Solana rug patterns

The chain is fast, and so is the exit

A Solana rug is the same economic event as a rug on any other chain: buyers are left with a token they cannot sell at the price they were shown. The mechanics that show up most often are local. The mint account has authorities. The metadata account can stay editable. The liquidity pool can be emptied by whoever provided it. None of those is a secret opcode. They are fields on accounts anyone can read, which is why a checker can talk about them, and why a field that is still set is a fact even when the website says 'renounced'.

This page describes what those fields mean and what our checker does with them. It does not explain how to create a mint, how to bundle a launch, or how to hide an authority. Phantom and Solflare are the wallets people use to sign these trades. A signature in either one is still a signature. The wallet profile is not a guarantee that the mint is honest.

Mint authority

The mint authority is the key allowed to create more of the token. If it is still set, supply is not fixed. New units can be minted into a pool, or into a wallet that then sells into the pool you just bought. The price falls because the pool is suddenly full of a token that did not exist at the time of your swap. Revoking the mint authority sets that field to none. After that, more units cannot be created by that authority. 'Renounced' in a marketing caption is not the same sentence as 'the mint authority account is none'. Read the account.

On this checker, an active mint authority is a warning, from GoPlus when it reports the mint as mintable and from RugCheck when the mint authority field is set. A warning feeds the band. One warning is Medium if nothing critical is also present. It is not, by itself, the Critical line. That is deliberate. Some legitimate tokens keep a mint authority for a while. The warning is the reason to read further, not a claim that every mint authority is a theft in progress.

Freeze authority

The freeze authority can freeze a token account so the tokens in it do not move. A buyer can purchase a token and then find that their own account will not transfer it. The swap that was supposed to sell fails, or never gets built, because the account is frozen. That is a different trick from an empty pool. The pool can still have liquidity. Your wallet is the part that cannot leave.

GoPlus and RugCheck both surface a set freeze authority, and this checker treats that flag as critical. Critical is the band that says do not buy until you can explain the flag. The explanation that counts for a random meme mint is short: there is no ordinary reason for a stranger to keep the power to freeze your account. The explanation that counts for a centrally issued stablecoin is different, and it is handled below rather than by pretending the field is unset.

Metadata, names, and a ticker you already trust

A Solana token's name and logo live in metadata, often under Metaplex. If the update authority is still set, the name, the symbol, and the image can be changed later. A mint that was launched as something obscure can be rewritten to resemble a better-known ticker after wallets have already added it. The mint address does not change when the label does. The address is the identity. The label is a caption.

People also create a new mint that copies a name from the first minute. Nothing on the mint account promises that the first search result is the project you read about. Phantom and Solflare will show whatever metadata the mint presents. Compare the mint address to the address published by the project on a host you checked, not to the ticker in a trending list. Our checker prints the name a source returned. That name is a label from the metadata, not a verification that the project is who it says.

Liquidity leaves the pool

If the person who created the pool still controls the liquidity position, they can remove those tokens. The price you saw was a function of what was in the pool. When one side is pulled, the remaining side does not buy you an exit at that price. A lock, if one exists, is a program holding the position until a time. A lock expires. A burned position is a stronger statement, and only if you are looking at the position that actually contains the liquidity, not at a different account someone labelled 'burn'.

DexScreener is where this checker reads indexed pools, on Solana as on the other chains. Liquidity under $1,000 is critical. Liquidity under $10,000 is a warning. A pool younger than two days is a warning. No indexed pool means the liquidity row is not checked, not that the market is fine. Those thresholds are ours, and they are blunt. A pool can be large at the moment of the query and gone in the next slot. A large pool is not honesty. Age alone is not a scam. New pools are simply where rushed exits are common.

What the first moments look like from the outside

On a fast chain, the pool can be created and a stack of buys can land in the same breath, before a person watching a website can click. From the outside this looks like a chart that opened already tall, then sold off into later buyers. You do not need the internals of how those transactions were ordered to use the observation. A chart that went vertical before there was time to read the mint is a chart where someone else arrived with a plan. Walking away is allowed.

Social posts will tell you the opposite, with a countdown and a sense that the slot is a door closing. The slot is not a door you owe anything to. Paste the mint into the checker. If the sources have not seen it yet, the report should say not checked or not enough data. Silence is not a Low score. If you buy during the silence, you are trading without the rows this site knows how to fill.

Extensions that change the transfer itself

Token-2022 mints can carry extra behaviour on the transfer. A transfer fee takes a cut when the token moves. A permanent delegate is an authority that can move tokens out of accounts. A non-transferable flag means wallets cannot transfer the mint. A transfer hook calls out to other code when you move the token. Each of these can be a legitimate product choice. Each of them is also a way for a sell to cost more than the screen suggested, or to fail, or to be someone else's transfer.

This checker does not claim to decode every extension by name. It does mark a non-transferable mint as critical, from the GoPlus field for that flag. It marks a balance authority, an authority that can change balances, as critical. It marks a close authority as a warning. RugCheck's own risk list is copied through as well: their danger level becomes critical here, their warning level becomes a warning, and their normalised score above 40 is a critical band on their scale, not on ours as a probability. A score they did not return is not checked. honeypot.is is not asked on Solana. The report says that source is unused, rather than inventing a sell simulation.

Stablecoins are the exception you should not generalise

Circle's USDC and Tether's USDT on Solana are issued tokens. Freeze and mint exist because the issuer operates the product. This checker allowlists those mints by address, not by ticker. The USDC mint it treats as canonical is EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v. The USDT mint is Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB. Wrapped SOL is So11111111111111111111111111111111111111112. On a matched stablecoin, freeze, mint, and the RugCheck band those authorities produce are rewritten as context. Context is not a do-not-buy line. It is a note that the issuer can freeze, which is how those products work.

A different address with the same letters in the name is not on that list. It is scored like any other mint. A freeze on that copy is critical. Context also does not pardon a report that the mint has already rugged, or a function that rewrites balances. If those appear on a known address, the band can still be Critical, and that would be unusual enough to read twice, including the chance a source glitched. Use the report-a-wrong-score mail on the report rather than arguing with the ticker.

Before you swap

Copy the mint from a host you verified, not from a direct message and not from the name in a trending table. Open the checker, choose Solana, and paste the mint. Read mint authority, freeze, and whether RugCheck returned a record or an empty result. Read the liquidity row and the age row separately. An empty age row means no pool timestamp, not a mature token. Read any non-transferable or balance-authority line as a reason to stop.

If you still swap, do it from Phantom or Solflare installed from the vendor, for an amount you can lose, and read the wallet's preview of the mint address before you approve. A hardware device, if you use one, shows the transaction it was given. It does not know the mint's freeze authority. After the swap, an unexpected second token in the wallet is not a prize. The fake-airdrop page is that refusal. Do not sign a 'claim' to make a balance appear that a real transfer would already have shown.

Questions

Does a revoked mint authority mean the token is safe? It means more units cannot be minted by that authority. Freeze can still be set. Metadata can still be editable. The pool can still be pulled. Liquidity can still have been borrowed for the hour you looked. One cleared field is one cleared field.

Why is mint a warning and freeze critical? Creating more supply can dilute you. Freezing your account can stop you from leaving at all. The band rules follow that difference. Three warnings without a critical flag still reach High. A single freeze reaches Critical on its own.

RugCheck shows a high score on USDC. Is the checker broken? On the canonical mint, flags that are normal for that issuer are context, and a RugCheck band driven by those flags is part of that context. On any other mint, RugCheck's danger band is critical. Compare the address before you decide the score is a bug.

Will the checker see a rug that has not been written down yet? No. It sees authorities, a RugCheck record, and indexed liquidity at query time. It does not see a plan, a Telegram, or a pool that will be removed after you buy. Not enough data means the sources were silent. It does not mean the mint is clean.

Is a Solana rug different from the Ethereum page on rug pulls? The economic result is the same. The fields you read are the mint account and the pool, not an EVM owner slot or a honeypot simulation. honeypot.is is not used here. Use both pages if you move between chains, and do not carry an 'all clear' from one chain's report onto the other chain's address.