Is this Solana token safe? A buyer's rug check

Short answer: a Solana token is reasonably safe to buy when its mint and freeze authorities are revoked, its metadata is locked, its liquidity is burned or time-locked, and no small cluster of wallets holds most of the supply. Every one of those is on-chain, so you can verify it yourself before you risk a cent.

Nothing here is financial advice, and a clean checklist does not make a token a good investment. It only rules out the most common ways a token is built to be pulled out from under you.

Token you want to buy

Mint authority revoked?

Yes

Freeze authority revoked?

Yes

Liquidity locked or burned?

Yes

Lower risk, still do your own research

Higher risk, be cautious

What you need

#what-you-need

A token mint address (CA), the long string the project shares.
A Solana explorer open in another tab (Solscan, Solana Explorer, or similar) to read the mint’s on-chain flags.
Holder Snapshot to read holder distribution. The scan is read-only and never touches your wallet’s holdings.
J Map to see which of those holders are connected to each other, and Wallet Scope to read the individual wallets behind a cluster.

The rug check, step by step

#the-rug-check-step-by-step

Check the mint authority

Open the mint on an explorer and find the mint authority. If it reads as revoked, null, or “none”, supply is fixed and nobody can print more. If a wallet address is still listed, that wallet can mint unlimited new tokens whenever it wants and dilute you to zero. A live mint authority on a token that claims a fixed supply is the loudest red flag on this list.
Check the freeze authority

On the same mint, find the freeze authority. Revoked means no account can ever be frozen, so once you buy, your balance stays free to move. If a wallet still holds the freeze authority, that wallet can freeze your token account at will and lock you out of selling. Most honest community tokens have no reason to keep this, so a live freeze authority deserves a hard question.
Confirm the metadata is locked

Look at the update authority on the metadata. When it is revoked, the name, symbol, and image are permanent. When it is live, the project can rewrite the token’s identity after you buy, launching as one thing and editing into another. A locked identity is what stops a bait-and-switch. See Token authorities for how all three of these keys work.
Verify liquidity is locked or burned

A token needs a liquidity pool to trade, and the question is whether the team can drain it. Find the LP position and check whether the LP tokens were burned (destroyed, so the pool can never be withdrawn) or time-locked (held by a locker contract until a future date). If the LP tokens sit in the deployer’s own wallet, unlocked, the team can pull the pool in one transaction and leave holders with worthless tokens. That is the classic rug, and burned or locked liquidity is the on-chain proof the team cannot pull the pool. A time-lock does expire eventually, so check the unlock date too.
Read the holder distribution

Run the mint through Holder Snapshot. It returns a ranked holder list with each wallet’s balance and share of supply. Scan the top: if one or two wallets hold a large slice of the circulating supply, they can dump and crater the price at any moment. Exclude the pool, burn, and known locker addresses, then judge how concentrated the rest is. A long, flat tail of many small holders is healthier than a few whales sitting on everything.

Run a Holder Snapshot in the app →
Map the holders to see who is really one person

A ranked table has one blind spot, and it is a big one. It cannot tell you that the top ten wallets were all funded by the same address. Splitting a bag across twenty wallets takes minutes and makes any distribution table look healthy, which is exactly why people do it.

Paste the same mint into J Map. It draws the top holders as circles sized by share of supply and gives connected wallets the same color. Connected means real on-chain history: one funded the other, or tokens or other assets moved between them. It never infers from timing, balance shape, or naming. Pick your depth, up to the top 500 holders, and read the picture as the top of the book, because holders below the cutoff are not drawn.

Open J Map →
Open the wallets the map flags

A cluster tells you where to look, not what you found. Copy the addresses out of the group that bothers you and run them through Wallet Scope. The free layer needs no wallet connection and gives you each address on one row: SOL and token balances, USD value, wallet age, the last 15 swaps, and an on-chain label for anything that is a pool, a program, a burn address, or an exchange. It also groups the set by first funder, so when the map linked wallets through funding, you can confirm that link here.

Now the picture resolves. Twenty wallets that all appeared in the same week and all trace to one funder read as one entity. A “cluster” that turns out to be an exchange hot wallet and its withdrawals reads as nothing at all.

Open Wallet Scope →
Check the contract age and history

A mint created minutes ago with no trading history carries more unknowns than one that has traded for weeks. New is not automatically bad, but a brand-new mint paired with heavy pressure to buy right now is a pattern worth slowing down for. Check when the mint was created and how its first transactions look on the explorer.

What each red flag means

#what-each-red-flag-means

You see	What it means	How worried to be
Mint authority still live	Supply can be inflated. The team can print more and dilute every holder.	High. On a “fixed supply” token, treat it as disqualifying.
Freeze authority still live	Your token account can be frozen, blocking you from selling.	High for a community token. Ask why it is kept.
Update authority still live	The name, symbol, and image can be changed after launch.	Medium to high. Identity is not final.
LP tokens in deployer wallet, unlocked	The team can withdraw the pool and rug holders in one transaction.	High. This is the most common exit.
One or two wallets hold most supply	A single sell can crash the price. Whoever holds that much controls where it goes.	High when it is insiders; lower when it is a locker or treasury.
Top holders come back as one cluster	The wallets are linked on-chain, so their shares add up to one position, not several.	High when the linked wallets are fresh and unlabeled. Low when the group is an exchange.
Mint created minutes ago, no history	Untested, no track record, easy to abandon.	Context-dependent. Pair with the flags above.

Notes and limits

#notes-and-limits

Concentration needs context. The liquidity pool itself, the burn address, and locker contracts all show up as large “holders” in any snapshot. They are not insiders. Identify and set them aside before you judge how concentrated real holders are. There is no universal cutoff for what counts as too much; that depends on the token’s age and design.
A cluster is a question, not a verdict. Read the labels and the ages in Wallet Scope before you decide, and remember the map only draws the depth you picked, so a long tail of small holders sits below the line either way.
A clean mint is necessary, not sufficient. Revoked authorities and locked liquidity remove the built-in exits. They say nothing about whether the project ships, the team is real, or the price holds. Do the rest of your own research.
The chain is the source of truth. A project’s website or chat can claim anything. The explorer and a holder snapshot show what is actually true. When the words and the chain disagree, believe the chain.

For a launcher’s view of the same checklist, read Make your token rug-proof. It walks through revoking authorities and locking liquidity from the deployer’s side, the same Token authorities keys you read here as a buyer, seen from the other end.

#related-pages

Or skip the manual explorer hop and read the same flags in one pass: Explore the tools in the app →