A 5-step routine to spot a risky token (no coding needed)
Many people lose money because they never checked what a token contract allows its creator to do. This routine takes about five minutes with a block explorer and works as a first screen: it will not tell you a token is safe, but it can show you quickly when something deserves a closer look. No coding needed.
Published · Updated · 4 min read
Solana and EVM use different words
Mint and freeze authority are Solana (SPL token) settings. On EVM chains such as Ethereum, Base or BNB Chain, the same questions are answered by looking at the contract itself: owner-controlled mint functions, pausable or blacklist functions, and whether the contract is an upgradeable proxy.
Mint authority: can someone still create tokens?
If a mint authority is still active, its holder can create new tokens and dilute everyone else. On a Solana block explorer, open the token page and look for Mint Authority: you want to see it revoked (none). On EVM, open the verified contract source and look for a mint function that the owner or another privileged role can call. An active mint authority is not proof of fraud, since some projects keep it for a stated reason, but it means the supply is not fixed.
Freeze authority: can someone block your tokens?
On Solana, a freeze authority is a single address set on the token that can freeze holders' token accounts, so they can no longer move their tokens. An active freeze authority is a red flag to understand before you go further. Some regulated or stablecoin-style tokens keep one on purpose, which is why it is a risk to weigh, not an automatic verdict. On EVM there is no freeze authority; look for pausable functions, blacklist functions, and an upgradeable proxy, because an admin who can upgrade the contract can change its rules later.
Holder concentration: who holds most of the supply?
Open the token's holders list on a block explorer. If a handful of wallets hold most of the supply, a few people can move the price on their own. Some of the largest addresses are normal: liquidity pools, exchange wallets, burn addresses or program-owned accounts. Identify what each top address is before you read anything into the percentages, and remember that one person can split a position across many wallets.
Liquidity: how deep is it, and can it be pulled?
Liquidity is the money sitting in the trading pool that lets you sell what you bought. Check how much there really is and, separately, whether the liquidity tokens are locked or burned. Thin or unlocked liquidity means the exit can close fast: whoever controls the pool can remove it. Lock status is checked on the lock provider or the explorer, not guessed from the pool size.
Official links: is this the real token?
Copycat tokens reuse a famous name and symbol. Take the contract address from the project's official website, then compare it with its official social accounts and with the address in the block explorer. Never trust an address received in a private message, an ad or a comment. If the addresses do not match everywhere, treat it as a different token.
The rule most people forget
If something cannot be verified, it is unknown, not safe. A missing page, a hidden setting, an unverified contract or a blank field does not mean there is no problem. It means you do not know yet. And even when every check looks clean, that is the absence of the issues you looked for, not a guarantee.
Check it automatically with BlockAssay
Paste a public Solana token (mint) address into the BlockAssay checker. It reads the mint and freeze authority and the supply from the chain and shows market liquidity from public market data when available, each with its source and the time of observation. Anything it could not verify is shown as unavailable instead of being guessed. Solana token addresses can be checked free, without an account, and BlockAssay never asks for a wallet connection, a signature or a seed phrase. Other networks, such as EVM addresses, need a free BlockAssay account. BlockAssay does not verify liquidity locks or rank holders in this check, so steps 3 and 4 stay manual.
Keep going
Educational content. Not financial advice.