What is the most important check before buying a crypto token?

Simulating a sell. A token where buys succeed but sells revert is a honeypot - the most common trap. If you can only verify one thing, verify that a sell transaction completes without reverting. Liquidity and ownership are the next two checks in order of importance.

Can a safe token become dangerous after I buy it?

Yes, if ownership is not renounced and the contract is upgradeable. An active owner with privileged functions (set fees, pause trading, blacklist wallets) can convert a clean contract into a honeypot in a single transaction. Upgradeable proxy contracts carry the same risk: the code you verify today can be replaced without warning.

Does locked liquidity guarantee a project is safe?

No, but it removes the most common exit vector. Locked liquidity means the deployer cannot instantly drain the pool. However, it does not prevent a 100% sell tax from being enabled, an ownership transfer to a malicious wallet, or a mint function that inflates supply. Always check all dimensions together.

What are token vesting schedules and why do they matter?

Vesting schedules govern when team members and early investors can sell their token allocation. Without vesting, insiders can dump their full allocation the moment trading opens, collapsing the price. A proper vesting schedule includes a cliff (no sales for the first N months) followed by linear or milestone releases over 12-36 months.

How do ERC-20 approvals create risk?

When you interact with a DeFi contract you must approve it to spend your tokens. An unlimited approval means that contract can withdraw your entire balance whenever it wants. If that contract is later exploited or turned malicious, your wallet remains exposed until you explicitly revoke the approval. Use only the exact amount needed and revoke approvals after each transaction.

Does the same checklist apply on Solana as on Ethereum?

The risks are similar but the mechanisms are chain-native. On Solana, the equivalent of a honeypot often involves a mint authority that has not been revoked (allowing infinite inflation) or a freeze authority that can lock your tokens. Liquidity risk and insider dumping exist on both chains. A chain-aware scanner interprets each in its own terms.

Guide · Token safety

Crypto token safety checklist
everything to check before you buy

Most crypto losses come from contracts designed to trap buyers. This guide covers the five dimensions every investor should verify - with live on-chain data - before any trade.

Scan a token now

Free · No sign-up · EVM · Solana · Tron

Every scan is powered by the XemaS Semantic Intelligence Platform · answers carry their evidence and coverage state

The core problem

Why tokens fail investors

The price chart cannot tell you whether a token is safe. A token engineered to trap buyers looks identical to a legitimate project until the moment it does not. The difference is entirely in the contract: a sell function that quietly reverts, a liquidity pool the deployer still controls, a vesting schedule no one enforced, an approval that lingers in your wallet long after the trade.

Every dangerous token has at least one of five failure modes. They can appear alone or in combination. Understanding all five, and knowing how to verify each one, is the difference between a trader who gets caught once and one who does not.

The guides below cover each failure mode in depth. This page is the starting point: the complete checklist and where to go to verify each item.

Five dimensions

What to check and why

Each dimension targets a different way a token can be engineered against buyers. Click through for the full explanation.

Honeypot Detection

Is the sell function actually disabled? Learn the on-chain mechanics that trap buyers, from 100% sell tax to hidden transfer blocks.

Honeypot checker →

Rug Pull Risk

How do creators drain liquidity and disappear? This guide covers the exit vectors, from LP withdrawal to contract abandonment.

Rug pull checker →

Liquidity Lock Verification

Locked liquidity is the primary protection against instant rug pulls. Learn what a real lock looks like and what to check.

Liquidity lock checker →

Token Vesting Schedules

Can the team dump on you the moment TGE ends? Check cliff dates, linear schedules, and whether insiders can withdraw early.

Vesting guide →

Token Approval Risk

Infinite ERC-20 approvals leave your wallet exposed long after a trade. Learn how approvals work and how to audit them.

Approval guide →

Quick reference

Pre-buy checklist

Every item below should have a satisfactory answer before you trade.

Token safety gate

Can the token actually be sold? (simulate both buy AND sell)

Is ownership renounced, time-locked, or behind a multisig?

Is liquidity locked for at least 6 months at a reputable provider?

Is the contract a proxy? If so, can the implementation be upgraded?

Are team/investor tokens vesting or immediately unlocked at TGE?

What approvals will the token contract request from your wallet?

All six items verified in one scan via on-chain analysis.

One scan, all dimensions

Automated end-to-end verification

Each checklist item requires a different on-chain query: sell simulation, ownership resolution, liquidity lock lookup, proxy detection, vesting contract verification. XemaS runs all of them in a single scan and surfaces a unified evidence-backed verdict instead of a score.

Sell simulation

Buy + sell both tested against mainnet state

Ownership chain

EOA, multisig, timelock, renounced - resolved live

Liquidity state

Lock provider, unlock date, LP amount verified

Scan a token

Free · No sign-up required

Common questions

Frequently asked questions

Token Security

Crypto token safety checklisteverything to check before you buy