How to Verify a Solana Token Before You Buy (2026 Guide)

Buying a Solana token without verification is gambling. The chain is fast, transactions are final, and the asset class attracts deliberate scams. This guide walks through the 6 checks every buyer should do in under 3 minutes — before clicking buy.

We're Alchemii — we build Solana token creation tooling. We see thousands of tokens launched every week. The ones that don't rug share a checklist; the ones that rug skip it.

Step 1: Get the right contract address

The single biggest cause of memecoin losses isn't the token rugging — it's buyers buying the wrong token with a similar name and ticker. Impersonator tokens are everywhere on Solana.

Verify the contract address from a primary source:

• The project's Twitter/X pinned tweet
• The pinned message in the official Telegram
• A verified DexScreener pair (linked from the project's own site/socials)

Never trust:

• Screenshots posted in chat
• "Helpful" replies in random Twitter threads
• Telegram bots posting "the new token"
• Copy-paste from Discord general channels

A real Solana mint address looks like this: DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263 (BONK). It's 32-44 characters, base58-encoded, and case-sensitive. Always check character by character.

Step 2: Check the authorities (Solscan)

Paste the contract address into Solscan. Look at the "Authorities" section.

| Authority | What to look for | |---|---| | Mint Authority | Should be null for memecoins. Active = dev can dilute supply. | | Freeze Authority | Should be null for memecoins. Active = dev can freeze your wallet. | | Update Authority | Optional. Active is OK for projects that may update branding. |

For a deeper explanation of what each authority does, read What is Mint Authority? and What is Freeze Authority?.

One exception: regulated stablecoins like USDC keep freeze authority for legal compliance. That's correct for them — but irrelevant to memecoin safety.

Step 3: Check holder distribution (Solscan)

On Solscan, click "Holders". You're looking for:

• Top wallet percentage — if one wallet (excluding the LP and burn address) holds >10% of supply, exit risk is high. The deployer probably pre-mined and will dump on you.
• Wallet count — under ~100 holders for a token claiming "trending" status is suspicious.
• Distribution flatness — many small wallets is a healthy sign. A few wallets each holding 5-10% is a coordinated buy ring.

Common LP / burn wallets you should ignore in this analysis:

• 1nc1nerator11111111111111111111111111111111 — Solana incinerator (burned tokens go here)
• The Raydium LP authority address for the relevant pool
• Pump.fun's bonding curve account (if pre-graduation)

These aren't "holders" — they're protocol-owned positions. Solscan usually labels them.

Step 4: Verify LP burn or lock (DexScreener)

Navigate to the token on DexScreener. Look for the LP status:

• 🔥 LP burned — best signal. Liquidity is permanently locked, no rug possible.
• 🔒 LP locked — second best. Deployer locked LP for X months/years via a service like Streamflow. Check the lock duration.
• ⚠️ LP held by deployer — high risk. Deployer can pull liquidity any time and zero the price.

For memecoins specifically, you want LP burned. Locking is fine for serious projects with a roadmap; held LP on a memecoin is a giant red flag. Read our LP burn guide for context on the difference.

Step 5: Check chart context

Still on DexScreener, look at the price chart and volume:

• Token age — fresh memecoins (under 24 hours old) are highest risk. Wait at least an hour after launch to see if the deployer's first move is to dump.
• Volume profile — organic tokens have volume that builds. A flat green candle with one massive sell is a textbook dump pattern.
• Liquidity depth — under ~$5K liquidity means even a small buy moves price 30%+. You're providing exit liquidity for whoever gets in next.
• Holder count growth — DexScreener shows holder count over time. Real momentum has new holders steadily; pumps have a one-time spike.

Step 6: Sentiment check

Open Twitter/X and search the contract address. You'll see:

• People talking about it (sign of organic interest)
• Or people calling it a scam (early warning)
• Or nobody (trending tokens have at least some chatter)

Also check the project's own Twitter — if they have fewer than 100 followers and no engagement on tweets, the "trending" status is bot-driven.

Open the official Telegram (linked from their Twitter, not from the token page). Look at:

• Member count vs message activity (fake groups have high member counts but zero recent messages)
• Pinned message — does it match the contract address you're verifying?
• Admin behavior — are they answering questions or just shilling?

Red flags that immediately disqualify

If any of these are true, walk away:

• ❌ Authority status doesn't match what their Twitter claims
• ❌ Top non-LP wallet holds >25% of supply
• ❌ DexScreener shows the deployer wallet still holds LP, despite Twitter saying "LP burned"
• ❌ Project Twitter is under 30 days old AND has under 500 followers
• ❌ Multiple identical tokens on Solscan with names within 1-2 characters
• ❌ Contract was created less than 5 minutes before you saw it being shilled
• ❌ Telegram admin DMs you offering "early entry"
• ❌ The token claims to be "the official Solana foundation token" — it's not

What "verified" actually means on Solana

Unlike Ethereum, where contracts can be "verified" by publishing source code, SPL tokens don't have per-token source code to verify. They all use the same SPL Token Program. So "verified token" on Solana isn't a thing in the Etherscan sense.

What does exist:

• Jupiter strict list — a curated allowlist of tokens that pass quality and safety bars. Inclusion is a strong signal but not automatic; new tokens take days to weeks to be added.
• CoinGecko / CoinMarketCap listings — require manual review and a track record. Tokens listed here have been around for at least a few days and have traded volume.
• Exchange listings — major Solana DEXs (Raydium, Orca, Jupiter) auto-list any SPL token, but centralized exchanges like Binance and Coinbase have application processes that screen for the issues this guide covers.

A quick checklist you can copy-paste

□ Contract address from primary source (not a screenshot)
□ Mint authority = null
□ Freeze authority = null
□ Top non-LP wallet < 10% of supply
□ LP burned or locked (not held)
□ Token > 1 hour old with steady volume
□ Project Twitter > 30 days old, real engagement
□ Telegram active, pinned msg matches contract
□ No red flag from "instant disqualifiers"

Run through this in under 3 minutes. If anything looks off, skip and find a different play. The next memecoin opportunity is 10 minutes away on Solana — losing on a verified rug is the worst possible outcome.

Common questions

Are bonding-curve tokens on Pump.fun easier or harder to verify? Easier in some ways — Pump.fun automatically burns LP and you can see the bonding-curve mechanics on-chain. But harder because pre-graduation tokens don't show on DexScreener and impersonator coordination is rampant. See our is Pump.fun safe breakdown.

Can a verified token still rug? Yes — if authorities are revoked and LP is burned, the contract can't rug, but the price can still go to zero if the meme dies. Verification protects you from technical rugs, not from buying a bad meme.

Does Phantom wallet warn about scam tokens? Phantom shows a warning on tokens flagged by their security partner (Blowfish) — it's helpful but not exhaustive. Don't rely on the wallet warning alone.

How long does manual verification take? 3-5 minutes after you've done it a few times. Less than the time it takes to send the buy transaction.

Is there an automated tool for all 6 steps? RugCheck.xyz and similar tools automate parts of it (authority status, holder concentration). They're a good first pass but I'd still verify manually for any buy over a few SOL — automated tools can be tricked by clever launch patterns.

---

Verified the token? Time to set up the buy. Back to learning about LP burns or our Solana memecoin launch checklist (for builders who want to launch a token that passes this verification). Want to launch your own meme coin that survives this checklist by default? Use our Solana meme coin creator — every authority is revoked at mint time and LP burn is one click.