Solana Rugpull Detection (8 Checks Before You Buy)

About 60-70% of Solana memecoins end as rugpulls. Liquidity vanishes before Pump.fun graduation, LP holders dump on Raydium, retail holders are left with nothing tradable. A 90-second pre-buy scan is the only practical way to see this coming.

Who this is for

Anyone glancing at a fresh Pump.fun or Raydium token. You know your way around the Solana ecosystem, you can open Solscan, and you want to know what a healthy project looks like before you commit capital. Eight checks, none take more than 30 seconds.

1. Mint authority — permanently revoked

If mint authority is still open, the owner can dilute supply at any time. A healthy token shows mint authority as "None" on Solscan. If a wallet address is still listed there, the risk is high. The owner is supposed to close that door with the Solana mint authority revoke tool, and the action is one-way.

2. Freeze authority — wallet freeze risk

Freeze authority left open lets the owner freeze any holder wallet at will. Yours included. You want to see "None" on Solscan in that field too. The Solana freeze authority revoke tool closes it. Exception: stablecoins and whitelist tokens that legally need the freeze power.

3. LP — locked or burned

The liquidity pool is the single highest-impact failure point. If the LP tokens are not burned or locked, the owner can pull SOL from the pool in five minutes and the token price collapses. Check the Raydium pool details: are the LP tokens still in the deployer wallet, or sent to a burn address or lock contract? More on this in the Solana token guides category with side-by-side LP burn vs lock comparisons.

4. Top 10 holder concentration

Open the Solscan holder list and read off how much supply the top 10 wallets hold. Below 30%: healthy. 30-50%: watch closely. 50%+: high risk. 70%+: insider concentration, and a single sale tanks the chart. If multiple "fresh wallets" (only ever traded this token) appear in the top 10, the deployer is probably masquerading as holders.

5. Deployer wallet history

Look up the wallet that holds, or recently revoked, mint authority on Solscan. Does its tx history show other token launches? Were they all dumped 1-2 weeks later, with the wallet emptied afterwards? A repeating pattern is a serial rugpull signature. Brand-new wallets with less than a week of tx history carry their own risk.

6. Volume — real or fake

Pull up trade history on DexScreener or Birdeye. If 60%+ of volume comes from the same 5-10 wallets, you are looking at bot-generated volume. Real volume comes from hundreds of distinct wallets organically. Fake volume buys temporary listing visibility but has no demand under it. The holder analytics for Solana tool exposes the holder-to-volume ratio quickly.

7. Metadata — immutable

If update authority is still open, the owner can change the name, symbol, image, and URI fields whenever they want. The thing you bought can rebrand into something else overnight. Solscan should show "Is Mutable: false" in the metadata section. A still-mutable token is a project that has not finalized its identity.

8. Bonding curve or AMM — what stage

On Pump.fun: still on the bonding curve, or graduated to Raydium? Pre-graduation has different risks (the owner cannot pull until the curve fills, but post-graduation behaviour shifts to LP-based). Once graduated, LP lock/burn becomes critical (loop back to check #3).

When to walk away

Three of these eight flagged red is a pass. One or two flagging amber means smaller position size. All green still does not guarantee anything; these checks reduce risk, they do not eliminate it.

Automating the checks

Manual checking takes 90 seconds per token. If you scan 20 tokens a day you need automation. The Solana token snapshot tool covers checks 1 through 6 from a single form. If you are launching your own token with the Solana token creator tool, run this same list against your project before launch — investors will run it against you. More guides under the Solana tag page.