How to Check if a Solana Token is a Rug Pull

Every day, hundreds of new tokens launch on Solana. Many of them are rug pulls — tokens designed from the start to steal money from buyers. The creator launches the token, waits for people to buy in, then removes the liquidity or dumps their holdings, crashing the price to zero.

The good news: most rug pulls follow predictable patterns. By checking a few key on-chain signals before you buy, you can avoid the vast majority of scams. This guide walks through the red flags that BarryGuard checks automatically — and that you should understand as a Solana trader.

Step 1: Check Mint Authority

The first thing to check on any Solana token is whether the mint authority is still active. Mint authority is a permission on the SPL token account that allows the holder to create (mint) new tokens out of thin air.

If mint authority is active, the creator can mint unlimited tokens at any moment — instantly diluting every existing holder. A legitimate token should have its mint authority revoked (disabled permanently). This is irreversible: once revoked, no one can ever mint more tokens.

Red flag: Mint authority is still active. The creator can print infinite tokens and dump them on the market.

Safe: Mint authority has been revoked. The supply is fixed.

Learn more about mint authority in our detailed guide: What is Mint Authority on Solana and Why It Matters.

Step 2: Check Freeze Authority

Freeze authority is a separate permission that allows the holder to freeze any wallet's token account. If freeze authority is active, the creator can prevent you from selling — effectively trapping your tokens in your wallet.

Like mint authority, freeze authority should be revoked on any legitimate token. If both mint and freeze authority are active, the creator has full control over the supply and over who can sell. This is a critical combination of red flags.

Red flag: Freeze authority is active. Your tokens could be frozen at any time.

Step 3: Check Liquidity Lock Status

When a token is listed on a DEX like Raydium, liquidity is added to a pool. The person who adds liquidity receives LP (liquidity provider) tokens that represent their share of the pool. If those LP tokens are not locked or burnt, the creator can remove all liquidity at any time, making the token impossible to sell.

There are three states for liquidity:

• Burnt: The LP tokens have been permanently destroyed. Liquidity can never be removed. This is the safest option.
• Locked: The LP tokens are held in a lock contract for a specified period. Liquidity cannot be removed until the lock expires. Longer locks are safer — 30+ days is considered good.
• Unlocked: The LP tokens are freely accessible. Liquidity can be removed at any time. This is a major red flag.

For a deep dive, read our guide: Understanding Liquidity Locks on Solana.

Step 4: Check Top Holder Concentration

Look at who holds the most tokens. If a single wallet (excluding known system addresses like the liquidity pool itself) holds more than 20-35% of the total supply, that single entity can crash the price by selling.

BarryGuard checks the top 20 holders and also calculates a Gini coefficient to measure overall distribution inequality. A healthy token has a well-distributed holder base. Extreme concentration (one wallet holding over 35%) forces BarryGuard to assign a Danger rating regardless of other checks.

Red flag: Single wallet holds over 20% of supply outside the liquidity pool.

Step 5: Check the Creator's Track Record

This is the single most important check in BarryGuard's methodology (weight: 18 out of a possible 186 total weight). The Developer History check looks at how many tokens the creator wallet has previously launched and how many of those turned out to be suspected rug pulls.

A creator with a 70%+ rug rate across their token history is almost certainly running another scam. BarryGuard automatically forces the score to Danger (score: 1) when it detects a serial rugger.

Red flag: Creator has launched multiple tokens before, most of which rugged.

Safe: Creator has a clean track record with zero suspected rugs across previous tokens.

Step 6: Check for Insider Activity

Several of BarryGuard's behavior checks look for signs of coordinated insider manipulation:

• Insider Network: Checks if multiple top holders were funded by the same wallet (same fee payer). If 5+ top holders share a funding source, they are likely sock puppets controlled by the same person.
• Bundle Detection: Checks if the token creator used Jito bundles to pack the mint transaction and early buy transactions into a single atomic block — guaranteeing they buy before anyone else can.
• Sniper/Bot Dominance: Checks what percentage of early buy transactions show bot-like timing patterns. If most early buys were automated, the token's initial market was captured by bots, not real users.
• Early Dump: Checks if the creator sold a large portion of their holdings within minutes of launch. A creator who dumps within 30 minutes is running a classic rug pull.

Step 7: Check Token Age and Market Health

New tokens carry inherently higher risk. Most rug pulls happen within the first few hours of a token's existence. BarryGuard checks:

• Token Age: How long ago the token was minted. Tokens less than 1 hour old are extremely risky.
• Holder Count: How many unique wallets hold the token. Fewer than 50 holders means very limited distribution.
• Creator Wallet Age: How old the creator's wallet is. A wallet created minutes before launching a token is highly suspicious.
• Bonding Curve Status: Whether the token has graduated from pump.fun to Raydium. Tokens stuck on the bonding curve for 24+ hours may be abandoned.

Step 8: Run a Honeypot Simulation

A honeypot is a token that can be bought but cannot be sold. BarryGuard simulates a sell transaction via Jupiter's quote API to determine whether the token can actually be traded. It also measures the price impact of the sell — even if the token can technically be sold, a price impact above 50% makes it economically unviable.

If the honeypot simulation detects that a token cannot be sold, BarryGuard forces the score to 1 (Danger) regardless of all other checks. A token you cannot sell is worthless.

Step 9: Use BarryGuard to Automate All of This

Checking all of these signals manually is possible but time-consuming. You would need to inspect the token account on a Solana explorer, check LP tokens, analyze holder distribution, look up the creator's past tokens, and simulate a sell transaction — all before the token either moons or rugs.

BarryGuard runs all 21 checks automatically in seconds. You can use it two ways:

• Web Checker: Go to barryguard.com/check and paste any Solana token address.
• Browser Extension: Install the BarryGuard Chrome extension and get risk overlays directly on pump.fun, DexScreener, Birdeye, and other platforms — without leaving the page.

Summary: Quick Rug Pull Checklist

Before buying any Solana token, verify the following:

1. Mint authority is revoked
2. Freeze authority is revoked
3. Liquidity is locked (30+ days) or burnt
4. No single wallet holds more than 20% of supply
5. Creator has a clean track record (no previous rugs)
6. No insider network detected among top holders
7. Creator did not bundle mint with early buys
8. Creator has not dumped tokens early
9. Token is sellable (not a honeypot)
10. Token has reasonable age, holder count, and liquidity

Or simply paste the token address into BarryGuard and let the 21 checks run automatically.

Disclaimer

BarryGuard provides risk indicators based on on-chain data. This is not investment advice. A low-risk score does not mean a token is safe to buy. A high-risk score does not guarantee a rug pull. Always do your own research and never invest more than you can afford to lose.