Make your token rug-proof

A “rug-proof” token is one where the deployer can no longer pull the rug. Supply is fixed, accounts can’t be frozen, metadata can’t be swapped out, and liquidity is locked or gone. Buyers check for exactly these things before they touch a coin, and so do the scanners they trust.

Danger

Most of these actions are permanent. Finish your minting and metadata edits before you lock anything down.

Why buyers care about each one

#why-buyers-care-about-each-one

Each authority is a power the deployer holds. Holders treat every one you keep as a risk you could still use against them. Revoking mint and freeze is close to expected for a community token; the update authority is the one buyers will sometimes accept staying live for a while.

What you lock	The risk it removes	Why a buyer cares
Mint authority	You can no longer print more supply	Nobody can dilute their bag overnight
Freeze authority	You can no longer freeze holder accounts	Their tokens can’t be locked so they can’t sell
Update authority	The name, symbol, and image are frozen	The token can’t be silently rebranded into a scam
Liquidity (locked or burned)	You can’t drain the pool	The market can’t vanish out from under them

For what each authority controls on-chain, see Authorities explained.

The checklist

#the-checklist

Run these in order. The first three lock the token itself; the liquidity lock comes last because there is nothing to lock until the pool exists. The fifth step is the one most teams skip, and it is the one buyers actually look at.

1. Revoke mint authority

   This permanently caps the supply at whatever is already minted. No more tokens can ever be created. Use Revoke Mint, or open it straight in the app at j.tools/en/tools/revoke-mint.

2. Revoke freeze authority

   This removes your power to freeze any holder’s account, so nobody worries about being locked out of selling. Use Revoke Freeze, or run it directly at j.tools/en/tools/revoke-freeze.

3. Lock the metadata

   Revoking the update authority freezes the name, symbol, and image for good. After this, the token’s identity can’t be changed. Use Revoke Update Authority, or open it in the app at j.tools/en/tools/revoke-update-authority.

4. Lock or burn liquidity

   A locked supply means little if you can still pull the pool. Lock your LP for a fixed term or burn the LP tokens outright. See Create LP for the pool itself and Launch a token for the full sequence.

5. Look at your own holder base before you market it

   Revoked authorities are half of what a careful buyer checks. The other half is who holds the supply, and no revoke fixes that. Before you start promoting, run your own mint through J Map. It draws your top holders as circles sized by share of supply and colors wallets together when they funded each other or moved tokens or other assets between them, using on-chain transfers only.

   This is the picture a buyer sees. If your launch wallets, your team allocation, and your marketing budget all came out of the same funding wallet, they come back as one large block, and a stranger reading that block has no way to know it is you being organized rather than you being sneaky. Being one cluster is not automatically a problem, because team vesting and a market maker look the same way. It just means you need an answer ready before someone posts the screenshot. If the block is bigger than you expected, fund the wallets separately next time, or publish which addresses are yours and what each one is for.

   Open J Map →

Lock down your token in the app →

All at once, or one at a time?

#all-at-once-or-one-at-a-time

Make Immutable (all at once) Make Immutable One at a time Revoke Mint, Revoke Freeze, Revoke Update Authority

Make Immutable bundles the three token-level revokes into one signature. Pick this when you want a fully fixed token and you’ve finished any last minting or metadata edits. Fewer signatures, and the cleanest signal to a scanner that the token is locked.

Revoke each authority on its own with Revoke Mint, Revoke Freeze, and Revoke Update Authority.

Pick this when you want to keep one power a little longer, like revoking mint and freeze now but keeping update authority so you can still fix the logo, then revoking it once the metadata is final.

Danger

This cannot be undone. Once this transaction confirms on-chain, there is no way to reverse it. Check every field before you sign.

Liquidity is the last lock

#liquidity-is-the-last-lock

A deployer who can still withdraw the pool is the classic rug. Two ways to close it:

• Burn the LP tokens. Sending the LP tokens to a burn address removes them from circulation, so the liquidity can never be pulled. Permanent.
• Lock the LP for a term. A time-lock holds the LP tokens until a set date. Buyers can verify the unlock date on-chain.

Either way, the liquidity step belongs in your launch plan from the start. The Launch a token guide covers the full sequence, timing included.

Related

#related

• Make Immutable What the mint, freeze and update authorities control on a Solana SPL token, what each one lets a creator do, and why revoking them builds trust.
• Make Immutable Revoke the mint, freeze and update authority on your Solana SPL token in a single transaction, so nothing about it can ever change again. 0.2 SOL. 0.2 SOL
• J Map Map any Solana token's top holders as connected clusters: see which wallets move together, follow the dev's flow, share by URL. Free, no wallet. Free

Tip

J Tools is non-custodial. We never store your wallet’s private keys and never ask for your seed phrase. Every transaction you approve in a connected wallet is signed inside that wallet, and its key never reaches our servers. A few multi-wallet tools do let you paste private keys for throwaway hot wallets, which stay in your browser tab and sign there. Holder Booster is the one tool that hands a key to our worker: the fresh distributor wallet it creates for each run, sent encrypted. Never paste a key tied to long-term holdings, and if a page ever asks for your seed phrase, stop and close it.