Rug Pull Checker

Free on-chain audit for any crypto token across 9 chains. Paste a contract address or search by name. The scanner returns a 0–100 risk score, a 10-point red-flag checklist, and a written verdict from CleaRank Financial AI in under 30 seconds. Built on direct chain RPC plus GoPlus Security, Etherscan V2, DexScreener and Blockscout. No competitor middleman, no signup, no email.

The five risk factors: contract, ownership, holders, liquidity, market activity

Pick the chain, paste the contract address (or search by token name), then click Scan. The scanner queries six independent data sources in parallel, computes a 0–100 risk score, runs ten binary safety checks, and writes a plain-English verdict. The six panels below explain exactly what the scanner returns and which signals matter most for spotting a rug before you put money in.

1. Risk score 0–100 with five-factor breakdown

The big number at the top of every report. 0–24 Likely Safe, 25–49 Exercise Caution, 50–74 High Risk, 75–100 Avoid. The score is a weighted sum of five independent factor bars: Contract Risk (verification, proxy, hidden owner, taxes), Ownership Risk (renounced vs. owner-controlled, mint authority, freeze authority), Holder Concentration (top-10 wallet share, whale count), Liquidity Risk (locked vs. unlocked LP, total pool size), and Market Inactivity (24-hour volume, trades-per-hour, pair count). A blue-chip custodial token (WBTC, USDC) lands at zero. A confirmed scam clears 90 with red bars in every category.

8
/ 100
Likely Safe
PEPE · Ethereum
5 of 5 sources verified

Contract Risk12
Ownership Risk5
Holder Concentration22
Liquidity Risk3
Market Inactivity0
🛡 Red Flag Checklist 9 / 10
binary checks
Liquidity Locked
Contract Verified
Ownership Renounced
! Low Holder Concentration
Not a Honeypot
No Unlimited Minting
Reasonable Taxes
No Hidden Proxy
Low Whale Presence
No Blacklist Function

Each row maps to a specific on-chain or contract-bytecode signal. Hover any check in the live scanner to see exactly which data source produced the result.

2. Ten-point red-flag checklist

Below the score is a binary checklist. Each item is a single, specific rug-pull failure mode and the answer is either pass or fail. Liquidity Locked (is the LP token timelocked or burned?), Contract Verified (Etherscan source match?), Ownership Renounced (owner set to the burn address?), Low Holder Concentration (top-10 wallets hold under 40% of supply?), Not a Honeypot (GoPlus honeypot simulation passes?), No Unlimited Minting, Reasonable Taxes (buy + sell tax under 10%?), No Hidden Proxy, Low Whale Presence (five or fewer wallets above 5%?), and No Blacklist Function. Ten clean checks is the strongest signal you can get. One or two fails on a new token is normal. Four or more fails is a near-certain rug.

3. CleaRank Financial AI written verdict

The score and the checklist tell you the what. CleaRank Financial AI tells you the so what. A four-section narrative explains the verdict in plain English: Verdict (one-sentence call), What the Data Shows (the three signals driving the score), Risk Vectors (the specific scenarios that would cause this token to rug), and a Verification Checklist (what to confirm yourself before sizing in). The same four-section format every time, so you can compare two scans side by side. The AI never sees the contract address as a string of hex, only the structured audit results from GoPlus, Etherscan, DexScreener and direct chain RPC.

CleaRank AI · PEPE
Verdict

Likely Safe. Renounced ownership, verified contract, deep multi-DEX liquidity, no mint or blacklist function. The remaining risk sits in holder concentration, not contract design.

What the data shows

Owner renounced to 0x000…dead. Source code verified on Etherscan. $90M+ liquidity across 200+ pairs. Top 10 wallets hold 22%, with two CEX cold wallets in that count.

Risk vectors

Concentrated whale selling could drain the liquidity tail. No protocol-level emergency pause to backstop a coordinated dump.

🐳 Top-10 Holders PEPE
22.4% concentration
#
Wallet
Share
Tag

1
Binance 7 hot
4.81%
CEX HOT

2
0x1d1f…90eb
3.20%
RETAIL

3
Bitvavo cold
2.90%
CEX COLD

4
0xa9d2…e44b
2.15%
CLUSTER A

5
0x88f1…0023
2.02%
CLUSTER A

+45 more
Top-50 view in Pro
7.32%

Insider cluster detected: wallets #4 and #5 were both funded from the same source within 3 minutes of each other. That is the classic precursor pattern to a coordinated dump.

Pro feature

4. Holder concentration with whale identification

The free scanner gives you a single concentration number (top-10 percentage). Pro opens the full Holders tab. You see the top-50 wallets ranked by share, every wallet annotated with its on-chain tag (CEX hot wallet, CEX cold wallet, market maker, dev wallet, contract), and an insider-cluster detector that flags wallets funded from the same source within minutes of each other. The same toolset desk analysts use to figure out whether one whale controls three of the top-five rows, which is the classic precursor to a coordinated dump. CleaRank Pro unlocks the full table.

Pro feature

5. Liquidity drilldown with LP-lock verification

Liquidity is where most rugs actually happen. The free scanner tells you total liquidity and whether the LP token is locked at the aggregate level. Pro opens the full Liquidity tab: every pool the token trades in (Uniswap V2, V3, PancakeSwap, SushiSwap, Curve, plus DEX aggregator pools), the size of each pool in USD, the percentage of supply paired against ETH or USDC vs. paired against another junk token, and an LP-lock verification for each pool individually with the time-to-unlock countdown. The single scariest pattern in DeFi is a token with one large pool that unlocks in 14 days. Pro shows you that countdown the moment it appears.

💧 Liquidity Pools PEPE
$94.2M total
Pool
Size (USD)
LP Lock

Uniswap V3 / WETH
$48.1M
✓ LOCKED

Uniswap V2 / WETH
$31.4M
✓ LOCKED

SushiSwap / USDC
$8.6M
⏱ 14D LEFT

PancakeSwap / USDT
$4.2M
🔥 BURNED

Curve / 3pool
$1.9M
✓ LOCKED

Watch this pool: SushiSwap LP unlocks in 14 days. That is 9% of total liquidity controlled by an addressable wallet on a known unlock date. Set an alert in Pro and you get notified the moment the unlock executes.

📁 Scan history · risk trend
PEPE · 14 scans

First scan
38
Latest
8
Trend
↓ 30 pts

Every scan saves locally. Compare two scans of the same token to see whether the risk picture improved or deteriorated.

6. Scan history with risk trend and PDF report

Every scan you run saves to local storage on your device. Pull up the history at any time to see how a token’s risk score changed over time as new holders piled in, liquidity unlocked, or ownership got renounced. The risk-trend chart plots score on the Y-axis and scan date on the X-axis. When you spot a token that started at 50 and dropped to 10, that is a real improvement, not a feeling. Every scan also exports as a signed PDF you can attach to a partner pitch or save to your due-diligence folder. All free, no signup, no email.

Ten on-chain red flags: what each one tells you about the team behind the token

Memecoin hunters, multi-chain DeFi traders, Solana SPL traders, due-diligence researchers. The on-chain math is the same idea but the failure modes differ by chain. Pick the workflow that matches yours.

Memecoin and launch hunters

New token, 4-hour-old contract, anonymous dev. The scanner audits ownership, mint, taxes and LP lock before you commit the first cent. A 10-flag green pass beats a Telegram shill any day.

Multi-chain DeFi traders

Same scanner across Ethereum, BNB, Arbitrum, Base, Polygon, Avalanche, Fantom, Optimism and Solana. One workflow, nine chains. Catch the chain-specific honeypot tricks (Solana freeze authority, Token-2022 transfer hooks) you would miss on Etherscan alone.

Solana SPL traders

Direct Solana mainnet RPC checks mint authority, freeze authority and Token-2022 extensions (transfer hooks, permanent delegate, default-frozen accounts). These flags do not show up on EVM-only scanners. Catch them before the dev runs the freeze.

Due-diligence researchers

VCs, funds, journalists, prop-firm risk teams. Run a scan, save the signed PDF as the official record. Six independent data sources, written verdict, every signal traceable to its source.

Why we read the chain directly: GoPlus, Etherscan, DexScreener and a Solana RPC

Most “rug pull scanners” online are thin wrappers around one paid API. They take your token, forward the request, and pass the response back. When the paid API misses a signal, the scanner misses it too. CleaRank queries six independent sources in parallel on every scan: GoPlus Security (contract security flags, honeypot simulation, taxes, holder list), Etherscan V2 multichain (source verification, contract name, creator), DexScreener (price, market cap, FDV, liquidity USD, 24h volume, every trading pair), Blockscout (richer top-50 holder list when GoPlus only returns 10), CoinGecko (token search and listing data), and direct Solana mainnet RPC (mint authority, freeze authority, Token-2022 extensions). When sources disagree the scanner shows you the conflict. When sources agree the verdict is grounded in five-of-five independent confirmations. No competitor middleman, no Rugcheck.xyz wrapper, no on-chain data laundered through someone else’s API.

It’s the same scan engine that runs inside the CleaRank trading workbench used by paying customers, exposed here for free, no signup. CleaRank Pro adds the full Holders tab (top-50 distribution, whale identification, insider-cluster detection), the full Liquidity tab (per-pool LP-lock verification with time-to-unlock countdowns), and the rest of the 22-tool dashboard. Ultra adds the full multi-account simulator, Trade Journal, AI Trade Coach and Historical Replay.

Rug pull flavours: liquidity drain, mint inflation, honeypot, slow rug

A rug pull is the moment a token’s creators (or whales) drain the value out of a project, leaving everyone else holding worthless bags. There are four common patterns the scanner is designed to spot in advance.

  1. Liquidity drain. The dev removes the LP from Uniswap (or burns the LP token they secretly kept). Price collapses to zero in one block. Detected by: LP lock status, percentage of LP tokens held by the dev wallet, time-to-unlock countdown.
  2. Mint inflation. The contract has a mint function the dev never renounced. They quietly mint 100x the supply to their own wallet, dump it into the pool, and walk away with the liquidity. Detected by: ownership renounced flag, mint authority check, Solana mint authority for SPL tokens.
  3. Honeypot. The contract lets you buy but not sell. Sometimes hidden in proxy delegate calls, sometimes baked into a hidden tax of 99% on sell. Detected by: GoPlus honeypot simulation, buy/sell tax thresholds, hidden proxy flag.
  4. Slow rug. No instant collapse. Just gradual dev wallet selling over weeks, draining the pool by attrition. Detected by: holder concentration changes between scans, whale wallet activity (Pro Holders tab), the risk trend chart in scan history.

“Rug pulls are the spread you cannot see. They live in code most retail traders never read. The scanner takes 20 seconds. The conviction it builds, or destroys, is worth a year of “I should have checked.””

The scoring formula, with a legitimacy buffer for blue chips

The headline risk score is a weighted sum of the five factor bars (Contract, Ownership, Holder Concentration, Liquidity, Market Inactivity). Every red-flag failure contributes a penalty proportional to how dangerous that flag actually is in practice. A failed honeypot check is heavier than a high holder concentration, because a honeypot is fatal and concentration is a pressure signal.

The crucial second ingredient is the legitimacy buffer. Custodial wrapped tokens (WBTC, USDC, USDT, WETH) have huge holder concentration because most of the supply lives in custody contracts. A naive scanner flags them red. CleaRank multiplies the soft penalties by (1 − legitimacy × 1.05), where legitimacy is computed from market cap, contract age, total liquidity, 24h volume and holder count. Blue-chip wrapped tokens end up at zero. Brand-new memecoins keep the full penalty stack. The scoring matches what a human analyst would conclude after twenty minutes of digging.

Risk score formula
Risk
0 to 100

=
Sum of 5 factors
contract + ownership + holders + liquidity + activity

×
Legitimacy buffer
(1 − legitimacy × 1.05)

Legitimacy inputs: market cap, contract age, total liquidity, 24h volume, holder count. Blue-chip tokens approach legitimacy = 1, which collapses soft penalties to near zero.

Worked example: four token archetypes, four verdicts

Same scanner, four tokens at different points on the risk spectrum. The verdict is determined by the score band; the reason behind it is the factor mix.

WBTC
Blue chip wrapped
Verified, renounced, $1.5B+ liquidity, 10/10 flags pass
Legitimacy buffer applied
Score 0
Verdict: Likely Safe
PEPE
Locked memecoin
Verified, renounced, LP locked, 9/10 flags pass
Holder concentration 22%
Score 8
Verdict: Likely Safe
NEW
3-hour launch
Verified, NOT renounced, LP unlocked, 7/10 flags
No legitimacy buffer (yet)
Score 38
Verdict: Exercise Caution
SCAM
Honeypot
99% sell tax, mint enabled, unlocked LP, 3/10 flags
No legitimacy buffer
Score 92
Verdict: Avoid

The same scanner produces a 0 for WBTC and a 92 for a honeypot. That spread is the whole point. The legitimacy buffer keeps blue chips honest, the unbuffered factor stack keeps the scammers red. There’s no middle ground: a 38 means do your own research, a 92 means walk.

Verdict thresholds and what to do at each band

The four verdict bands map directly to the action a sensible trader takes. Likely Safe is a green light, but not a recommendation to buy. Exercise Caution means do your own research before sizing. High Risk means do not enter unless you have a specific edge that explains the failures. Avoid is shorthand for “this is almost certainly a honeypot or pre-rug.”

Score band · verdict · action
Score
Verdict
Action
0–24
Likely Safe
Green light. Size per your normal risk rules.
25–49
Exercise Caution
DYOR. Read the failing red flags before any size.
50–74
High Risk
Skip unless you have a specific edge.
75–100
Avoid
Walk. Likely honeypot or imminent rug.

Thresholds are calibrated against historical post-mortem data on confirmed rug-pulled tokens. Blue-chip tokens land at 0; confirmed honeypots cluster at 85+.

Five mistakes that get traders rugged anyway

The scanner catches almost every textbook rug. These five mistakes are the ones that let a token slip through the human reviewing it.

01

Trusting the ticker, not the contract

“PEPE” is a token name. There are at least 50 contracts pretending to be PEPE on Ethereum alone. Always paste the contract address from a source you trust (the official Twitter, the chain explorer’s “verified contract” link), never just type the ticker into a DEX.

02

Picking the wrong chain

An EVM scanner on a Solana token returns thin data, then the user assumes “thin data = safe.” Pick the right chain in the dropdown. Solana has its own freeze-authority and Token-2022 checks that EVM-only scanners cannot see.

03

Stopping at the score

A 22 is “Exercise Caution,” but two of those points might be a 22-hour-old contract with a clean dev wallet. A 22 with a 6-month track record and concentrated insider wallets is a different animal. Read the factor breakdown before sizing.

04

Skipping the second scan

A token can pass at launch and fail a week later as the dev’s wallet activity changes. Re-scan before exiting any position, and use the risk-trend chart to see whether the picture has improved or quietly deteriorated.

05

Ignoring LP-lock countdowns

“Liquidity locked” is the most important green flag and the most lied-about. Look at the unlock date. Locked for 14 more days on a token with 80% of its volume in one pool is a different signal than locked for 3 more years.

Continue the workflow with these calculators

Frequently asked questions

Paste the token’s contract address into the rug pull checker above and pick the chain. The scanner queries GoPlus Security, Etherscan V2, DexScreener, Blockscout and (for Solana) the mainnet RPC directly. You get a 0–100 risk score, a 10-point red-flag checklist, and a written verdict in under 30 seconds. The fastest sanity check before sending money anywhere is to run a scan, read the failing checks, and only proceed if every red flag passes or you have a specific reason each failure is acceptable.

A rug pull is when a token’s creators or large holders intentionally drain the value out of the project, leaving everyone else holding worthless bags. Common patterns: liquidity drain (dev removes or burns LP tokens, price goes to zero), mint inflation (dev mints 100x the supply and dumps it), honeypot (contract lets you buy but not sell), and slow rug (gradual insider selling over weeks). The on-chain signals for all four are visible in advance if you know where to look. That is what the scanner above checks.

The risk score is a weighted sum of five factor bars (Contract Risk, Ownership Risk, Holder Concentration, Liquidity Risk, Market Inactivity), then multiplied by a legitimacy buffer. 0–24 Likely Safe: blue-chip or strong audit (WBTC lands here at 0). 25–49 Exercise Caution: do your own research before sizing. 50–74 High Risk: skip unless you have a specific edge. 75–100 Avoid: almost certainly a honeypot or pre-rug. The score is calibrated against historical post-mortems of confirmed rug-pulled tokens.

Yes. The scanner queries Solana mainnet RPC directly to read the mint account. That gives you authoritative answers on mint authority (can the dev print more supply?), freeze authority (can the dev freeze your wallet?), and Token-2022 extensions: transferHook (custom logic on every transfer), transferFeeConfig (variable tax), permanentDelegate (the dev can move tokens out of any wallet), and defaultAccountState (new accounts ship frozen). These are Solana-specific failure modes that EVM-only scanners cannot see. Pick “Solana” in the chain dropdown and paste the SPL mint address.

Nine chains in the dropdown: Ethereum, BNB Chain, Arbitrum, Base, Polygon, Avalanche, Fantom, Optimism, Solana. The backend infrastructure actually covers 60+ chains via DexScreener and 30+ EVM chains via Etherscan V2, plus Tron and Sui via GoPlus. If you need to scan a token on Linea, Scroll, Mantle or any other chain not in the dropdown, you can still get market and liquidity data through the API directly. The on-screen dropdown is curated to the nine where you actually find live meme + DeFi launches today.

Fatal red flags (any one of these = walk): honeypot detected (you cannot sell), unverified contract (source code not on Etherscan), mint authority not renounced (dev can print more supply), hidden proxy (the contract you read is not the code that actually runs). Serious flags (need a compensating explanation): buy or sell tax above 10%, LP unlocked with under 90 days remaining, top-10 holders own over 50% of supply, blacklist function in the code. Soft flags (worth noting but not fatal): age under 24 hours, holder count below 200, fewer than two trading pairs.

WBTC, USDC, USDT and similar custodial tokens have extreme holder concentration on paper because most of the supply lives in custody contracts (the Coinbase custody address, the Binance hot wallet). A naive scanner reads that as red. CleaRank multiplies the soft penalties by (1 − legitimacy × 1.05). Legitimacy itself is a 0–1 function of market cap, contract age, total liquidity, 24h volume and holder count. Blue chips approach legitimacy of 1, which collapses the soft penalties to zero. Brand-new memecoins have legitimacy near zero, so the full penalty stack applies. The end result: WBTC scores 0, a 3-hour-old honeypot scores 90+.

Yes, the scanner is 100% free with no signup. You get the 0–100 risk score, the 5-factor breakdown, the 10-point red-flag checklist, the CleaRank Financial AI written verdict, market data, news, scan history with the risk-trend chart, and a signed PDF report. Pro ($29/mo) unlocks the full Holders tab (top-50 distribution, whale identification with on-chain wallet tags, insider-cluster detection) and the full Liquidity tab (every pool, per-pool LP-lock verification, time-to-unlock countdowns), plus the rest of the 22-tool dashboard. Ultra ($59/mo) adds the full multi-account trading simulator, Trade Journal, AI Trade Coach and Historical Replay.

Stop getting rugged by the obvious ones.

The free scanner catches every textbook rug. Pro adds the whale map and the per-pool LP-lock countdowns, the two views that catch the slow-rug patterns the score alone never sees.

Pro

$29/mo

  • Holders tab with top-50 distribution, whale tags, insider clusters
  • Liquidity tab with per-pool LP-lock and time-to-unlock
  • Save Scenario, PDF export, the full 22-tool dashboard

Start with Pro

Most popular

Ultra

$59/mo

  • Everything in Pro, plus
  • Trading Simulator with multi-account + AI Trade Coach
  • Trade Journal + Historical Replay + prop-firm audit

Get Ultra

14-day money-back guarantee
Cancel anytime
All 22 tools included