HostHostDeFi › Guides
Token safety guides
Plain-English walkthroughs of what actually makes a token dangerous — and how to see it in the on-chain data before you swap. No jargon, no signup.
Free · 100 checks/day · Solana & EVM
Looking for one token? Every indexed read lives in the token safety index, and the safest Solana tokens ranking lists the ones that clear every check. New to the checks themselves? Start with mint & freeze authority explained and what "mint authority revoked" actually means — the two flags every scan leads with. For the product side — the scanner, swaps, presales and the rest — the features index covers what each tool does.
Start here
How to Read a Token Risk Scan — Every Field, Explained
What each field in a token risk scan means, and which ones are dealbreakers before you swap.
Read the guide →How Honeypot Tokens Trap You — And How to Spot One
A honeypot lets you buy but blocks the sell. The contract-level mechanism, the on-chain tells, and a 60-second pre-buy check.
Read the guide →Mint & Freeze Authority on Solana, Explained
What mint and freeze authority mean, why an active flag is a red line, and how to check before you buy.
Read the guide →Anatomy of a Rug Pull — The On-Chain Sequence
The predictable on-chain sequence of a rug pull, and the signals visible before the exit.
Read the guide →Address poisoning: the copy-paste trap
Lookalike addresses planted in your history, waiting for one careless copy. Industrial scale, simple defense.
Read the guide →Airdrop Scams, Decoded — Dust, Drainers, Fake Claims
Why unsolicited tokens appear in your wallet, what the claim link really does, and the one habit that defuses all of it.
Read the guide →Are tokenized stocks safe?
You own a claim on a token, not a share. What that means in practice, risk by risk.
Read the guide →Security Audit Badges — What an Audit Covers, and What It Never Can
What an audit really is, why a badge can't stop a rug, and how to read the report behind the logo.
Read the guide →How to bridge to Base — routes, timing, and the checks that matter
Cross-chain swap, canonical bridge, or CEX withdrawal — what each Base route really does, and the USDC vs USDbC trap waiting on the other side.
Read the guide →Bridge-Wrapped Tokens — Who Actually Holds the Keys?
Every wrapped token is a claim on collateral someone else guards. How that custody works, fails, and how to check it.
Read the guide →The CEX Listing Dump Pattern — Sell the News Mechanics
A major exchange listing reliably marks a local top more often than a breakout. The mechanics of the dump and how to position around it.
Read the guide →How to check if a token is a honeypot — before you buy
The 60-second check: simulate the sell, read the contract's exit controls, confirm the liquidity door is locked open.
Read the guide →Circulating vs Total Supply — How Market Cap Lies
When 5% of tokens circulate, 'market cap' describes a sliver. The float-vs-FDV gap, the unlock wall it hides, and how to read supply honestly.
Read the guide →Clipboard Hijackers — The Malware That Swaps Your Pasted Address
You copied the right address and sent to the attacker anyway. How clipboard hijackers work and the paste hygiene that beats them.
Read the guide →How Copy-Trading Rugs Work
Seeded winner wallets, followers as exit liquidity, fake PnL, and how to audit a trader before you mirror them.
Read the guide →Crypto Dark Pools — Where Big Orders Go to Hide
How on-chain dark pools and hidden orders work, why private venues now move huge DEX volume, and what it means for your fills.
Read the guide →Crypto Recovery Scams
Why “fund recovery” pitches are structurally fake, and the few things genuinely worth doing after a loss.
Read the guide →Wallet drained? The first-hour playbook
Secure what's left, cut the drain paths, preserve evidence, dodge the second scam. In that order.
Read the guide →Dead Token Forensics — How Projects Actually Die On-Chain
Zombie liquidity, abandoned dev wallets, revival-pump traps — how to tell a dead token from a dormant one before buying the dip.
Read the guide →Dev Wallet Red Flags
How much the dev cluster holds, how it was funded, and whether it's already selling — read it before you buy.
Read the guide →EU Privacy Coin Delistings — What the 2027 Rules Say
What the EU AMLR actually prohibits from July 2027, what stays legal for holders, and how the privacy coin delisting wave is playing out.
Read the guide →Fake Airdrop Claim Sites
Bait tokens, cloned claim pages, and the signature that costs everything — anatomy of the trap.
Read the guide →Fake CEX Listing Announcements — The Rumor Machine
'Listing on Binance next week' is the cheapest pump a scammer can buy. How the rumor machine works and the 90-second verification that beats it.
Read the guide →Fake Communities & Bot Holders — Spotting Manufactured Hype
Padded holder counts, botted channels, and the wallet-level signals — age, funding, balance shape — that give the game away.
Read the guide →Fake Partnership Announcements — Logo-Borrowing Exposed
Logos cost nothing and verification costs effort nobody spends. The fake-partnership playbook and the two-party rule that exposes it.
Read the guide →Fake Volume & Wash Trading — The On-Chain Tells
Sibling-wallet loops, bot ping-pong, volume that dwarfs liquidity, and turnover that never moves the price — how to spot manufactured volume.
Read the guide →Fake Wallet Apps & Extensions — The Download That Steals the Phrase
You install the attacker, type in your seed phrase, and hand over the vault yourself. How the fakes spread and how to verify before trusting.
Read the guide →The First Hour of a Token Launch
What's genuinely checkable at minute five, which signals must wait, and how to act on incomplete data.
Read the guide →Freeze-Authority Abuse — Anatomy of a Frozen-Wallet Trap
How a live freeze authority plays out in practice: selective freezes, AccountFrozen at sell time, and the extortion that follows.
Read the guide →Hardware Wallets for Degens — When One Actually Helps
It protects your keys from extraction — not from your own signatures. What the device genuinely defends and how degens should deploy one.
Read the guide →Honeypot Variants — Sell-Tax Traps, Blacklists and Conditional Blocks
The main technical flavors of honeypot tokens, and the specific signal that gives each one away.
Read the guide →Hot-Wallet Compartmentalization — The Burner/Vault System
One wallet for everything means one mistake costs everything. The vault/hot/burner architecture caps how bad a bad day can get.
Read the guide →Copy trading on Solana, honestly
Mirroring a profitable wallet sounds simple. The mechanics — and the four ways copiers lose anyway.
Read the guide →How DEX aggregators find the best price
Split routes, multi-hop paths, and why two aggregators can honestly quote different “best” prices.
Read the guide →How Much Liquidity Is Enough?
Pool depth is exit capacity — size it against your position, and know the traps in the number.
Read the guide →Prediction market odds, decoded
The price is the probability. The payout is the difference. Everything else follows.
Read the guide →How to Get a Token Jupiter-Verified
What the verification screens for, how the process works, and what to fix before applying.
Read the guide →How to Lock Liquidity on a Solana Token
The three ways to lock LP, the order that matters, and the on-chain checks that separate a real lock from a marketing line.
Read the guide →Influencer Pump Disclosure — Reading Paid Shills
Most crypto influencer pumps are paid promotions wearing conviction's costume. The deal structures, the on-chain receipts, the tells.
Read the guide →Is Jupiter safe to use?
The router isn't the risk — what you route through it is. An honest read of aggregator safety.
Read the guide →Is Phantom wallet safe?
The wallet's architecture is sound. The losses come from what people sign. Here's the split.
Read the guide →Is Polymarket legit?
Real platform, real volume, real nuances: settlement, oracle disputes, and access rules.
Read the guide →Is pump.fun safe? The honest breakdown
The platform is real; the risk lives in the tokens. What the curve enforces and where losses actually happen.
Read the guide →Is USDC Safe on Solana?
Why active authorities on USDC aren't the memecoin red flag, what the depeg taught, and the bridged-copy trap.
Read the guide →Jupiter alternatives for Solana swaps
A different aggregator, a direct venue, or a different interface — the honest guide to what each gets you.
Read the guide →Jupiter's Verified List — What Verification Actually Means
A legitimacy screen, not an endorsement. What the checkmark tests, what it ignores, and how it beats ticker clones.
Read the guide →Launch a Solana Token with a Revoked Mint Authority
The order that matters — mint, distribute, revoke — and the checks a null mint authority does not settle for buyers.
Read the guide →Liquid Staking Token Risks on Solana
LST risks are different in kind: exchange-rate mechanics, validator and contract risk, exit-liquidity gaps.
Read the guide →What does 'liquidity locked' mean — and what does it prove?
Locks block one rug vector, on a timer. Duration games, partial locks, and how to read lock status before you buy.
Read the guide →Locked vs Burned Liquidity — Which One Actually Protects You
Both promise the pool can't be pulled. They protect different things, for different lengths of time — here's how to tell them apart on-chain.
Read the guide →Low-Float / High-FDV Launches — The Unlock Overhang
5% trading, 95% locked, price discovery on crumbs. The playbook, its lifecycle, and the checks that see through it.
Read the guide →LP Tokens & Burned Liquidity — Why 'LP Burned' Matters
Whoever holds the LP tokens can empty the pool. Burning them destroys that power — here's how to verify it really happened.
Read the guide →The Memecoin Lifecycle — Launch to Decay as Risk Map
Memecoins die on a schedule, not a surprise. The five stages, what changes hands in each, and which risk dominates at every point.
Read the guide →The Memecoin Safety Checklist
Six checks in sixty seconds, in the order that catches the most scams fastest.
Read the guide →MEV Sandwiches — Why Your Fill Was Worse Than the Quote
How sandwich attacks tax your swaps through price impact, how to spot the damage in a fill, and which protections actually work.
Read the guide →Multisig vs Single-Key Treasuries — Who Really Controls the Funds?
Treasury custody is a due-diligence signal: real multisigs, theater multisigs, timelocks, and the red flags in signer history.
Read the guide →No-KYC Swaps — What the Label Actually Promises
What no-KYC, non-custodial swapping actually is, what it doesn't exempt you from, and how to spot honest venues.
Read the guide →What is a non-custodial DEX — custody explained honestly
No deposit, no withdrawal to freeze, no venue balance to lose — and the three risks the label doesn't cover.
Read the guide →Pig butchering scams: the full playbook
The long con that ends at a fake exchange. Every stage has a tell — here they all are.
Read the guide →How Presale & IDO Scams Work — Stage by Stage
The presale funnel, soft vs hard rugs, fake vesting dashboards, and how to verify a raise on-chain before sending funds.
Read the guide →Privacy Coins vs Privacy Middleware — Two Different Bets
Base-layer privacy coins vs shielded-pool middleware: mechanics, regulatory exposure, and what each model means for holders.
Read the guide →Proxy Contracts — When 'Renounced' Hides an Upgrade Switch
Upgradeable proxies can swap a token's logic after launch. Why renounced ownership isn't the whole story, and what to check instead.
Read the guide →Pump.fun Graduation, Explained
What migration changes mechanically — which risks it retires and which new ones it creates.
Read the guide →Pump.fun Launches — Mechanics and the Risk Profile
How bonding-curve launches work, what the platform's guardrails cover, and the risks that survive graduation.
Read the guide →How to read a token contract for red flags — the EVM field guide
Owner privileges, mint functions, blacklists, modifiable taxes, proxies — what each flag lets the deployer do to you, and what the contract can't show.
Read the guide →Reading a Solana Transaction — What Actually Moved
The transaction title is costume; the balance deltas are truth. How to read a Solana explorer page like an auditor.
Read the guide →Reading an EVM Transaction — Logs, Approvals, Movement
The 'to' field tells you which contract ran — the logs tell you what it did. Reading Etherscan like an auditor.
Read the guide →Reading a DEX Chart for Structure, Not Price — A Safety Lens
What launch candles, one-sided ladders, thin-pair gaps, and volume mismatches reveal about a token's risk — a structural read, not trading advice.
Read the guide →Reading Holder Distribution — What Whale Concentration Really Tells You
Separate protocol wallets from real whales, trace funding sources, and learn what concentration actually means for rug risk.
Read the guide →“Mint Authority Revoked” — What It Actually Means
How revocation works on-chain, why it's permanent, and the risks it does not remove.
Read the guide →Romance & Token-Gifting Scams — The Baited 'Gift'
An unsolicited token 'gift' is bait: selling it routes you through a drainer. How the gift trap works and the one move that disarms it.
Read the guide →The Seed Phrase Attack Surface — Every Way It Actually Leaks
Phishing is only one door. The full map of where seed phrases actually leak — and which attacks are worth defending first.
Read the guide →Shielded Balances & Viewing Keys — Auditable Privacy
How shielded balances hide on-chain amounts, how viewing keys make that privacy auditable, and where the model still leaks.
Read the guide →Transaction Simulation, Explained — What the Preview Shows and Misses
A clean wallet preview is not a safe transaction. What simulation computes, what it catches, and the four blind spots that still drain wallets.
Read the guide →Slippage Settings for Memecoins
What the tolerance actually bounds, why memecoins need different numbers, and the sandwich-bot tax on loose settings.
Read the guide →What is a slow rug — the exit scam that takes months
Steady insider selling, treasury drains, liquidity trickles — the tells of a rug with no single event.
Read the guide →Sniper Bots & Bundled Launches — Reading a Token's First Block
The opening seconds decide who can dump on whom. Snipers, dev bundles, funding trails, and the 0% dev holding illusion.
Read the guide →Solana Confidential Balances — Encrypted Amounts on SPL
Token-2022 confidential transfers: encrypted balances on Solana, auditor keys, wallet-support gaps, and the encrypted-compute wave.
Read the guide →How many tokens launch on Solana per day?
151,586 launches measured in five days, 82% from repeat wallets, one wallet shipping a token every 28 seconds. Counted, not estimated.
Read the guide →Stablecoin Depeg Risk — What Backs the Peg, and What Breaks It
How each peg design holds, how each one breaks, and the early tells a depeg gives before most people notice.
Read the guide →How to swap tokens without KYC — the honest version
No account means nothing to KYC. What the label actually buys you on EVM chains, where the real boundaries are, and the swap flow that doesn't leak permissions.
Read the guide →Telegram Group Impersonation — Cloned Admins & Fake Support DMs
The most reliable scam on Telegram is a person who looks like help. The impersonation playbook and the habits that beat it.
Read the guide →Telegram Trading Bot Safety
How the key model works, the impostor-bot problem, and the checklist before you deposit.
Read the guide →Token Approvals — How Wallets Get Drained and How to Revoke
Approvals are standing permissions on your tokens. How drainers abuse them, why Permit phishing needs no transaction, and how to claw permissions back.
Read the guide →Token Burn Theater — Real Burns vs Accounting Tricks
'50% burned' is the most gameable claim in token marketing. Real burns vs burn-address tricks, and the mint-authority loophole that makes burns decorative.
Read the guide →Token Holder Counts — Meaning and Manipulation
What holder counts imply at each stage, how the number gets padded, and the cross-checks that expose it.
Read the guide →Token Impersonation — Name, Symbol and Metadata Red Flags
Token metadata is free text, not identity. How fake tokens borrow real names, and how to resolve the real one every time.
Read the guide →Token Taxes, Transfer Fees & Slippage — Where Your Trade Actually Goes
How tax tokens and slippage settings quietly decide what your swap delivers — and how to check the real rate first.
Read the guide →The Tornado Cash Case — What It Means for Users
What the Tornado Cash prosecution decided, what's still open as of August 2026, and what it means for ordinary crypto users.
Read the guide →How to Verify a Token's Contract Address Before You Buy
Tickers are costumes; the address is identity. The canonical-source chain, lookalike-address tricks, and the two-source rule.
Read the guide →Vesting Schedules On-Chain — Verify the Cliff
'Locked for 2 years' resolves to an on-chain fact or a marketing promise. How to find the real schedule and spot the bypass wallets.
Read the guide →Wallet Drainer Scams, Explained
Drainers get you to sign the theft yourself. How the kits work and the habits that make you a hard target.
Read the guide →Rugged? What to Do in the First Hour
Diagnose the failure, revoke approvals, save the evidence, and don't get hit by the recovery scam that follows.
Read the guide →YouTube Livestream Giveaway Scams — The Deepfake Loop
A hijacked channel, a looped keynote, a 'send 1 get 2 back' overlay. The loop is a decade old and still printing — here's the one rule that makes you immune.
Read the guide →HostDeFi is an educational risk tool, not financial advice. On-chain data can be incomplete or manipulated; always do your own research. Free · no signup · a HostDeFi product