How to Check If a Solana or pump.fun Token Is Safe
A practical pre-buy routine for Solana and pump.fun tokens: mint address, mint/freeze authority, liquidity and LP security (PumpSwap), and holder concentration.
Solana's low fees and fast launches — especially through platforms like pump.fun — mean new tokens appear constantly, and so do scams. Solana tokens don't work exactly like Ethereum ones, so the checks are a little different. Here's a practical pre-buy routine tuned for SPL tokens.
Start with the mint address (not the name)
On Solana, a token is identified by its mint address. Names and symbols are not unique and are trivially copied, so confirm the mint from a trusted source and verify it on a Solana explorer (such as Solscan or Solana Explorer) before doing anything else. Getting this wrong is how people buy a look-alike instead of the token they meant to.
Check mint authority and freeze authority
Two SPL-specific permissions matter most:
- Mint authority — if it is still active, someone can create new tokens and dilute or crush the price. Many legitimate tokens renounce (disable) mint authority after launch. An active mint authority is a risk to understand, not necessarily proof of bad intent.
- Freeze authority — if active, the holder can freeze token accounts, which can prevent you from moving or selling your tokens. A renounced freeze authority removes that specific power.
Explorers and Solana-focused scanners surface both. Renounced authorities reduce specific risks; active ones deserve scrutiny.
Check liquidity — and how it's secured
A token is only sellable if there's real liquidity to sell into. Check:
- Liquidity depth in the main pool, using a market tool like DEX Screener.
- Who holds the LP tokens. If the creator holds them, liquidity can be pulled. Locked or burned LP reduces that risk.
- pump.fun specifics. pump.fun tokens trade on a bonding curve and, once they fill it (they "graduate"), migrate to a pool on PumpSwap — pump.fun's own AMM. As currently documented, the migrated liquidity is locked and its LP tokens are burned, so that pool's liquidity cannot be pulled. That removes the classic liquidity-rug on the migrated pool — but the migration liquidity is often thin, and any dev-held or later-added allocation can still be dumped. Mechanics change over time, so confirm the current behavior on pump.fun's own documentation. Locked liquidity reduces the most common rug method but is necessary, not sufficient for safety.
Check holder concentration
Open the holders view on the explorer. If a small cluster of wallets — or a single dev wallet — controls most of the supply, one sale can end the market. Exclude known pool and infrastructure addresses, then judge what's left. Sudden concentration or supply moved to fresh wallets right before promotion is a classic warning.
Cross-check with a Solana-aware scanner
General EVM tools don't all cover Solana. Use a scanner that understands SPL tokens. Orixa's Solana analysis draws on Solana-specific sources — the Solana GoPlus endpoint, Solana RPC, RugCheck, DEX Screener, and (when configured) Birdeye flow data — rather than treating an SPL token as if it were an EVM contract. It reports mint/freeze authority evidence, liquidity, and concentration in one place. See Orixa Features and What Is Orixa.
A quick pump.fun red-flag routine
- Confirm the mint address on a Solana explorer.
- Check mint and freeze authority — renounced is safer; active needs a reason.
- Verify liquidity depth and LP security (locked/burned vs. dev-held).
- Read holder concentration; watch for dev-wallet dominance.
- Cross-check with a Solana-aware scanner and a second source.
- Never buy from your main wallet just to "test" whether it sells.
The honest limits
Renounced authorities and locked liquidity remove specific, common rug methods — they do not make a token "safe." A project can still fail through dumped dev allocations, off-chain deception, or a graduation event that plays out differently than expected. And any snapshot can change. Treat these checks as raising or lowering your confidence, not as a green light.
For the general framework this fits into, see How to Identify a High-Risk Crypto Token Before Buying. And because a Solana token can also trap the sell side, see How to Check If a Token Is a Honeypot.
Scan a Solana mint address in Orixa to review mint/freeze authority, liquidity, and holder concentration together — then confirm the critical findings on a Solana explorer. Orixa is decision support, not financial advice.
Enter a contract address and review the available risk evidence.
Orixa provides risk-analysis tools, not financial advice or a safety guarantee. Always verify evidence independently before interacting with a token.