RugCheck is one of the most widely used automated security analysis tools on Solana. Whenever a new token is created or traded, buyers, automated trading bots, and DEX aggregators (like DexScreener, Photon, and Birdeye) query RugCheck to analyze the token’s smart contract state and assign a risk rating ranging from “Good” to “Dangerous.”
If your token receives a high risk score or warning flags, DEX listings will display warning icons next to your token, causing potential buyers to avoid your project.
Passing RugCheck is not about tricking an algorithm. It requires configuring your SPL token and liquidity pool according to industry-standard security practices.
How RugCheck Evaluates Solana Token Risk
RugCheck inspects five main security dimensions on the Solana blockchain:
- Mint Authority Status: Checks whether the creator can mint additional supply, which could crash token price through supply inflation.
- Freeze Authority Status: Checks whether individual holder wallets can be frozen from transferring or selling their tokens.
- Update Authority Status: Checks whether token metadata (name, logo, symbol) can be modified post-launch.
- Liquidity Pool Security: Checks whether LP tokens are locked in a vault or burned to a null address.
- Holder Concentration: Analyzes top wallet distribution to ensure a single address does not hold a controlling supply percentage.
For technical details on how Solana SPL token authorities operate, consult the Solana SPL Token Program Docs.
Requirement 1: Revoke Mint Authority
Retaining mint authority is the single largest penalty on RugCheck. If the mint authority key remains active:
- RugCheck assigns an immediate “High Risk” warning tag.
- Automated trading bots block buy orders for the pair.
Action Required: Revoke mint authority immediately after token minting. You can execute this in one click using PumpBolt Security Hub.
Requirement 2: Revoke Freeze Authority
Freeze authority allows the creator address to block specific token accounts from transferring funds. On decentralized exchanges, retaining freeze authority is viewed as a red flag for honeypot scams.
Action Required: Revoke freeze authority before creating your public liquidity pool. Use PumpBolt Revoke Freeze Authority to permanently clear this right.
Requirement 3: Revoke Update Authority (Make Token Immutable)
If your Metaplex metadata remains mutable (isMutable: true), RugCheck flags the token with a warning because a creator could theoretically change the project logo or name to mimic a different asset.
Action Required: Verify all token metadata details, then revoke update authority using PumpBolt Make Immutable.
Requirement 4: Lock or Burn Your Liquidity Pool Tokens
Creating a liquidity pool generates LP tokens that represent ownership of the pool’s SOL and token assets. If the creator holds these LP tokens in a personal wallet, they can remove the liquidity at any time, executing a classic rug pull.
- Burning LP Tokens: Permanently transfers LP tokens to the
11111111111111111111111111111111 null address.
- Locking LP Tokens: Deposits LP tokens into a verifiable time-locked vault for a fixed period (such as 6 or 12 months).
Action Required: Lock or burn your LP tokens immediately after pool creation using PumpBolt Lock Liquidity. RugCheck will detect the vault address and grant a green liquidity security verification badge.
Requirement 5: Maintain Balanced Token Distribution
RugCheck flags tokens where the top 10 wallets (excluding the liquidity pool and burn addresses) hold more than 20% to 30% of the total circulating supply.
Action Required: Avoid holding large supply chunks in a single creator wallet. Use PumpBolt Multisender to distribute presale, team, or community allocations across separate addresses before pool initialization.
RugCheck Verification Scorecard
| Security Criteria |
Required On-Chain State |
Recommended PumpBolt Tool |
Score Impact |
| Mint Authority |
Disabled (null) |
Revoke Mint Tool |
Critical Pass |
| Freeze Authority |
Disabled (null) |
Revoke Freeze Tool |
Critical Pass |
| Update Authority |
Disabled (isMutable: false) |
Make Immutable Tool |
High Pass |
| LP Tokens |
Locked or Burned |
Lock Liquidity Tool |
Critical Pass |
| Top 10 Wallets |
Distributed (<20% pool) |
Airdrop Multisender |
High Pass |
Fulfilling all five security requirements guarantees a “Good” rating on RugCheck, giving buyers and DEX platforms total confidence in your Solana project.