GUIDE

Risk rules

Version 1. Each rule reads one value, compares it with a fixed threshold and prints both on the report. Levels are clear, note, caution and flag. They are indicators, not a verdict, and they are not a substitute for an independent code review of any program a token depends on.

Contract settings

Mint authority

Flags an active mint authority: that address can create new tokens and dilute every holder.

Freeze authority

Flags an active freeze authority: that address can lock any holder's token account.

Token-2022 extensions

Lists extensions that change how transfers work (permanent delegate, transfer hook, transfer fee, pausable, non-transferable and others).

Metadata lock

Notes whether the name, symbol and image can still be rewritten by an update authority.

Holders

Top-10 concentration

Share of supply in the ten largest wallets (pools and curves left out). Caution from 30.0%, flag from 50.0%. On-chain read first; the public token index figure when the RPC refuses the read.

Largest single wallet

Caution when one wallet holds 10.0% or more, flag from 20.0%. On-chain read only.

Liquidity

Liquidity depth

Total USD liquidity across every pool found. Flag under $5,000, caution under $50,000.

Liquidity concentration

Caution when one pool holds 90.0% or more of all liquidity found: one withdrawal can empty the market.

Liquidity against market cap

Liquidity divided by market cap. Caution under 1.00%, flag under 0.20%: a thin market under a large valuation.

Market

24-hour movement

Absolute price change over 24 hours. Caution from 25%, flag from 60%.

Market age

Caution when the oldest pool found is younger than 7 days.

Launch curve

Notes when the token still trades on a pump.fun bonding curve, where price follows a formula until the curve completes.

Why these thresholds

The numbers are deliberately plain. A top-ten share of 30% is where a handful of sellers can start to move the market on their own; at 50% they can decide it. Liquidity under $50,000 means a four-figure order already moves the price noticeably. A market cap more than a hundred times its liquidity (under 1%) describes a valuation that a modest amount of selling cannot be absorbed by.

None of these is a law. A new token can be perfectly fine with one pool, and an old token can be dangerous with many. That is why each line shows its input: so you can apply your own judgement to the same evidence.

What the rules cannot see

Wallets that belong to a team but are not labelled anywhere on chain.
Promises made off chain, vesting agreements, or plans to sell.
Whether a program a token depends on has bugs. Reading account settings is not the same as reading code.
Liquidity in venues the public pair index does not list.
Anything that changes after the report was read. Reports are cached for a minute.

Holder figures

On-chain holder data needs the getTokenLargestAccounts call, which free public nodes usually refuse. When it works, the report groups the largest accounts by owner and leaves pool and curve accounts out of the top-ten share. When it does not, the report uses the public token index's top-holder percentage instead and marks that line as a third-party figure. A site owner can add a private RPC endpoint to get the on-chain version every time; see Data sources.