RugCheck

What RugCheck Is and the Problem It Solves

Solana's speed and low transaction costs make it a natural home for token launches, but that same frictionlessness draws bad actors. Rug pulls — where creators abandon a token after draining liquidity — and scam contracts with hidden mint authority, freeze controls, or excessive transfer taxes are endemic to high-velocity meme coin markets. Before RugCheck, retail traders had no fast, standardized way to surface on-chain red flags before buying a newly launched token.

RugCheck, available at rugcheck.xyz, is a free web-based token risk scanner that analyzes Solana and Fogo tokens against more than 20 on-chain security signals and returns a structured risk report in seconds. Users paste a token contract address and immediately see whether the creator retains dangerous controls, how concentrated supply is, whether liquidity is locked, and whether the project's metadata can be quietly swapped out after launch. It has become the most widely used rug pull detection tool in the Solana community, influencing token-buying decisions for more than 200,000 users and embedded into dozens of dApps and automated trading bots across the ecosystem.

Team and Background

RugCheck was built by the FluxBeam team, whose history on Solana dates to August 2021. The team's original focus was metaverse infrastructure before they pivoted through a decentralized content delivery project (BlokHost, backed by Filecoin) and ultimately into DeFi tooling. Watching Solana's meme coin wave expose newer traders to repeated rug pulls, the team built RugCheck as a protective layer for users who lacked the on-chain analysis skills to assess contract risk manually.

The Solana Foundation recognized FluxBeam's ecosystem contributions with a grant in the fall of 2023. The team presented at Solana Breakpoint 2023, where they highlighted Token Extensions (Token-2022) and its implications for advanced token programmability. By Solana Breakpoint 2025, RugCheck had become central enough to the ecosystem that FluxRPC — the team's dedicated RPC infrastructure product — was co-presented alongside RugCheck as a flagship latency-sensitive application that depends on millisecond-fast slot data.

RugCheck is part of a suite of products built by the FluxBeam team: FluxBeam DEX (a spot exchange), FluxBot (a Telegram trading bot), FluxPad (a token launchpad), and FluxRPC (dedicated Solana and Fogo RPC infrastructure). RugCheck functions as the security layer threading through all of these.

How It Works

When a user submits a token's mint address, RugCheck queries the Solana blockchain directly via FluxRPC infrastructure to retrieve the token's program configuration, metadata, holder distribution, liquidity pool state, and associated account activity. This on-chain data is then evaluated against a structured set of risk checks, each carrying a weighted score that contributes to an overall risk rating.

The risk output includes a raw score and a normalized score on a 0-100 scale, with letter-grade trust tiers. Scores above 80 generally indicate lower structural risk; scores below 30 signal elevated danger. Risk findings are returned as a typed array — each entry carries a name, description, numeric score contribution, and severity level (warn, danger, or critical).

The API response structure exposes the full analysis: mint authority status, freeze authority status, metadata mutability (updateAuthority and mutable flag), top holder distribution, LP locker programs and their USD-denominated lock values and unlock timestamps, transfer fee configurations, known accounts, launchpad of origin (e.g. pump.fun), Jupiter verification status, and detected threat categories such as HONEYPOT, FAKE_TOKEN, RUG_PULL, PROXY_CONTRACT, HIGH_TAXES, and OWNERSHIP_NOT_RENOUNCED.

Key Features

Comprehensive on-chain risk checks. The scanner surfaces the specific flags that most commonly precede rug events: an active mint authority (creator can print unlimited tokens), an active freeze authority (creator can freeze any holder's wallet), mutable metadata (name, symbol, and image can be changed after launch), and illiquid or unlocked liquidity pools that leave the door open for the creator to drain trading depth instantly.

Holder concentration analysis. RugCheck examines the distribution of supply across top wallets and flags tokens where a small number of addresses hold a disproportionate share. Tokens with high supply concentration in a few wallets — particularly the creator wallet or wallets that appear to be coordinated — receive elevated risk scores.

Insider Networks (beta). A distinctive capability not common in competing scanners, the Insider Networks feature identifies suspicious connections between a token's top holders. By mapping wallet-level relationships, RugCheck can detect coordinated insider rings that control a token's supply without that control being obvious from a simple top-holders list.

Liquidity lock tracking. RugCheck reads on-chain locker contracts — including Raydium locker pools — and displays the amount of liquidity locked in USD, the unlock timestamp, and the locker program involved. Tokens with no liquidity locked, or with locks set to expire shortly, receive corresponding risk weight.

Token verification status. The platform surfaces whether a token holds Jupiter Verified or Jupiter Strict status, signaling credibility from a recognized ecosystem aggregator.

Project verification and anti-impersonation. Legitimate projects can apply for a RugCheck verified badge, which signals to traders they have found the canonical token rather than a copycat. Verified projects rank higher in RugCheck's search results while impersonators are flagged and ranked lower. As of September 2026, RugCheck also offers a manual verification pathway for creators whose setups are not fully captured by automated checks — for example, projects using liquidity infrastructure or token configurations the automated system has not yet integrated. A human reviewer assesses the context and applies the same verification standards, providing a route for legitimate novel approaches that automated checks might miscategorize.

Token search API. Builders can embed RugCheck's token search directly into wallets, DEXes, or dashboards using the developer API. Searches by name, symbol, or mint address include impersonation-aware ranking, so downstream products surface the correct canonical token without having to manage their own copycat detection.

Manifest Trade support. As of September 2026, RugCheck recognises Manifest order-book liquidity and includes it in token reports alongside AMM pool data, giving traders a combined view of all liquidity sources in a single report.

Developer API. RugCheck exposes a RESTful API under api.rugcheck.xyz, documented via Swagger. The free tier supports standard request rates; higher-throughput paid tiers serve bots and protocols running automated safety checks at scale. API keys are generated via the dashboard at rugcheck.xyz after email registration. Authentication uses a Bearer token passed in the X-API-KEY HTTP header. The JSON response schema covers all of the same fields displayed in the web interface, making it straightforward to pipe RugCheck results into trading bots, aggregators, and alert systems.

Supported Networks

RugCheck primarily covers Solana's SPL and Token-2022 token standards. In 2025, RugCheck extended its scanning to Fogo tokens — an SVM-compatible Layer 1 chain delivering high-throughput block times — reflecting the FluxBeam team's early positioning in the Fogo ecosystem, where FluxBeam DEX also operates as a native spot exchange. Both Solana and Fogo are accessible through the same interface at rugcheck.xyz.

Ecosystem Position and Limitations

RugCheck's tight integration across the Solana tooling landscape sets it apart from point-solution scanners. Its analysis powers automated pre-trade checks in multiple Telegram bots, is referenced in DEX interfaces, and serves as a standard safety checkpoint for token discovery workflows. At Breakpoint 2025, FluxRPC positioned RugCheck explicitly as a latency-sensitive application that requires fresh, millisecond-accurate slot data — illustrating how deeply the tool's accuracy depends on reliable RPC infrastructure.

Users and independent reviewers note two important limitations. First, RugCheck evaluates on-chain structure only: it cannot assess team credibility, audit history, documentation quality, or off-chain promises. A token can pass every RugCheck flag and still fail due to poor execution or deliberate deception through non-contract mechanisms. Second, legitimate early-stage tokens with small holder bases or thin liquidity may register elevated risk scores that do not reflect actual malicious intent. RugCheck itself states clearly that a clean report is not a guarantee of safety. The tool is best understood as a necessary first filter — a way to eliminate the most obvious structural red flags before deeper diligence — rather than a comprehensive safety certificate.