer's own wallet, they can be withdrawn at any time, instantly crashing the token's price toward zero — the classic mechanic behind a 'rug pull.'

Check whether LP tokens are actually locked in a time-locked contract or burned entirely, and for how long. A lock measured in days isn't equivalent to one measured in years, and it's worth reading the actual lock terms rather than trusting a marketing claim of 'LP locked' at face value.

Holder Concentration: Who Actually Owns the Supply?

Block explorers typically show the top holders of any token. If a handful of wallets — often the deployer plus a few connected addresses — control a large majority of supply, those holders can sell into new buyers at will, and apparent trading volume can be largely wash trading between related wallets.

Some concentration is normal shortly after launch, so this check is most useful combined with the mint/freeze and liquidity-lock checks rather than read in isolation.

Honeypot Checks: Can You Actually Sell?

Tools like honeypot.is simulate a buy and a sell against the live contract to see whether a sell transaction actually clears — catching tokens coded so that only the deployer can sell while everyone else's tokens are functionally frozen in place.

Honeypot.is is explicit about a real limitation, noting on its own site that the check 'is not a foolproof method' and that a token clean now can change later, since contract logic or owner-controlled parameters can be altered after the fact. Treat a clean result as one signal checked close to the time of the trade, not a permanent clearance.

Putting It Together: A Five-Minute Pre-Trade Routine

A workable order: check mint/freeze authority, then the liquidity lock, then top holders, then run a honeypot simulation — and only after all four, size a position assuming total loss is genuinely possible regardless of what the checks show.

The SEC's 2024 investor alert on crypto asset scams notes that memecoin pump-and-dump schemes are commonly promoted through social media hype and 'presale' framing designed to create urgency — which is exactly the kind of pressure that gets people to skip a five-minute check like this one. Treat urgency itself as a warning sign.

For a deterministic, no-LLM version of this exact checklist, dedicated scanners such as onchainpulse.theaslangroupllc.com run mint/freeze, liquidity-lock, and holder-concentration checks programmatically for Solana and EVM tokens, and CryptoPulse's own /api/threats endpoint tracks the broader scam patterns these checks are designed to catch.

🤖 AI agents can pull this data live: GET https://cryptopulse-xi-five.vercel.app/api/threats — x402 pay-per-query, no API key. See llms.txt.

FAQ

If a token passes all these checks, is it safe to buy?

No — these checks screen out common scam mechanics like unrevoked authorities, unlocked liquidity, honeypot code, and extreme concentration, but they say nothing about whether a project has real usage or will hold its value over time.

Where do I find a token's mint and freeze authority status?

Most block explorers for the relevant chain display these fields directly on the token or mint address page, and many token-scan tools and bots surface a plain 'revoked' or 'active' flag without requiring you to read raw contract data yourself.

What counts as a 'long enough' liquidity lock?

There's no universal number, but locks measured in months to years give a community far more time to assess a project than locks measured in days, and a lock that expires right before a large scheduled unlock of team-held tokens deserves extra scrutiny.

Do honeypot checkers work on every blockchain?

Coverage varies by tool — honeypot.is, for example, covers major EVM chains such as Ethereum, BNB Chain, and Base — so confirm a given tool actually supports the specific chain your token is on before relying on a clean result.

Why do scam tokens still succeed if these checks are public knowledge?

Because most retail buyers act on social media hype and fear of missing out rather than pausing to check, and promoters increasingly use urgency — limited-time presales, fast-moving group chats — specifically to short-circuit exactly this kind of five-minute review.