Guides

Solana Honeypot Checkers, Token Sniffers & Contract Scanners: Your Complete Rug-Pull Defense Guide

Learn how to use honeypot checkers, token sniffers, and contract scanners on Solana to avoid rugs. Your complete defensive guide for meme traders.

Updated: Jan 5, 2025
Crypto Ape
Crypto Ape
Security Researcher & Bot Auditor
Former white-hat hacker turned crypto security specialist. Audits smart contracts and trading bots for a living. Lost and made fortunes in DeFi.
10+ years cybersecurity Smart contract auditor

⚠️ Important: This content is for informational and educational purposes only. It is not financial advice. Meme coin trading involves substantial risk. Always do your own research and never invest more than you can afford to lose.

Introduction

You FOMO’d into a new meme coin. The chart looked perfect, the community was hyped, and the volume was pumping. You hit buy.

Then you tried to sell.

Transaction failed.

You try again. Failed. You check the contract. Honeypot. Your money is trapped.

This is the reality of meme coin trading on Solana. Without proper safety tools, you’re playing on hard mode—and the house always wins.

This guide will teach you how to use honeypot checkers, token sniffers, and contract scanners to avoid getting rugged. Consider it your survival manual.

Why Honeypot & Rug-Pull Protection Matters for Solana Memes

Let’s start with a reality check.

A Short Story: The Trapped Trader

Sarah found a new meme coin on Pump.fun. It had:

  • Great branding
  • Active Telegram
  • Rising volume
  • Promising chart

She bought 5 SOL worth. Price pumped 2x. She tried to take profit.

Error: Transaction failed.

She checked the contract. The token had a blacklist function—the dev could prevent specific wallets from selling. Her wallet was blacklisted the moment she bought.

5 SOL gone. Forever.

Defining the Threats

Honeypot

A token that allows buying but prevents selling. You can enter, but you can’t exit. Your money is trapped until the dev decides otherwise (usually never).

Soft Rug vs Hard Rug

  • Soft Rug: Dev takes profits gradually, liquidity slowly drains, price bleeds out
  • Hard Rug: Dev pulls all liquidity instantly, price goes to zero immediately

Both hurt, but hard rugs are instant death. Soft rugs give you a chance to exit (if you’re paying attention).

The Hard Mode Reality

Trading meme coins without safety tools is like driving blindfolded. You might get lucky a few times, but eventually you’ll crash. These tools aren’t optional—they’re essential.

What Is a Solana Honeypot Checker?

A honeypot checker is a tool that tests whether you can actually sell a token before you buy it.

What Honeypot Checkers Actually Test

1. Ability to Sell

The checker attempts a test sell transaction to verify:

  • Can you execute a sell order?
  • Are there hidden restrictions?
  • Will the transaction actually go through?

2. Tax Settings

Some tokens have extreme buy/sell taxes:

  • 50% sell tax means you lose half your money on every sell
  • This isn’t technically a honeypot, but it’s effectively the same

3. Blacklists / Whitelists

Tokens can restrict trading to specific wallets:

  • Blacklist: Certain wallets can’t sell
  • Whitelist: Only certain wallets can trade

Checkers test if your wallet would be blocked.

Comparison with EVM Token Sniffers

If you’ve used tools like Token Sniffer on Ethereum, Solana honeypot checkers work similarly but check Solana-specific contract features:

  • Mint authority (can dev create more tokens?)
  • Freeze authority (can dev freeze your tokens?)
  • Transfer restrictions (can you actually move tokens?)

Token Sniffer Solana & Contract Scanners

Let’s dive deeper into what these tools actually do.

What a “Token Sniffer” Does in Solana Context

A token sniffer scans on-chain data to identify suspicious patterns:

Red Flags It Detects:

  • New token with no liquidity lock
  • Dev wallet holding massive supply
  • Suspicious contract functions
  • Copycat token names
  • Recent creation with no history

How It Works:

  • Scans contract code for known exploit patterns
  • Checks wallet history of creator
  • Analyzes liquidity and holder distribution
  • Compares against known scam patterns

Basic Contract Scanning

Mint Authority

  • Revoked: Dev can’t create more tokens (good)
  • Active: Dev can mint unlimited supply (bad)
  • Check: Always verify mint authority is revoked

Freeze Authority

  • Revoked: Dev can’t freeze your tokens (good)
  • Active: Dev can freeze your tokens anytime (very bad)
  • Check: Freeze authority should always be revoked

LP Lock Status

  • Locked: Liquidity is locked for a period (good)
  • Unlocked: Dev can pull liquidity anytime (bad)
  • Check: Look for locks from reputable lockers (like Pump.fun’s automatic lock)

What Scanners Can and Cannot Guarantee

What They Can Do:

  • ✅ Detect known exploit patterns
  • ✅ Check basic contract safety (mint, freeze, etc.)
  • ✅ Identify obvious scams
  • ✅ Warn about high-risk tokens

What They Cannot Do:

  • ❌ Guarantee a token is safe (new exploits emerge constantly)
  • ❌ Detect social engineering scams
  • ❌ Predict if dev will rug later
  • ❌ Protect against coordinated attacks

The Reality: Scanners reduce risk, but they don’t eliminate it.

Step-by-Step: Checking a New Meme Coin Before Buying

Here’s your pre-trade checklist. Follow it every single time.

Step 1: Get Token Address from Trusted Source

Where to Get Addresses:

  • Official project website
  • Verified social media (check for verified badges)
  • Reputable launchpads (Pump.fun, Raydium)
  • Trusted community members

Red Flags:

  • Random Telegram messages
  • Unverified Twitter accounts
  • Copycat websites
  • Suspicious links

Step 2: Run Honeypot Check

What to Check:

  • Can you sell? (Test transaction should succeed)
  • Any sell restrictions? (Taxes, blacklists, etc.)
  • Contract functions? (Mint, freeze, etc.)

Tools to Use:

  • GMGN safety checks
  • Birdeye token analysis
  • Dedicated honeypot checker tools

What to Look For:

  • ✅ “Safe to trade” or “No restrictions detected”
  • ❌ “Honeypot detected” or “Sell restrictions found”

Step 3: Scan Contract / Mint Authorities

Check These:

  • Mint authority: Should be revoked
  • Freeze authority: Should be revoked
  • LP lock: Should be locked (or at least not immediately unlockable)

How to Interpret:

  • All revoked + locked = Lower risk (but not zero)
  • Any active authority = Higher risk
  • No lock = Very high risk

Step 4: Verify LP Status

What Is LP? Liquidity Pool (LP) is the token/SOL pair that allows trading. If LP is pulled, trading stops.

What to Check:

  • Is LP locked? (Good)
  • When does it unlock? (Sooner = riskier)
  • How much LP is there? (More = safer)
  • Who provided LP? (Dev vs. community = different risk)

Example Fields:

  • LP Locked: Yes ✅
  • Unlock Date: 2025-12-31 (6 months away = good)
  • LP Amount: 50 SOL (decent for new token)
  • LP Provider: Pump.fun (automatic lock = good)

Anti-Rug Pull Bots & Automated Safety Layers

Some tools go beyond checking—they actively protect you.

What Is an “Anti-Rug Pull Bot”?

An anti-rug pull bot is a trading bot that includes safety features:

Features:

  • Automatic honeypot detection before trades
  • Contract scanning integration
  • Block trades that fail safety thresholds
  • Warn about suspicious tokens

How They Work:

  • Before executing a trade, bot checks token safety
  • If token fails checks, trade is blocked
  • You get a warning explaining why

Tools with Built-in Safety

Some meme trading bots include safety features:

  • GMGN: Includes honeypot detection and safety scores
  • BullX: Has safety checks before execution
  • Photon: Warns about suspicious contracts

Pros and Cons of Relying on These

Pros:

  • ✅ Automatic protection
  • ✅ No manual checking required
  • ✅ Fast (checks happen during trade setup)

Cons:

  • ❌ Not perfect (can miss new exploit patterns)
  • ❌ May block legitimate tokens (false positives)
  • ❌ Can’t protect against social engineering
  • ❌ You still need to understand what you’re trading

The Verdict: Use them as one layer, not your only layer.

Common Red Flags for Rugs on Solana

Here’s your red flag checklist. If you see multiple, run away.

Red Flag 1: Mint Authority Not Revoked

What It Means:

  • Dev can create unlimited new tokens
  • They can dump supply and crash price
  • You’ll never know when it happens

Why It Matters:

  • Even if price pumps, dev can mint and dump
  • Your tokens become worthless
  • No way to predict or prevent

Action: Never buy tokens with active mint authority.

Red Flag 2: No LP Lock / Unlocks Soon

What It Means:

  • Dev can pull liquidity anytime
  • When they do, price goes to zero
  • You can’t sell even if you want to

Why It Matters:

  • Hard rug can happen instantly
  • No warning signs
  • Complete loss of capital

Action: Prefer tokens with locked LP (6+ months is ideal).

Red Flag 3: Very High Buy/Sell Tax

What It Means:

  • Extreme taxes (30%+ on sells)
  • You lose huge portion on every trade
  • Effectively a soft honeypot

Why It Matters:

  • Even if price goes up, taxes eat profits
  • Makes profitable exits nearly impossible
  • Dev profits from every trade

Action: Avoid tokens with >10% sell tax (5% is already high).

Red Flag 4: Dev Wallets with Huge Allocations Still Unlocked

What It Means:

  • Dev holds 50%+ of supply
  • Tokens aren’t locked or vested
  • They can dump anytime

Why It Matters:

  • Dev can crash price by selling
  • No incentive alignment
  • High risk of soft rug

Action: Check token distribution. Dev should have <20% or be locked.

Red Flag 5: Freeze Authority Active

What It Means:

  • Dev can freeze your tokens
  • You can’t trade even if you want to
  • Complete control over your assets

Why It Matters:

  • Worst-case scenario
  • Your tokens become completely useless
  • No way to exit

Action: Never buy tokens with active freeze authority.

Red Flag 6: Copycat Token Names

What It Means:

  • Token name very similar to popular coin
  • Trying to trick people
  • Usually low effort scam

Why It Matters:

  • Shows lack of originality
  • Indicates scam intent
  • Low probability of success

Action: Be extra cautious with copycat names.

How to Combine Tools into a Safety Workflow

Safety isn’t one tool—it’s a process. Here’s how to combine everything.

Example Workflow

Step 1: Discovery (Wallet Tracker)

  • Find new coin via wallet tracker
  • See smart money buying
  • Get token address

Step 2: Basic Safety (Honeypot Checker)

  • Run honeypot check
  • Verify you can sell
  • Check for restrictions

Step 3: Deep Check (Contract Scanner)

  • Scan mint/freeze authorities
  • Check LP lock status
  • Verify token distribution

Step 4: MEV & Execution Safety

  • Consider MEV risk (see MEV guide)
  • Set appropriate slippage
  • Use priority fees wisely

Step 5: Execute (If All Clear)

  • Use BullX or Trojan for fast execution
  • Start with small size
  • Monitor closely

Suggested Personal Checklist

Create your own checklist and save it. Here’s a template:

Pre-Trade Safety Checklist:

  • Token address from trusted source
  • Honeypot check passed
  • Mint authority revoked
  • Freeze authority revoked
  • LP locked (or acceptable unlock date)
  • Dev allocation <20% or locked
  • Sell tax <10%
  • Contract scanned, no obvious exploits
  • Community seems legitimate (not botted)
  • Starting with small test size

Only trade if 8+ items checked.

Limitations: No Tool Can Save You from Everything

This is critical: safety tools reduce risk, but they don’t eliminate it.

Why Tools Can’t Guarantee Safety

New Exploit Patterns

  • Scammers constantly evolve
  • New contract patterns emerge
  • Tools detect known patterns, not future ones
  • You’re always one step behind the latest scam

Social Engineering

  • Fake communities (botted Telegram, fake Twitter)
  • Coordinated pump schemes
  • Insider manipulation
  • Tools can’t detect these

Delayed Rugs

  • Token passes all checks today
  • Dev rugs 3 months later
  • Nothing you could have done
  • This is just risk you accept

What You Can Do

Always Test with Small Size First

  • Never go all-in on first trade
  • Test with $10-50
  • Verify you can actually sell
  • Then scale up if comfortable

Don’t Over-Trust Any Single Score

  • Safety scores are helpful but not guarantees
  • Combine multiple tools
  • Use your own judgment
  • When in doubt, skip the trade

Stay Updated

  • New tools emerge constantly
  • Follow security researchers
  • Join communities that share exploits
  • Keep learning

If you’re using trading bots, here are specific safety practices.

Safety Settings Presets

Create Presets for Different Risk Levels:

Conservative Preset:

  • Max trade size: 0.5 SOL
  • Stop after 3 consecutive losses
  • Only trade tokens with safety score >8/10
  • Require LP lock >6 months

Standard Preset:

  • Max trade size: 2 SOL
  • Stop after 5 consecutive losses
  • Only trade tokens with safety score >6/10
  • Require LP lock >3 months

Aggressive Preset (Experienced Only):

  • Max trade size: 5 SOL
  • Stop after 10 consecutive losses
  • Safety score >4/10 (still check manually)
  • LP lock preferred but not required

Don’t Disable Warnings for FOMO

Common Mistake:

  • Bot warns about suspicious token
  • You disable warning because “this one is different”
  • You get rugged

The Rule:

  • If bot warns, investigate thoroughly
  • Don’t disable safety features
  • If you’re unsure, skip the trade
  • FOMO kills more wallets than missing opportunities

Bot-Specific Safety Tips

For BullX Users:

  • Enable all safety checks
  • Use conservative slippage (5-10%)
  • Set max trade size limits
  • Review safety audit features

For Trojan Users:

  • Enable transaction confirmations
  • Use safety presets
  • Don’t auto-approve all trades
  • Check contract before large trades

For Photon Users:

  • Use dashboard safety scores
  • Enable honeypot detection
  • Set priority fees conservatively
  • Review before executing

For GMGN Users:

  • Check safety scores on token pages
  • Use built-in honeypot checker
  • Review wallet activity before copying
  • Don’t blindly follow “safe” labels

For detailed safety settings and configuration:

Final Checklist (Copy-Paste)

Here’s a compact checklist you can screenshot and use:

Pre-Trade Safety Checklist

Token Verification:

  • Address from trusted source
  • Honeypot check: PASSED
  • Can sell: YES
  • Sell tax: <10%

Contract Safety:

  • Mint authority: REVOKED
  • Freeze authority: REVOKED
  • LP locked: YES (or acceptable date)
  • LP amount: Adequate for trade size

Token Distribution:

  • Dev allocation: <20% OR locked
  • Top 10 holders: Not suspicious
  • No single wallet >50%

Community & Social:

  • Community seems real (not botted)
  • Dev is responsive/known
  • Not obvious copycat

Risk Management:

  • Starting with small test size
  • Max loss limit set
  • Exit strategy planned
  • Can afford to lose this amount

Only proceed if 12+ items checked.


Remember: No checklist is perfect. When in doubt, skip the trade. There will always be another opportunity.

For more on building a complete safety workflow, check out our guide on Building Your Solana Meme Trading Stack.


Disclaimer: This is not financial advice. Honeypot checkers and safety tools reduce but do not eliminate risk. Scammers constantly evolve new methods. Always do your own research, test with small amounts, and never risk more than you can afford to lose. See our full Risk Disclaimer.

#solana #security #honeypot #rug-pull #safety #beginners

🤖 Related Trading Bots

📖 Related Terms

Frequently Asked Questions

Is this financial advice?

No. All content on MemeGateway is for informational and educational purposes only. We are not financial advisors. Always do your own research before making any investment decisions.

How do you review trading bots?

We evaluate bots based on security audits, key storage methods, user reviews, features, supported chains, and overall reliability. Our team tests each bot and aggregates community feedback.

Do you earn from affiliate links?

Yes. We earn commissions when you use our referral links. This helps us maintain the site and continue providing free content. Our reviews remain honest and unbiased.