How to Verify a Solana Token Before You Buy (2026)

Verifying a Solana token before buying means running a six-step on-chain and off-chain check — confirm the contract address from a primary source, verify mint and freeze authorities are null on Solscan, check holder distribution (top non-LP wallet under 10%), confirm LP is burned or locked on DexScreener, look at chart context for token age and volume, and search the contract address on Twitter and Telegram for sentiment. The full check takes 3–5 minutes once practiced, less than the time to send the buy transaction. SPL tokens don't have per-token source code to verify in the Etherscan sense — they all share the SPL Token Program — so "verified" on Solana means the token has passed curated lists like the Jupiter strict list, not that bytecode has been audited.

Buying a Solana token without checking it is gambling, and most people lose. The chain is fast, transactions are final, and the asset class attracts deliberate scams faster than any other. The good news: 90% of rugs flag themselves on-chain in the first 30 seconds of due diligence — once you know which six fields to check.

We make Alchemii, the token creator side of this market. We watch thousands of tokens launch every week, and the pattern is unmistakable: the legit ones share the checklist below, the rugs skip it. Run this before every buy.

Step 1: Get the right contract address

The single biggest cause of memecoin losses isn't the token rugging — it's buyers buying the wrong token with a similar name and ticker. Impersonator tokens are everywhere on Solana.

Verify the contract address from a primary source:

• The project's Twitter/X pinned tweet
• The pinned message in the official Telegram
• A verified DexScreener pair (linked from the project's own site/socials)

Never trust:

• Screenshots posted in chat
• "Helpful" replies in random Twitter threads
• Telegram bots posting "the new token"
• Copy-paste from Discord general channels

A real Solana mint address looks like this: DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263 (BONK). It's 32-44 characters, base58-encoded, and case-sensitive. Always check character by character.

Step 2: Check the authorities (Solscan)

Paste the contract address into Solscan. Look at the "Authorities" section.

Authority	What to look for
Mint Authority	Should be null for memecoins. Active = dev can dilute supply.
Freeze Authority	Should be null for memecoins. Active = dev can freeze your wallet.
Update Authority	Optional. Active is OK for projects that may update branding.

For a deeper explanation of what each authority does, read What is Mint Authority? and What is Freeze Authority?.

One exception: regulated stablecoins like USDC keep freeze authority for legal compliance. That's correct for them — but irrelevant to memecoin safety.

Step 3: Check holder distribution (Solscan)

On Solscan, click "Holders". You're looking for:

• Top wallet percentage — if one wallet (excluding the LP and burn address) holds >10% of supply, exit risk is high. The deployer probably pre-mined and will dump on you.
• Wallet count — under ~100 holders for a token claiming "trending" status is suspicious.
• Distribution flatness — many small wallets is a healthy sign. A few wallets each holding 5-10% is a coordinated buy ring.

Common LP / burn wallets you should ignore in this analysis:

• 1nc1nerator11111111111111111111111111111111 — Solana incinerator (burned tokens go here)
• The Raydium LP authority address for the relevant pool
• Pump.fun's bonding curve account (if pre-graduation)

These aren't "holders" — they're protocol-owned positions. Solscan usually labels them.

Step 4: Verify LP burn or lock (DexScreener)

Navigate to the token on DexScreener. Look for the LP status:

• 🔥 LP burned — best signal. Liquidity is permanently locked, no rug possible.
• 🔒 LP locked — second best. Deployer locked LP for X months/years via a service like Streamflow. Check the lock duration.
• ⚠️ LP held by deployer — high risk. Deployer can pull liquidity any time and zero the price.

For memecoins specifically, you want LP burned. Locking is fine for serious projects with a roadmap; held LP on a memecoin is a giant red flag. Read our LP burn guide for context on the difference.

Step 5: Check chart context

Still on DexScreener, look at the price chart and volume:

• Token age — fresh memecoins (under 24 hours old) are highest risk. Wait at least an hour after launch to see if the deployer's first move is to dump.
• Volume profile — organic tokens have volume that builds. A flat green candle with one massive sell is a textbook dump pattern.
• Liquidity depth — under ~$5K liquidity means even a small buy moves price 30%+. You're providing exit liquidity for whoever gets in next.
• Holder count growth — DexScreener shows holder count over time. Real momentum has new holders steadily; pumps have a one-time spike.

Step 6: Sentiment check

Open Twitter/X and search the contract address. You'll see:

• People talking about it (sign of organic interest)
• Or people calling it a scam (early warning)
• Or nobody (trending tokens have at least some chatter)

Also check the project's own Twitter — if they have fewer than 100 followers and no engagement on tweets, the "trending" status is bot-driven.

Open the official Telegram (linked from their Twitter, not from the token page). Look at:

• Member count vs message activity (fake groups have high member counts but zero recent messages)
• Pinned message — does it match the contract address you're verifying?
• Admin behavior — are they answering questions or just shilling?

A real example of why this matters: I got DM'd a token in early 2025 from someone insisting "the team is doxxed, LP is burned, it's all green." I ran the 6-step check above. Mint authority was active. Step 2 took 90 seconds and saved me from buying into a token where the deployer could mint unlimited new supply at any moment. The "doxxed team" claim was true; the on-chain reality was the opposite of safe. Always check the chain, not the chat.

What buyers actually check (the data)

How frequently does each verification check actually catch a bad token?

Mint authority active

38.0%%

% of failed launches with active mint

Top-1 wallet >30%

52.0%%

Sniper-bot capture pattern

Freeze authority active

24.0%%

Hidden honeypot vector

LP not burned/locked

67.0%%

Most common red flag

Twitter <24h old

58.0%%

No social presence

Token name impersonation

12.0%%

Less common but instant rug

Time to do all 6 checks

~3-5 min

Less time than the buy transaction

Red flags in failed launches

Avg 2.8

Most rugs flag multiple checks

Red flags in successful launches

Avg 0.3

Survivors typically pass all 6

False positive rate

~7%

Legit tokens that fail one check (usually freeze on stablecoins)

False negative rate

~4%

Rugs that pass all 6 checks

Most-checked field

Mint authority

Universal first check

Toggle: red flag severity by token type

Severity of each red flag, by token type (higher = more disqualifying)

MemecoinUtility tokenStablecoin

Active mint on EOA

100

Active mint on multisig

30

Freeze active (compliance)

30

LP not locked

60

No team docs

50

Red flags that immediately disqualify

If any of these are true, walk away:

• ❌ Authority status doesn't match what their Twitter claims
• ❌ Top non-LP wallet holds >25% of supply
• ❌ DexScreener shows the deployer wallet still holds LP, despite Twitter saying "LP burned"
• ❌ Project Twitter is under 30 days old AND has under 500 followers
• ❌ Multiple identical tokens on Solscan with names within 1-2 characters
• ❌ Contract was created less than 5 minutes before you saw it being shilled
• ❌ Telegram admin DMs you offering "early entry"
• ❌ The token claims to be "the official Solana foundation token" — it's not

What "verified" actually means on Solana

Unlike Ethereum, where contracts can be "verified" by publishing source code, SPL tokens don't have per-token source code to verify. They all use the same SPL Token Program. So "verified token" on Solana isn't a thing in the Etherscan sense.

What does exist:

• Jupiter strict list — a curated allowlist of tokens that pass quality and safety bars. Inclusion is a strong signal but not automatic; new tokens take days to weeks to be added.
• CoinGecko / CoinMarketCap listings — require manual review and a track record. Tokens listed here have been around for at least a few days and have traded volume.
• Exchange listings — major Solana DEXs (Raydium, Orca, Jupiter) auto-list any SPL token, but centralized exchanges like Binance and Coinbase have application processes that screen for the issues this guide covers.

A quick checklist you can copy-paste

□ Contract address from primary source (not a screenshot)
□ Mint authority = null
□ Freeze authority = null
□ Top non-LP wallet < 10% of supply
□ LP burned or locked (not held)
□ Token > 1 hour old with steady volume
□ Project Twitter > 30 days old, real engagement
□ Telegram active, pinned msg matches contract
□ No red flag from "instant disqualifiers"

Run through this in under 3 minutes. If anything looks off, skip and find a different play. The next memecoin opportunity is 10 minutes away on Solana — losing on a verified rug is the worst possible outcome.

Common questions

Are bonding-curve tokens on Pump.fun easier or harder to verify? Easier in some ways — Pump.fun automatically burns LP and you can see the bonding-curve mechanics on-chain. But harder because pre-graduation tokens don't show on DexScreener and impersonator coordination is rampant. See our is Pump.fun safe breakdown.

Can a verified token still rug? Yes — if authorities are revoked and LP is burned, the contract can't rug, but the price can still go to zero if the meme dies. Verification protects you from technical rugs, not from buying a bad meme.

Does Phantom wallet warn about scam tokens? Phantom shows a warning on tokens flagged by their security partner (Blowfish) — it's helpful but not exhaustive. Don't rely on the wallet warning alone.

How long does manual verification take? 3-5 minutes after you've done it a few times. Less than the time it takes to send the buy transaction.

Is there an automated tool for all 6 steps? RugCheck.xyz and similar tools automate parts of it (authority status, holder concentration). They're a good first pass but I'd still verify manually for any buy over a few SOL — automated tools can be tricked by clever launch patterns. If you're the builder rather than the buyer, run your own mint through the Solana token audit checker before you publicize it, so the authority and LP-burn fields read clean when buyers run this same check.

Quick facts (verifiable specifications)

Specification	Value	Source
Total verification time (practiced)	3–5 minutes	This article
Mint authority (memecoin)	Should be null	This article
Freeze authority (memecoin)	Should be null	This article
Top non-LP wallet threshold	< 10% (warning at 10–25%, hard skip at >25%)	This article
Solana incinerator address	1nc1nerator11111111111111111111111111111111	This article
Solana mint address format	32–44 characters, base58, case-sensitive	This article
BONK example mint	DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263	This article
USDC reference (freeze authority kept)	Solscan	This article
Verification explorer	Solscan	This article
LP status tracker	DexScreener	This article
Phantom security partner	Blowfish	This article
Automated rug-check tool	RugCheck.xyz	This article
Curated allowlist	Jupiter strict list	This article

Limitations of this guide (what it doesn't cover)

This guide focuses on pre-purchase verification for Solana memecoins. It does not cover:

• Smart-contract auditing of the SPL Token Program itself. All SPL tokens share the same on-chain program — per-token bytecode auditing isn't a thing on Solana. We explain why in the article.
• Token-2022 / Token Extensions verification. Tokens with transfer fees, hooks, or other extensions need additional checks beyond what this guide covers. See SPL Token vs Token-2022.
• Pump.fun pre-graduation tokens. Bonding-curve tokens behave differently — see Is Pump.fun safe?.
• Non-Solana chains. Verification on Ethereum, BSC, or Base uses Etherscan, BscScan, etc., with different signals (verified source code, owner functions). This guide is Solana-only.
• Off-chain due diligence on the team. Doxxing, KYC of founders, and corporate-structure analysis are outside scope.
• Securities-law analysis of whether a specific token is an investment contract. Jurisdiction-specific and not legal advice.

Sources & references

1. Why most Solana memecoins die in 24 hours — AlchemiiSource for red flag prevalence and survival statistics referenced in the data charts.
2. SPL Token Program — Solana LabsReference for verifying mint, freeze, and supply fields on any token.
3. Solscan token explorer — SolscanPrimary tool for checking authority status, supply, decimals, and holder distribution.
4. Birdeye Solana — BirdeyeAlternative explorer with strong holder distribution analytics.
5. DexScreener Solana — DexScreenerVerify LP burn status, see token age, chart context, volume patterns.
6. GeckoTerminal Solana — GeckoTerminalCross-DEX pool data — confirm liquidity isn't fake or single-DEX.
7. Jupiter strict list — Jupiter / GitHubStrict-list inclusion is independent verification.
8. Phantom wallet token security — PhantomPhantom warnings on unverified or suspicious tokens via Blowfish.
9. Blowfish (Chainalysis) — BlowfishWallet security partner that flags known scam patterns.
10. Solana incinerator address — SolscanVerify LP burn by confirming the LP token went to this address.
11. Bitquery Solana DEX data — BitqueryProgrammatic access to all the data underlying these checks.
12. What is mint authority on Solana — AlchemiiConceptual companion — what mint authority is and why active mint = red flag.
13. What is freeze authority — AlchemiiWhy active freeze authority is a honeypot vector.
14. How to burn LP tokens on Solana — AlchemiiWhat you're checking for in step 4 — verifying LP was actually sent to incinerator.
15. Is Pump.fun safe — AlchemiiDifferent verification considerations apply for Pump.fun pre-graduation tokens.

FAQ

How do I verify a Solana token is safe before buying?

Check six on-chain signals on Solscan: (1) mint authority revoked (null), (2) freeze authority revoked (null), (3) LP burned (LP token sent to incinerator wallet), (4) holder distribution (top wallet holds <10% ideally), (5) contract age (older than launch day), and (6) liquidity at least 5 SOL or equivalent. All six visible on Solscan + DexScreener in under two minutes.

What does null mint authority mean on Solscan?

It means no one — including the original creator — can mint additional supply. Active mint authority is the most common rug-pull pattern (developer prints new supply, dumps on holders). Solscan displays the field directly from the mint account on-chain. Null is what you want to see for any memecoin you're considering buying.

How do I check if LP is burned for a Solana token?

Find the token's Raydium pool on DexScreener, click through to the LP mint address on Solscan, then check the Holders tab. If a wallet ending in '1nc1nerator11111…' or the Solana null address holds the LP tokens, LP is burned. Also check the LP mint's total supply — burned LP reduces it. Both proofs are public and permanent.

What holder distribution is suspicious on a Solana token?

Single wallet holding more than 10% is a yellow flag; more than 30% is a major red flag. Look for unusual concentration patterns: 5-10 wallets each holding similar large amounts (likely sybil sock-puppets), or a single 'team' wallet with 20%+. Genuine memecoins typically show power-law distribution with the largest non-LP holder under 5%.

Are Solana token rug-check tools reliable?

Tools like RugCheck.xyz and DEX Screener's safety scores are useful starting points but not sufficient. They correctly catch obvious red flags (unrevoked authorities, single-wallet concentration) but miss subtler patterns like sniper-bot sybils or coordinated wash-trading. Always verify the underlying signals on Solscan yourself for any meaningful trade size.

---

Verified the token? Time to set up the buy. Back to learning about LP burns or our Solana memecoin launch checklist (for builders who want to launch a token that passes this verification). Want to launch your own meme coin that survives this checklist by default? Use our Solana meme coin creator — every authority is revoked at mint time and LP burn is one click.