Token Contract Audit Checklist: 10 Rug-Pull Checks Anyone Can Run
Updated 2026-06-05 · 7 min read
A full professional audit takes time, code review and context. But buyers can still run a practical contract-risk checklist before touching a new token. This checklist focuses on the mechanics that most often create rugs, honeypots and unfair launches.
1. Can buyers sell?
A honeypot is the most direct trap: buys work, sells fail or are taxed to nothing. A sell simulation is essential because charts and volume cannot prove sellability.
2. Can the owner change balances, taxes or trading rules?
Dangerous owner powers include balance editing, blacklists, trading pauses, tax changes, upgradeable proxies and hidden admin roles. Some major tokens have special controls for legitimate reasons, but new anonymous tokens should not get the benefit of the doubt.
3. Can supply still be created or frozen?
Active mint authority means supply can be inflated. Active freeze authority means wallets can be frozen. On Solana, both are first-class mint-account checks; on EVM, scanners look for mintable and ownership patterns.
4. Is the main liquidity protected?
Unlocked liquidity is the classic rug. A serious token should show verifiable locked or burned liquidity on the main trading pool, with enough depth for real trading.
5. Who holds the supply and who launched it?
Holder concentration and deployer reputation are where many scams reveal themselves. A clean-looking contract can still be dangerous if one wallet or a recycled cluster controls the supply.
The strongest audit combines contract state with behavior: funding wallets, early buyers, repeated launch patterns and past outcomes.
Run every check in this guide automatically in seconds — free, no wallet needed.
Frequently asked questions
No. A professional audit reviews code and project context. A safety scan checks live on-chain risk signals quickly. SafuScan is a research scan, not a formal legal or financial certification.
Paste the contract or mint address into a scanner and review sellability, owner powers, mint/freeze status, liquidity proof and holder concentration before doing any deeper research.
Yes. A token can pass technical checks and still lose value because demand fades or the market changes. That is different from a rug-pull mechanism.