Crypto Token Rug Check — Honeypot & Security Scanner

Pre-trade safety scan for any token, on 8 chains, in one call. Paste a contract address, get back a SAFE / WARN / DANGER verdict, a 0–100 risk score, and the itemized security checks that produced it — honeypot status, buy/sell tax, mintability, ownership, blacklist, holder concentration, LP lock, and live DEX liquidity.

Built for the call every trading bot, sniper, and listing reviewer should make before touching a token.

Supported chains

Ethereum, Base, BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and Solana (SPL-specific checks: mint/freeze/close authority, balance-mutable, transfer hooks/fees).

What it checks

Check	Source
Honeypot / cannot-buy / cannot-sell-all	GoPlus Security (+ Honeypot.is buy/sell simulation on deep scan)
Buy tax & sell tax (flagged at ≥10%, DANGER at extreme levels)	GoPlus + Honeypot.is simulation
Mintable / owner-can-reclaim / hidden owner / selfdestruct	GoPlus Security
Transfer pausable, blacklist, closed-source contract	GoPlus Security
Ownership renounced	GoPlus Security
Top-5 holder concentration (% of supply, tagged wallets)	GoPlus Security
LP lock/burn percentage	GoPlus Security
Live liquidity (top pair + total across all pairs), price, 24h volume/txns	DEXScreener
Solana: mint/freeze/close authority, balance-mutable, metadata-mutable, transfer fee	GoPlus Solana

Every upstream failure is handled gracefully — you always get a result item, with an upstreams field telling you exactly which sources answered.

Input

{
  "tokenAddress": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
  "chain": "base",
  "deepScan": true
}

• tokenAddress (required) — 0x… contract address on EVM chains, base58 mint on Solana.
• chain — ethereum | base | bsc | polygon | arbitrum | optimism | avalanche | solana. Default base.
• deepScan — adds a Honeypot.is buy/sell simulation cross-check (Ethereum, BSC, Base), the full list of DEX pairs with per-pair liquidity, and project social links.

Output (real example — USDC on Base)

{
  "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
  "chain": "8453",
  "token": { "name": "USD Coin", "symbol": "USDC" },
  "verdict": "SAFE",
  "risk_score": 0,
  "risk_reasons": [],
  "flags": [],
  "checks": {
    "is_honeypot": false, "cannot_buy": false, "cannot_sell_all": false,
    "buy_tax": 0, "sell_tax": 0, "is_open_source": true, "is_mintable": false,
    "ownership_renounced": false, "owner_can_reclaim": false,
    "transfer_pausable": false, "has_blacklist": false,
    "hidden_owner": false, "selfdestruct": false, "is_proxy": true,
    "holder_count": 9636468
  },
  "holder_concentration": { "available": true, "top5_holder_pct": 16.1, "risk": "DISTRIBUTED", "top_holders": ["..."] },
  "liquidity_lock": { "available": false },
  "market": {
    "available": true, "pair": "USDC/USDbC", "dex": "uniswap",
    "price_usd": 0.9999, "liquidity_usd": 907384.83,
    "total_liquidity_usd": 1470746.46, "pair_count": 21, "volume_24h": 208.07
  },
  "honeypot_simulation": { "available": true, "is_honeypot": false, "buy_tax_pct": 0, "sell_tax_pct": 0, "risk_level": "low" },
  "upstreams": { "goplus": "ok", "dexscreener": "ok", "honeypot_is": "ok" },
  "scanned_at": "2026-07-21T23:35:00.000Z"
}

And a rug in the wild (SafeMoon V1, BSC — deep scan):

{
  "token": { "name": "SafeMoon", "symbol": "SAFEMOON" },
  "verdict": "DANGER",
  "risk_score": 100,
  "risk_reasons": ["OWNER_CAN_RECLAIM", "HIGH_BUY_TAX", "TOP5_HOLDERS_OVER_50PCT", "LP_MAJORITY_UNLOCKED", "EXTREME_TAX_IN_SIMULATION", "THIN_LIQUIDITY_UNDER_50K"],
  "honeypot_simulation": { "buy_tax_pct": 99.99 }
}

Verdict logic

• DANGER — honeypot / cannot-buy, failed buy/sell simulation, extreme (≥50%) simulated tax, or 3+ security flags / ≥15% sell tax.
• WARN — at least one security flag, heavy holder concentration, majority-unlocked LP, or clean security but thin (<$50k) liquidity (slippage/exit risk).
• SAFE — clean security audit and meaningful liquidity.
• UNKNOWN — no data from any source (usually a too-new or fake address).

The risk_score (0–100) is a weighted sum of every triggered issue, so you can set your own threshold instead of trusting the verdict.

Use cases

• Trading / sniping bots — call via the Apify API before every buy; gate entries on verdict !== "DANGER" or risk_score < 25.
• New-listing due diligence — screen tokens before listing them on a DEX aggregator, launchpad, or community.
• Portfolio monitoring — schedule daily scans of held tokens; alert if a token's verdict degrades (owner un-renounces, LP unlocks, tax changes).
• Research / datasets — bulk-score trending tokens by chaining this with a DEXScreener trending scraper.

Why this one (vs. other scanners on Apify)

• Solana Token Trust Scanner — Solana only. This Actor covers Solana plus 7 EVM chains at the same price point.
• Base Token Risk Scanner — Base only, on-chain reads without a security-audit source.
• Token Honeypot Detector — honeypot-focused; no holder-concentration, LP-lock, or liquidity-depth analysis.
• Token Due Diligence Report — similar scope, fewer chains, no buy/sell simulation cross-check.

This Actor fuses three independent free sources (GoPlus audit + DEXScreener liquidity + Honeypot.is simulation) so a single upstream's blind spot doesn't produce a false SAFE — and every result itemizes exactly which source said what.

Honest limitations

• A SAFE verdict is not a guarantee. Scans are heuristic; a malicious dev can rug through paths no static audit catches (e.g., social exit, CEX liquidity, upgradeable proxy logic). Treat SAFE as "no known red flags right now."
• Results reflect the moment of the scan — taxes, ownership, and LP locks can change in one transaction. Re-scan before acting.
• Very new tokens (minutes old) may return UNKNOWN until GoPlus/DEXScreener index them.
• Honeypot.is simulation covers Ethereum, BSC, and Base only; Solana has no honeypot simulation (SPL authority checks are used instead).
• LP-lock data depends on GoPlus recognizing the locker; V3-style NFT positions may show as "unlocked."
• Not financial advice.

Pricing (suggested monetization for the publisher)

Pay-per-event, in line with the category ($0.01–$0.02 per token across competing scanners):

• Token scanned (primary event): $0.02 — charged only when a scan returns a result.
• Actor start: $0.001.

This matches the Solana Trust Scanner and Honeypot Detector price while covering 8 chains, which is the differentiation that justifies parity pricing rather than undercutting. (Apify pays the developer 80% of revenue, monthly.)

API access & AI agents

Need this scan inside a bot or agent, per call, no account?

• Pay-per-call API — x402, USDC on Base, from $0.01/call: GET https://store.agentexchange.work/crypto/security?address=YOUR_TOKEN_ADDRESS&chain=base — same verdict JSON, plus 60+ other pay-per-call data endpoints. Discovery: https://store.agentexchange.work/.well-known/x402
• MCP server for Claude / Cursor / any MCP client: https://store.agentexchange.work/mcp
• Free live samples of every endpoint: https://store.agentexchange.work/samples