Safety brief
How to Check a Token Before You Buy
Six checks you can run yourself on any token, with a block explorer and the contract. None of them require trusting the project's own description.
Anyone can deploy a token, name it whatever they like and publish a website about it. Most of the properties that matter, however, are recorded on-chain and readable by anyone. These are checks you can run yourself, in order, before deciding anything. They will not tell you whether something is a good investment — none of this is about price — but they answer whether you understand what you would be holding and who is able to change it.
1. Get the contract address from the project, not from a search
The token is the contract address; the name and symbol are labels anyone can copy. Take the address from the project's own documentation or from the chain's official listing, and note which network it belongs to. The same project may use a different address on each chain, and an address that is correct on one network identifies nothing on another.
2. Check that the source is verified
A block explorer will tell you whether the deployed bytecode matches published source code. Verified means anyone can read what the contract does. Unverified means nobody outside the team can, and that alone is a reason to stop. Verification is not an endorsement — it establishes what is running, not that what is running is safe.
3. Find the privileged functions
Establish whether the contract can mint new units, pause transfers, blacklist addresses, take a fee on transfer, or be upgraded to entirely different code. Any of these may be legitimate. All of them mean the rules can change after you buy, so the real question is who holds that power and whether a timelock or a multi-signature arrangement stands between the intention and the change.
4. Look at how the supply is distributed
Explorers list the largest holders. Concentration proves nothing by itself: exchange wallets, bridge contracts and staking contracts all appear as large holders and hold on behalf of many people. What you are looking for is whether the top entries can be accounted for. Addresses holding a large share that nobody can explain are a risk you are either taking knowingly or not at all.
5. Check that you can sell, not only buy
Some contracts allow purchases and block or heavily tax sales for everyone outside a permitted list. That is what honeypot describes, and it is a contract behaviour rather than a market condition. It shows up in the transfer logic and in simulation tools, and a very small test sale answers it more directly than any dashboard.
6. Read the liquidity arrangement
On a decentralised exchange, whether you can exit at all depends on a pool that someone funded and may withdraw. Check whether the liquidity position is locked or sits with an address that can remove it at will. A removable pool is the mechanism behind most rug pulls, and it is visible beforehand rather than only afterwards.
Key takeaway
What none of this covers
These checks describe the contract, not the people. A contract can be flawless and the team can still walk away from it. And every claim about partnerships, listings and audits sits outside the chain entirely, which means each has to be verified at the source that supposedly issued it.
More guides
Next