# HostDeFi

> Trading app with a built-in safety layer: a free token-safety scanner that
> grades any token from A+ to F using on-chain checks (mint and freeze
> authority, liquidity depth, holder concentration, contract flags), plus
> swaps on Solana (Jupiter-routed) and major EVM chains (KyberSwap-routed).
> One-tap account wallets with revocable server access; no HostDeFi token.
> The scanner is free with no signup (fair use: 100 checks per day per IP);
> swaps carry a disclosed 1% platform fee.

## What makes a Solana token unsafe?

Four on-chain properties do most of the work, and all four are checkable before
you spend anything:

1. **Mint authority still active.** Whoever holds it can create new supply at
   will and dilute every holder. "Renounced" means the authority was set to
   none — permanently. An active mint authority is not automatically a scam
   (some legitimate projects keep it), but it is unlimited dilution power held
   by one party.
2. **Freeze authority still active.** This is the more dangerous of the two and
   the one most often misunderstood. A live freeze authority lets the issuer
   freeze individual token accounts — meaning a specific holder can be blocked
   from ever selling, while the chart keeps trading normally. **A freeze
   authority should be revoked. A live one is a risk, never a safety feature.**
3. **Thin or unlocked liquidity.** Liquidity is what lets you exit. If the pool
   is small relative to market cap, or the LP tokens are neither burned nor
   locked, the people holding them can withdraw the exit door.
4. **Concentrated holders.** When a handful of wallets hold most of the
   circulating supply, price is whatever they decide it is. HostDeFi measures
   the top-10 share of circulating supply, excluding the bonding curve or pool
   account itself — counting that account would make every fresh launch look
   99% held and tell you nothing.

## What does "renounced" actually mean?

That the authority field on the token's mint account is set to null, so no key
can exercise it any more. It is a one-way action and it is visible on-chain —
you do not have to trust a claim about it. It is checked per-authority: a token
can have its mint authority renounced while its freeze authority is still live,
which is why the two must be read separately rather than as a single "renounced"
badge.

## How does a honeypot token stop you selling?

A honeypot lets buys through and blocks or taxes exits. The common mechanisms:

- **Blacklists** — the contract refuses transfers from specific addresses.
- **Sell taxes** — a fee applied only to sells, sometimes up to 100%.
- **Conditional blocks** — sells work for some addresses (the team's) and not
  others, or only under conditions the contract controls.
- **Freeze authority** on Solana — accounts are frozen individually.
- **Token-2022 extensions** — see below.

The tell is asymmetry: anything that treats a sell differently from a buy.

## Which Token-2022 extensions are dangerous, and why?

Solana's Token-2022 program allows extensions on a mint. Six of them can trap or
seize funds, and HostDeFi flags each explicitly:

- **Transfer fee (extension 1)** — sells can be taxed, up to 100%.
- **Default account state (6)** — new holders' accounts start frozen, so buyers
  are blocked by default until the issuer unfreezes them.
- **Non-transferable (9)** — the token literally cannot be sold or moved.
- **Permanent delegate (12)** — the issuer can move tokens out of *any* wallet,
  at any time, without the holder's consent.
- **Transfer hook (14)** — an issuer-controlled program runs on every transfer
  and can make it fail.
- **Pausable (26)** — the issuer can halt all transfers globally.

Any of these on a mint means the issuer retains control over your ability to
exit. They are not visible in a price chart.

## Does an audit mean a token is safe?

No. An audit is a review of specific code at a specific commit, by a specific
firm, against a specific scope. It says nothing about whether the team later
deployed different code, whether the authorities were renounced, whether
liquidity is locked, or whether the treasury is a single key. An audit badge on
a website is also not proof an audit happened. Check the authorities and the
liquidity yourself — those are on-chain facts, not claims.

## Does "LP burned" mean the liquidity is safe?

It means those particular LP tokens can no longer be redeemed, so that share of
liquidity cannot be pulled. It does not mean *all* liquidity is locked — a team
can burn a small portion and keep the rest, or hold liquidity in a second pool.
Read what fraction was burned, not whether a burn happened.

## What is a rug pull, mechanically?

The on-chain sequence is usually: liquidity is added and the token trades
normally; buyers accumulate; then in a single transaction or a short burst, the
liquidity provider withdraws the pool (or the issuer mints and dumps supply, or
sells a large pre-held allocation). Price collapses toward zero because there is
nothing left to sell into. The signature is a sudden, near-total drop in pool
liquidity rather than a gradual decline in price.

## How can I check a token before buying?

1. Confirm you have the **right contract address** — from the project's own
   verified channel, not a search result or a reply. Impersonation by name and
   symbol is trivial.
2. Check **mint and freeze authority** are revoked.
3. Check **liquidity depth** relative to market cap, and whether LP is
   burned or locked.
4. Check **holder concentration** — the top-10 share of circulating supply.
5. Check for **Token-2022 extensions** on Solana, or proxy upgradeability on
   EVM chains.
6. Only then look at the chart.

HostDeFi runs steps 2–5 automatically and returns a grade from A+ to F:
https://hostdefi.com/scan

## What is HostDeFi?

A trading app with a safety layer built in.

- **The scanner is free** and needs no signup. Fair use is 100 checks per day
  per IP. It grades any Solana mint or EVM contract address from A+ to F using
  on-chain checks: mint and freeze authority, liquidity, holder concentration
  and contract flags.
- **Trading runs through one-tap HostDeFi account wallets.** The server holds a
  revocable signing copy so orders, copy trading and protective exits can run
  24/7; revoking server access deletes that copy instantly. External wallets
  (Phantom, WalletConnect) are supported on the dedicated wallet-trade page and
  the embeddable widgets, where keys never leave the user's wallet.
- **Swaps route through aggregators**: Jupiter on Solana; KyberSwap across
  Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche and Monad.
- **The fee is 1%**, charged in the chain's native coin and disclosed before
  signing. There is no HostDeFi token and no subscription for the scanner.
- **Referrals pay 50% of that fee** to the referrer (up to 80% on the earned
  split ladder), settled on-chain inside the referred trade's own transaction
  rather than accrued off-chain.
- **The data is open**: a graded-corpus CSV at
  https://hostdefi.com/data/safety-snapshot.csv and a monthly reproducible
  safety report at https://hostdefi.com/reports/celebrity-tokens/

## Can software agents use HostDeFi?

Yes. HostDeFi exposes its token-risk verdicts, authority checks and longitudinal
safety history as machine-payable endpoints over the **x402** protocol —
pay-per-call in USDC with no account, no API key and no subscription. The
discovery manifest is at https://hostdefi.com/.well-known/x402 and the same
tools are available over MCP. Full documentation:
https://hostdefi.com/docs/api/

## What HostDeFi does not claim

- A grade is a read of on-chain structure at a point in time, not a prediction
  and not financial advice. A token can grade well and still lose value.
- A clean scan cannot detect off-chain intent — a team that behaves for months
  and then rugs was never distinguishable by contract state alone.
- Market figures published anywhere on the site are computed from a dated
  snapshot and labelled "as of" that date. They are never presented as live.

## Core
- [HostDeFi app](https://hostdefi.com/): swaps on Solana and the major EVM chains, wallet-native, no KYC
- [Token safety scanner](https://hostdefi.com/scan): paste any contract address or ticker for a free A+ to F on-chain risk grade
- [Guides library](https://hostdefi.com/guides/): plain-English token-safety guides (every guide listed below)
- [Feature pages](https://hostdefi.com/features/): one landing page per app feature - what each surface does and its limits
- [Open data](https://hostdefi.com/data/): token safety snapshot - free, citable CSV, every row dated
- [Free API docs](https://hostdefi.com/docs/api/): free tier (100 checks/day per IP), keys, and the x402 machine-payable lane
- [Sitemap](https://hostdefi.com/sitemap.xml)

## Guides (token-safety library)
- [Address Poisoning Attacks: One Copy-Paste From Ruin](https://hostdefi.com/guides/address-poisoning-attacks/)
  Address poisoning seeds your transaction history with lookalike addresses so you copy the wrong one. Attempts run at industrial scale — security firms reported millions per month in 2026. The mechanics and the defenses that work.
- [Airdrop Scams, Decoded — Dusting, Drainer Links and Fake Claims](https://hostdefi.com/guides/airdrop-scam-mechanics/)
  Unsolicited tokens in your wallet are bait, not a gift. How dusting, fake claim sites, and approval-phishing 'claims' actually drain wallets — and why ignoring the dust is the entire defense.
- [Are Tokenized Stocks Safe? xStocks Risk, Plainly](https://hostdefi.com/guides/are-tokenized-stocks-safe/)
  Tokenized stocks like xStocks put Apple and Tesla exposure on Solana — 1:1 backed claims, 24/7 trading, no brokerage. What you actually own, the issuer and liquidity risks, and how they differ from real shares.
- [Security Audit Badges — What an Audit Covers, and What It Never Can](https://hostdefi.com/guides/audit-badges-what-they-cover/)
  An audit is a scoped code review at one commit — not a seal of honesty. What "audited" badges prove, what they can't (rugs, dumps, redeploys), how to read findings in a real report, and how audit-washing games the label.
- [How to Bridge to Base — Routes, Timing, and the Checks That Matter](https://hostdefi.com/guides/bridge-to-base/)
  Three honest ways to get assets onto Base: a cross-chain swap that lands ETH or USDC in minutes, the canonical Base bridge (cheap in, ~7 days out), or a CEX withdrawal straight to the network. What each route actually does, what it costs, and the checks to run before and after the send.
- [Bridge-Wrapped Tokens — Who Actually Holds the Keys to Your Asset?](https://hostdefi.com/guides/bridge-wrapped-tokens-custody-risk/)
  A wrapped token is an IOU minted against collateral locked on another chain. Who guards that collateral — a multisig, an MPC set, one server? How bridge hacks hollow out wrapped supply, and how to trace any wrapper's issuer and redemption path.
- [The CEX Listing Dump Pattern — Why 'Buy the Rumor, Sell the News' Keeps Working](https://hostdefi.com/guides/cex-listing-dump-pattern/)
  A major exchange listing is the most anticipated catalyst in a token's life — and reliably marks a local top more often than a breakout. The mechanics of the post-listing dump, who sells into it, and how to position around the pattern instead of inside it.
- [How to Check if a Token Is a Honeypot (Before You Buy)](https://hostdefi.com/guides/check-token-honeypot/)
  A honeypot lets you buy and blocks the sell. The real check: simulate the round trip, read the contract's exit controls — freeze authority, blacklist logic, modifiable tax — and confirm the liquidity door is locked open.
- [Circulating vs Total Supply — How 'Market Cap' Lies When the Float Is Thin](https://hostdefi.com/guides/circulating-vs-total-supply/)
  Market cap = price × circulating supply — and when only 5% of tokens circulate, the 'cap' describes a sliver of the real position. The float-vs-FDV gap, the unlock wall it hides, and how to read supply honestly before you buy.
- [Clipboard Hijackers — The Malware That Swaps Your Pasted Address](https://hostdefi.com/guides/clipboard-hijacker-malware/)
  Clipboard hijacker malware watches for crypto addresses and silently swaps the destination mid-paste — you copied the right address and sent to the attacker anyway. How it works, how it gets on machines, the paste hygiene that beats it, and what to check if you suspect it.
- [How Copy-Trading Rugs Work — When the Wallet You Follow Is the Trap](https://hostdefi.com/guides/copy-trading-rug-mechanics/)
  Copy-trading tools broadcast your next move to the person you follow. How seeded 'winner' wallets, doctored PnL and token-gated alpha groups turn followers into exit liquidity — and how to audit a wallet before copying it.
- [Crypto Dark Pools — Where Big Orders Go to Hide](https://hostdefi.com/guides/crypto-dark-pools-explained/)
  Dark pools quote privately and fill through aggregators, hiding order flow from front-runners. How on-chain dark pools work, why one quietly became a top Solana venue, and what hidden liquidity means for your fills.
- [Crypto Recovery Scams — The Second Theft That Hunts Victims of the First](https://hostdefi.com/guides/crypto-recovery-scams/)
  After a rug or a drain comes the DM: “we can recover your funds.” Why recovery services are structurally fake, the police-impersonation variant, and the few things that can genuinely be done after a loss.
- [Crypto Wallet Drained? The First Hour, Step by Step](https://hostdefi.com/guides/crypto-wallet-drained-what-to-do/)
  If your wallet was just drained: secure what's left from a clean device, revoke approvals, preserve evidence, report it properly — and don't pay anyone who promises recovery. The honest playbook, in order.
- [Dead Token Forensics — How Projects Actually Die On-Chain](https://hostdefi.com/guides/dead-token-forensics/)
  Tokens rarely die in one candle — they drain, hollow out, and go quiet in a recognizable sequence. How to autopsy a chart before you buy the dip: zombie liquidity, abandoned dev wallets, and revival-pump traps.
- [Dev Wallet Red Flags — Reading the Creator's Hand Before You Buy](https://hostdefi.com/guides/dev-wallet-red-flags/)
  The creator's wallet tells you more than the chart: how much of supply the dev cluster holds, how it was funded, and whether it's already distributing. The patterns that precede most soft rugs.
- [The EU Privacy Coin Delistings — What the 2027 Rules Actually Say](https://hostdefi.com/guides/eu-privacy-coin-delistings/)
  The EU's anti-money-laundering regulation forces regulated exchanges to drop privacy coins like Monero and Zcash by July 2027. What the rules actually prohibit, what stays legal, and what the delisting wave means for holders.
- [Fake Airdrop Claim Sites — The Anatomy of the “Free Money” Trap](https://hostdefi.com/guides/fake-airdrop-claim-sites/)
  The fake-claim flow is the most industrialized scam in crypto: bait tokens in your wallet, cloned claim pages, and a signature that costs everything. How each stage works and how real airdrops differ.
- [Fake CEX Listing Announcements — The Rumor Machine Behind the Pump-and-Dump](https://hostdefi.com/guides/fake-cex-listing-announcements/)
  'Listing on Binance next week' is the cheapest pump a scammer can buy — a fake screenshot and a coordinated whisper campaign. How fake CEX-listing rumors are manufactured, how real listings are actually announced, and the verification that takes ninety seconds.
- [Fake Communities & Bot Holders — Spotting Manufactured Hype On-Chain](https://hostdefi.com/guides/fake-community-bot-holders/)
  Holder counts, busy Telegrams and viral engagement can all be purchased by the thousand. Where manufactured communities come from, why raw counts are gameable, and the on-chain tells — funding source, wallet age, balance shapes — that expose them.
- [Fake Partnership Announcements — Logo-Borrowing, 'In Talks,' and Other Credibility Costumes](https://hostdefi.com/guides/fake-partnership-announcements/)
  'Partnered with Chainlink/Google/a major exchange' is a claim scammers borrow for free — logos cost nothing and verification costs effort nobody spends. The fake-partnership playbook, the two-party rule that exposes it, and the exaggerated half-truths that are almost worse.
- [Fake Volume & Wash Trading — The On-Chain Tells](https://hostdefi.com/guides/fake-volume-wash-trading/)
  Volume is the most-faked number in crypto. Learn the wash-trading tells: sibling-wallet loops, bot ping-pong, volume that dwarfs liquidity, metronome trade timing, and turnover that never moves the price.
- [Fake Wallet Apps & Extensions — The Download That Steals the Phrase](https://hostdefi.com/guides/fake-wallet-apps-and-extensions/)
  Cloned wallet apps and spoofed browser extensions are the highest-yield theft in crypto: you install the attacker, type in your seed phrase, and hand over the vault yourself. How the fakes get distributed, how to verify a wallet before trusting it, and what to do if you already installed one.
- [The First Hour of a Token Launch — What's Knowable, What Isn't, What to Check](https://hostdefi.com/guides/first-hour-token-checks/)
  In a token's first hour most safety data doesn't exist yet — no history, no distribution record, no volume worth trusting. What is genuinely checkable at minute five, and which signals must wait.
- [Freeze-Authority Abuse — Anatomy of a Frozen-Wallet Trap](https://hostdefi.com/guides/freeze-authority-abuse-case/)
  A case-style walkthrough of how a live Solana freeze authority becomes a trap: winners frozen mid-pump, AccountFrozen errors at sell time, and the "pay to unfreeze" follow-up scam. What the pre-buy scan would have shown.
- [Hardware Wallets for Degens — When One Actually Helps (and When It Can't Save You)](https://hostdefi.com/guides/hardware-wallets-for-degens/)
  A hardware wallet protects your keys from extraction — it does not protect you from your own signatures. What the device genuinely defends, the attack classes it can't touch, how degens should actually deploy one, and the two screens that earn its price.
- [Honeypot Variants — Sell-Tax Traps, Blacklists and Conditional Blocks](https://hostdefi.com/guides/honeypot-variants-sell-tax-blacklist/)
  Honeypots don't all block sells the same way. A field guide to the main variants — 100% sell taxes, blacklists, whitelist windows, balance rewrites, delayed arming and simulation-resistant traps — and the detection signal for each.
- [Hot-Wallet Compartmentalization — The Burner/Vault System That Limits Blast Radius](https://hostdefi.com/guides/hot-wallet-compartmentalization/)
  One wallet for everything means one mistake costs everything. The compartmentalized setup — a vault that never connects, a trading wallet with a capped float, and burners you treat as disposable — caps how bad a bad day can get.
- [How Copy Trading Works on Solana — and Where It Bites](https://hostdefi.com/guides/how-copy-trading-works-on-solana/)
  Copy trading mirrors another wallet's buys and sells with your money. The mechanics, how to vet a wallet's track record, and the four ways copiers lose even when the trader wins.
- [How Does a DEX Aggregator Get the Best Price? Routing Explained](https://hostdefi.com/guides/how-dex-aggregators-find-prices/)
  Your swap is split across dozens of pools and multi-hop paths, then netted into one output number. What the router actually does — and why two aggregators quote different “best” prices.
- [How Honeypot Tokens Trap You — And How to Spot One Before You Buy](https://hostdefi.com/guides/how-honeypot-tokens-work/)
  A honeypot token lets you buy but blocks you from selling. Here's exactly how the trap is built at the contract level, the on-chain signals that expose it, and a 60-second check you can run before you swap.
- [How Much Liquidity Is Enough? Reading Pool Depth as Exit Capacity](https://hostdefi.com/guides/how-much-liquidity-is-enough/)
  Liquidity is the one number that decides whether you can actually realize a gain. How to size pool depth against your position, the liquidity-to-market-cap sanity check, and the traps in the number.
- [How Prediction Market Odds Work: Prices Are Probabilities](https://hostdefi.com/guides/how-prediction-market-odds-work/)
  A prediction-market share priced at 62¢ is a 62% probability estimate that pays $1 if right. The math, why crowd prices beat pundits, when they're wrong, and how to read a market like a trader.
- [How to Get a Token Jupiter-Verified — The Process for Solana Teams](https://hostdefi.com/guides/how-to-get-jupiter-verified/)
  A practical walkthrough for Solana teams: what Jupiter's verification actually screens for, how the verify process works, the mistakes that stall applications, and what to fix before you apply.
- [How to Lock Liquidity on a Solana Token — Step by Step + How Buyers Verify](https://hostdefi.com/guides/how-to-lock-liquidity-solana/)
  What "liquidity locked" actually means on-chain, the three ways to do it, the order that matters — and the on-chain checks that separate a real lock from a marketing line.
- [How to Read a Token Risk Scan — Every Field, Explained](https://hostdefi.com/guides/how-to-read-a-token-risk-scan/)
  What each part of a token risk scan actually means — risk level, liquidity, mint & freeze authority, holder concentration, sell simulation — and which fields are dealbreakers before you swap.
- [Influencer Pump Disclosure — Reading Paid Shills, Wallet Receipts, and the #ad That Isn't There](https://hostdefi.com/guides/influencer-pump-disclosure/)
  Most crypto influencer pumps are paid promotions wearing the costume of conviction. How the deals are structured, the on-chain receipts that expose them, the posting patterns that give them away, and what disclosure law actually requires.
- [Is Jupiter (JUP) Safe to Use? Aggregator Risk, Honestly](https://hostdefi.com/guides/is-jupiter-aggregator-safe/)
  Jupiter is Solana's dominant swap aggregator — it routes trades, it doesn't hold funds. What an aggregator can and can't do to you, where the real risks sit, and why the token you buy matters more than the router.
- [Is Phantom Wallet Safe? Where the Real Risk Lives](https://hostdefi.com/guides/is-phantom-wallet-safe/)
  Phantom is the most used Solana wallet and its architecture is sound self-custody. Nearly every 'Phantom hack' story is actually a signature the victim approved. What the wallet protects, what it can't, and the habits that matter.
- [Is Polymarket Legit? How Prediction Markets Hold Your Money](https://hostdefi.com/guides/is-polymarket-legit/)
  Polymarket is a real, heavily used prediction market — not a bucket shop. Where the money sits, how outcomes get decided, why resolution disputes are the real risk, and what US users should know.
- [Is Pump.fun Safe? What the Platform Does and Doesn't Protect](https://hostdefi.com/guides/is-pump-fun-safe/)
  Pump.fun is a real, widely used Solana launchpad — and almost everything risky about it lives in the tokens, not the platform. How the bonding curve works, what the program enforces, and where buyers actually lose money.
- [Is USDC Safe on Solana? Authorities, Depegs and the Bridged-Copy Trap](https://hostdefi.com/guides/is-usdc-safe-on-solana/)
  USDC on Solana keeps its mint and freeze authority active by design. Why that isn't the red flag it would be on a memecoin, what the 2023 depeg taught, and how to avoid bridged lookalikes.
- [Jupiter Alternatives for Solana Swaps: When to Use What](https://hostdefi.com/guides/jupiter-alternatives-solana-swaps/)
  Jupiter is the default for a reason, but “alternative” means three different things — a different aggregator, a direct venue, or a different interface on the same routes. What each actually gets you.
- [Jupiter Verified List: What the Checkmark Means (and What It Doesn't)](https://hostdefi.com/guides/jupiter-verification-what-it-means/)
  On Solana, Jupiter's verified list is a legitimacy screen, not an endorsement: it confirms a mint is the real token behind a name and clears basic hygiene. What the checkmark tests, what it ignores, and how to use it to beat ticker clones.
- [Launch a Solana Token with a Revoked Mint Authority — How To Do It Right](https://hostdefi.com/guides/launch-token-revoked-mint-authority/)
  Buyers' first check on a new Solana token is a null mint authority. How to mint, distribute, and revoke in the right order — and the freeze authority, LP and concentration checks a revoked mint does not settle.
- [Liquid Staking Token Risks on Solana — What Can Actually Go Wrong with LSTs](https://hostdefi.com/guides/liquid-staking-token-risks/)
  jitoSOL, mSOL and the rest are among the deepest tokens on Solana, but their risks are different in kind from memecoins: exchange-rate mechanics, validator risk, contract risk and exit-liquidity gaps.
- [What Does "Liquidity Locked" Mean on Solana? — What a Lock Proves](https://hostdefi.com/guides/liquidity-locks-explained/)
  Liquidity locked means the LP tokens are parked with a custodian on a timer — it blocks the liquidity-pull rug, and only until the clock runs out. What locked liquidity proves, what it doesn't, and how lock duration and partial locks change what the badge is worth.
- [Locked vs Burned Liquidity — Which One Actually Protects You](https://hostdefi.com/guides/locked-vs-burned-liquidity/)
  Locked liquidity and burned liquidity both promise the pool can't be pulled — but they protect different things, for different lengths of time, with different failure modes. How to tell them apart on-chain and which is safer in which case.
- [Low-Float / High-FDV Launches — The Unlock Overhang Nobody Prices In](https://hostdefi.com/guides/low-float-high-fdv-launches/)
  Launch with 5% of supply trading, let price discovery run on crumbs, and the insiders' locked 95% is suddenly 'worth' billions on paper. The low-float/high-FDV playbook, its four-stage lifecycle, and the checks that see through it.
- [LP Tokens & Burned Liquidity — Why 'LP Burned' Matters](https://hostdefi.com/guides/lp-tokens-and-burned-liquidity/)
  LP tokens are the redeemable claim on a trading pool — whoever holds them can empty it. Burning them destroys that claim for good. How AMM receipts work, how to verify a real burn, and the fresh-pool trick that gets around one.
- [The Memecoin Lifecycle — Launch, Peak Attention, Decay, and Where the Risk Sits in Each](https://hostdefi.com/guides/memecoin-lifecycle-stages/)
  Memecoins die on a schedule, not a surprise — the same arc from launch through peak attention to decay plays out across thousands of tokens. The five stages, what changes hands in each, and which risk dominates at every point of the curve.
- [The Memecoin Safety Checklist — Six Checks in Sixty Seconds](https://hostdefi.com/guides/memecoin-safety-checklist/)
  A pre-buy routine for Solana memecoins: mint and freeze authority, liquidity depth and lock, holder concentration, creator wallet, token age, and identity — in the order that catches the most scams fastest.
- [MEV Sandwiches — Why Your Fill Was Worse Than the Quote](https://hostdefi.com/guides/mev-sandwiches-for-buyers/)
  A sandwich attack buys right before your swap and sells right after it, taxing you through price impact. How the attack works on Ethereum and Solana, how to read the damage in your fill, and what actually protects a buyer.
- [Mint & Freeze Authority on Solana, Explained — What "Renounced" Really Means](https://hostdefi.com/guides/mint-and-freeze-authority-explained/)
  On Solana, mint and freeze authority decide whether a deployer can print new supply or freeze your tokens. What each one is, why an active flag is a red line, and how to check it before you buy.
- [Multisig vs Single-Key Treasuries — Who Really Controls the Project's Funds?](https://hostdefi.com/guides/multisig-vs-single-key-treasuries/)
  A project's treasury custody tells you how many people must cooperate to take the money. What deployer wallets control, when a multisig is real protection versus theater, and how to inspect signers, thresholds and timelocks yourself.
- [No-KYC Swaps — What the Label Actually Promises (and What It Doesn't)](https://hostdefi.com/guides/no-kyc-swaps-what-it-means/)
  A no-KYC swap means no account and no identity documents — not invisibility, and not exemption from the law. What non-custodial no-KYC trading actually is, where the boundaries sit, and how to tell honest venues from bait.
- [What Is a Non-Custodial DEX? Custody Explained](https://hostdefi.com/guides/non-custodial-dex-explained/)
  A non-custodial exchange never holds your funds — swaps settle atomically from your wallet through a smart contract. What that protects you from, and the three risks it was never designed to cover.
- [Pig Butchering Crypto Scams: The Playbook, Step by Step](https://hostdefi.com/guides/pig-butchering-crypto-scams/)
  Pig butchering is the highest-losses crypto scam: a long-con relationship that ends at a fake trading platform showing fake profits. The script, the tells at each stage, and what actually helps if you're inside one.
- [How Presale & IDO Scams Work — The Playbook, Stage by Stage](https://hostdefi.com/guides/presale-scam-mechanics/)
  Presale and IDO scams follow a repeatable script: manufactured hype, an allowlist that flatters you, a raise, then a soft or hard rug. Here is each stage — and how to verify a presale's claims on-chain before you send anything.
- [Privacy Coins vs Privacy Middleware — Two Different Bets](https://hostdefi.com/guides/privacy-coins-vs-privacy-middleware/)
  Monero-style privacy coins bake anonymity into the chain; middleware like shielded pools adds privacy on top of transparent chains. How the two models differ in mechanics, regulatory exposure and what they mean for a holder.
- [Proxy Contracts — When 'Renounced' Hides an Upgrade Switch](https://hostdefi.com/guides/proxy-contracts-hidden-upgrade-risk/)
  An upgradeable proxy lets someone replace a token's entire logic after you buy — even when ownership looks renounced. How proxies work, how honest teams constrain them, how rugs exploit them, and how to spot one on an explorer.
- [Pump.fun Graduation — What Actually Changes When a Token Migrates](https://hostdefi.com/guides/pump-fun-graduation-explained/)
  On the bonding curve, liquidity can't be pulled; after graduation, everything changes. What migration means mechanically, which risks it retires, and which brand-new risks it creates.
- [Pump.fun Launches — Mechanics and the Risk Profile That Comes With Them](https://hostdefi.com/guides/pumpfun-launch-risk-profile/)
  Bonding-curve launchpads price a token before any DEX pool exists, disable mint and freeze by design, and migrate liquidity at graduation. What that standardization protects you from, which dangers it leaves untouched, and what to check after a token graduates.
- [How to Read a Token Contract for Red Flags — the EVM Field Guide](https://hostdefi.com/guides/read-token-contract-red-flags/)
  The 60-second version is a scanner; the manual version is the explorer's contract tab. What to look for in an EVM token contract — owner privileges, mint functions, blacklists, modifiable taxes, proxy patterns — and the market-layer flags the code can't show you.
- [Reading a Solana Transaction — Inner Instructions, Balance Changes, and What Actually Moved](https://hostdefi.com/guides/reading-a-solana-transaction/)
  A Solana transaction's title is whatever the program calls it — the truth lives in the token-balance deltas and inner instructions. How to read an explorer's transaction page like an auditor: what moved, who authorized it, and which parts are costume.
- [Reading an EVM Transaction — Logs, Approvals, and What Actually Moved](https://hostdefi.com/guides/reading-an-evm-transaction/)
  An EVM transaction's 'to' field tells you which contract ran — the logs tell you what it did. How to read Etherscan like an auditor: Transfer events, Approval grants, internal calls, and the signatures that keep spending after the transaction confirms.
- [Reading a DEX Chart for Structure, Not Price — A Safety Lens](https://hostdefi.com/guides/reading-dex-charts-for-structure/)
  Forget predicting the next candle. A DEX chart read as a structural document reveals who got the supply at launch, whether the pool can absorb an exit, coordinated pump cadence, and gap risk on thin pairs.
- [Reading Holder Distribution — What Whale Concentration Really Tells You](https://hostdefi.com/guides/reading-holder-distribution/)
  Top-10 holder percentages look simple but lie constantly. How to separate LP, locker, and burn wallets from real whales, trace shared funding sources, and judge what concentration actually means for rug risk.
- [“Mint Authority Revoked” — What It Means, How It Happens, What It Doesn't Protect](https://hostdefi.com/guides/revoke-mint-authority-meaning/)
  When a scanner says a Solana token's mint authority is revoked, the supply is permanently fixed. How revocation works on-chain, why it can't be undone, and the risks it does not remove.
- [Romance & Token-Gifting Scams — The 'Gift' Engineered to Bait Your Approval](https://hostdefi.com/guides/romance-token-gifting/)
  An unsolicited token 'gift' — from a new friend, a match, or thin air — is rarely generosity. It's bait: selling the 'gift' routes you through a drainer, and accepting it confirms your wallet is active. How the gift trap works and the one move that disarms it.
- [Anatomy of a Rug Pull — The On-Chain Sequence, Step by Step](https://hostdefi.com/guides/rug-pull-anatomy/)
  A rug pull follows a predictable on-chain sequence: seed liquidity, attract buyers, then drain it. Here's each stage, the signals visible BEFORE the exit, and how to check a token before you buy.
- [The Seed Phrase Attack Surface — Every Way It Actually Leaks](https://hostdefi.com/guides/seed-phrase-attack-surface/)
  Phishing is only one door. The real attack surface on a seed phrase is every place it can be typed, stored, photographed, backed up, or spoken aloud — here's the complete map and which doors actually get used.
- [Shielded Balances and Viewing Keys — Auditable Privacy, Explained](https://hostdefi.com/guides/shielded-balances-and-viewing-keys/)
  Shielded balances hide amounts and links on-chain; viewing keys let you reveal them selectively to an auditor, exchange or counterparty. How the cryptography works, what it protects against, and where it still leaks.
- [Transaction Simulation, Explained — What Your Wallet's Preview Actually Shows (and Misses)](https://hostdefi.com/guides/signing-simulation-explained/)
  Wallet transaction previews and simulations are the last checkpoint before a signature — but a clean preview is not a safe transaction. What simulation really computes, what it catches, its four structural blind spots, and how to read one like an auditor.
- [Slippage Settings for Memecoins — Tight Enough to Protect, Loose Enough to Fill](https://hostdefi.com/guides/slippage-settings-for-memecoins/)
  Slippage tolerance is the one risk control you set yourself on every swap. What the setting actually bounds, why memecoins need different numbers than majors, and how high tolerance feeds sandwich bots.
- [What Is a Slow Rug? The Exit Scam That Takes Months](https://hostdefi.com/guides/slow-rug-explained/)
  No LP pull, no single event — insiders bleed value out steadily while the project looks alive. Why the slow rug is harder to see than the fast one, and the four tells that give it away.
- [Sniper Bots & Bundled Launches — Reading a Token's First Block](https://hostdefi.com/guides/sniper-bots-bundled-launches/)
  A token's opening seconds decide who can dump on whom. How sniper bots race pool creation, how dev-side bundles fake organic demand across many wallets, why funding trails expose them, and why a '0% dev holding' stat can be a bundled lie.
- [Solana Confidential Balances — Token-2022's Encrypted Amounts](https://hostdefi.com/guides/solana-confidential-balances/)
  Solana's Token-2022 confidential transfer extension encrypts balances and transfer amounts at the token level. How it works, what auditors can still see, why wallet support lags, and what the encrypted-compute wave adds on top.
- [How Many Tokens Launch on Solana Per Day? Real Launch Statistics](https://hostdefi.com/guides/solana-token-launch-statistics/)
  Between 20,912 and 35,663 new tokens launched on Solana's launchpads every day in early September 2026 — 151,586 in five days, measured by our own capture monitor. Who launches them, how fast, and how often tickers collide.
- [Stablecoin Depeg Risk — What Backs the Peg, and What Breaks It](https://hostdefi.com/guides/stablecoin-depeg-risk/)
  Fiat reserves, crypto overcollateralization, algorithms — each peg design fails in its own way. The early warning signs of a depeg, why wrapped stables carry bridge risk on top, and what a slipping peg means for holders versus LPs.
- [How to Swap Tokens Without KYC — the Honest Version for EVM Chains](https://hostdefi.com/guides/swap-tokens-without-kyc/)
  A non-custodial swap has no account, so there's nothing to KYC — connect a wallet you already hold and the trade settles on-chain. The honest boundaries: pseudonymous isn't anonymous, fiat ramps are where identity checks legally live, and a frontend's geo-block is not the protocol's.
- [Telegram Group Impersonation — Cloned Admins, Fake Support DMs, and the Verify-Wallet Trap](https://hostdefi.com/guides/telegram-group-impersonation/)
  The most reliable crypto scam on Telegram isn't a bot — it's a person who looks like help. Cloned admin profiles, DM-first 'support,' fake verification bots, and duplicated groups: the impersonation playbook, and the habits that beat it.
- [Telegram Trading Bot Safety — Keys, Clones and the Questions That Matter](https://hostdefi.com/guides/telegram-trading-bot-safety/)
  Telegram trading bots trade custody for speed. How the key model actually works, the impostor-bot problem, and the checklist that separates a usable tool from a wallet you just gave away.
- [Token Approvals — How Wallets Get Drained and How to Revoke](https://hostdefi.com/guides/token-approval-drains-and-revoking/)
  Most wallet drains don't steal your seed phrase — they use a permission you signed. What ERC-20 approvals and SPL delegates actually grant, how Permit and Permit2 phishing works, and a practical revocation routine.
- [Token Burn Theater — Real Burns vs Burn-Address Accounting Tricks](https://hostdefi.com/guides/token-burn-theater/)
  '50% of supply burned' is one of the most repeated claims in token marketing — and one of the most gameable. Real burns vs burn-address tricks, the live-mint loophole that makes any burn decorative, and the verification that separates scarcity from theater.
- [Token Holder Counts — What the Number Means, and When It Lies](https://hostdefi.com/guides/token-holder-count-benchmarks/)
  Holder count is the most quoted and most padded metric on a token page. What different counts imply at each stage, how bot-farmed holders inflate the number, and the cross-checks that expose padding.
- [Token Impersonation — Name, Symbol and Metadata Red Flags](https://hostdefi.com/guides/token-impersonation-red-flags/)
  Anyone can name a token "USDC" — token metadata is free text, not identity. How impersonators exploit names, symbols, logos and fake socials, and why the contract address is the only name that counts.
- [Token Taxes, Transfer Fees & Slippage — Where Your Trade Actually Goes](https://hostdefi.com/guides/token-taxes-slippage-transfer-fees/)
  Buy and sell taxes, fee-on-transfer tokens and slippage tolerance decide how much of your trade actually reaches you. How these mechanics work on EVM and Solana, and how to measure the real cost before you swap.
- [The Tornado Cash Case — What It Means for Ordinary Crypto Users](https://hostdefi.com/guides/tornado-cash-case-for-users/)
  The prosecution of Tornado Cash's developer became the defining test of crypto privacy law. What actually happened, where the case stands as of August 2026, and what it does and doesn't mean for people who just use crypto.
- [How to Verify a Token's Contract Address Before You Buy](https://hostdefi.com/guides/verify-token-contract-address/)
  Anyone can launch a token with any name — only the contract address is identity. The canonical-source chain for finding the real one, lookalike-address tricks to expect, and the two-source rule that defeats them.
- [Vesting Schedules On-Chain — Verify the Cliff Before It Verifies You](https://hostdefi.com/guides/vesting-schedules-on-chain/)
  Every 'team tokens locked for 2 years' claim resolves to an on-chain fact: a vesting contract with dates and amounts, or a promise in a marketing deck. How to find the real schedule, read cliffs and linear unlocks, and spot the wallets that bypass the whole thing.
- [Wallet Drainer Scams — How One Signature Empties an Account](https://hostdefi.com/guides/wallet-drainer-scams-explained/)
  Drainers don't guess your seed phrase — they get you to sign the theft yourself. How drainer kits work, what a malicious signing prompt really contains, and the habits that make you a hard target.
- [Rugged? What to Do in the First Hour — A Practical Checklist](https://hostdefi.com/guides/what-to-do-after-a-rug/)
  A calm, ordered checklist for the hour after a rug: confirm what actually failed, revoke approvals, isolate the wallet, capture evidence before it's deleted — and why 'fund recovery' offers are a second scam aimed at you.
- [YouTube Livestream Giveaway Scams — The Deepfake 'Double Your Money' Loop](https://hostdefi.com/guides/youtube-livestream-giveaway-scams/)
  A hijacked channel, a looped keynote, and a 'send 1 get 2 back' overlay — the YouTube giveaway scam is a decade old and still printing. How the loop is built, why the deepfake upgrade made it worse, and the one rule that makes you immune.

## Features (product surfaces)
- [The API — Free Token Scanning and Trading, Machine-Readable](https://hostdefi.com/features/api/)
  The HostDeFi API exposes the same engine the app uses: a keyless free scanner, graded /v1 endpoints, x402 paid calls, embeds and badges — the docs live at /docs/api/ with the endpoints spelled out.
- [Auto Buy — Sniper Orders and Resting Buys That Fire 24/7](https://hostdefi.com/features/auto-buy/)
  Auto Buy puts your orders on HostDeFi's 24/7 engine: sniper setups on new launches, resting limit and DCA buys, take-profit and stop-loss exits — all executing while your device is closed.
- [Token Safety Badge — Embed a Graded Risk Score on Your Site](https://hostdefi.com/features/badge/)
  The HostDeFi Safety Badge puts a token's on-chain grade — A+ to F — on your own page as an SVG shield, an iframe card, or JSON. Free, keyless, no tracking, honest about ungraded tokens.
- [Crypto Bridge — Any Chain to Any Chain, No Wallet Connect](https://hostdefi.com/features/bridge/)
  Bridge BTC, ETH, SOL and more between chains through Chainflip deposit channels — send from any wallet or exchange, no connect, no wrapped tokens. Track every stage.
- [Buy Crypto with Card — USD to SOL, ETH & USDC](https://hostdefi.com/features/buy-crypto/)
  Buy Solana, ETH, USDC and more by card, Apple Pay or bank transfer — delivered straight to a wallet you own. Non-custodial on-ramp via SimpleSwap's licensed payment partners.
- [Copy Trade — Mirror a Wallet's Buys and Sells Automatically](https://hostdefi.com/features/copy-trade/)
  HostDeFi copy trading mirrors a chosen wallet's buys and sells with your funds, 24/7: pick the wallet, set the size, and the engine mirrors its trades — with your own exits on every position.
- [Create a Launch — Deploy a Solana Token for $5, Straight On-Chain](https://hostdefi.com/features/create-launch/)
  HostDeFi's create-launch deploys a Solana token straight on-chain for a flat $5 — a real Meteora pool from the first second, a disclosed keeper market-making the curve, and automatic graduation to locked DAMM liquidity.
- [Solana DCA Bot — Scheduled Recurring Buys on Autopilot](https://hostdefi.com/features/dca/)
  DCA orders on Solana: a fixed SOL amount buys the token on your schedule — every hour, every day — engine-run while you're offline. Set it once; the buys fire themselves.
- [Discover — Trending Tokens & New Launches on Solana](https://hostdefi.com/features/discover/)
  Discover is the HostDeFi home tab: pump.fun launches and Jupiter's top-organic-score movers in one feed — every row opens a tradable token sheet, one tap from the scanner.
- [Crypto Buy Button — Embed a Token Swap on Your Site](https://hostdefi.com/features/embed/)
  Add a crypto buy button to any website: pick Solana or an EVM chain, paste the generated snippet, and visitors swap without leaving your page. Free builder, live preview.
- [EVM Bridge — ETH to Solana in One Signature, via Chainflip](https://hostdefi.com/features/evm-bridge/)
  The HostDeFi EVM bridge moves native ETH from Ethereum mainnet to Solana through Chainflip vault swaps — your wallet sends straight into the vault contract, one signature, no deposit addresses or approvals.
- [EVM Markets — Discover Tokens Across the Ethereum Chains](https://hostdefi.com/features/evm-markets/)
  EVM markets is HostDeFi's cross-chain discovery feed: trending, top-volume and new tokens across the supported Ethereum chains — every card opens a chart sheet that deep-links into the swap.
- [EVM Swap Without KYC — Ethereum, Base, Arbitrum & 5 More Chains](https://hostdefi.com/features/evm-swap/)
  HostDeFi's EVM swap covers eight Ethereum-compatible chains through one WalletConnect session — no account, no KYC, same flat 1% fee, the exact transaction simulated before you sign, and the same risk-scan pairing as the Solana side.
- [Solana Honeypot Checker — Can You Actually Sell This Token?](https://hostdefi.com/features/honeypot-check/)
  Honeypot-check any Solana mint: freeze authority, mint authority and all six dangerous Token-2022 extension classes — fail-closed, so an unreadable mint never reads safe.
- [Integrate HostDeFi — Safety Badges, Buy Button, Risk API & Referrals](https://hostdefi.com/features/integrate/)
  Four ways to put HostDeFi on your site or in your product: an embeddable token safety badge, a swap buy button, a keyless risk API, and a 50–80% fee-share referral program. All self-serve.
- [Launchpad — Launch a Solana Token, One Deposit](https://hostdefi.com/features/launchpad/)
  The HostDeFi launchpad deploys your Solana token straight on-chain with one deposit — it covers the real deploy cost plus a flat $5 fee. Send it to a one-time deposit address and a real Meteora pool goes live — no wallet connect, no signature. a disclosed on-chain keeper market-makes the curve from the first second; a completed curve graduates to locked DAMM liquidity automatically.
- [Solana Limit Orders & Take-Profit Exits — Set the Price, Walk Away](https://hostdefi.com/features/limit-orders/)
  Resting limit orders and TP/SL exits on Solana: buy when the price crosses your line, sell a percentage when it does — engine-watched 24/7, fires while you're offline.
- [Trade on Monad — Monad DEX Swaps & Token Scanner](https://hostdefi.com/features/monad/)
  Swap on Monad (chain ID 143) through HostDeFi's EVM engine — connect an EIP-6963 wallet or WalletConnect, scan tokens before you buy, same flat 1% fee as Solana.
- [Solana Perpetual Futures — Long & Short with Leverage](https://hostdefi.com/features/perps/)
  Jupiter perpetuals on Solana: long or short the listed markets with leverage — on-chain positions, live market reads, a flat 1% platform fee. Geo-restricted jurisdictions apply.
- [Portfolio Tracker — Solana & EVM Positions in One Read-Only View](https://hostdefi.com/features/portfolio/)
  The HostDeFi portfolio tracker reads what your wallets actually hold — Solana plus every enabled EVM chain — with unrealized PnL, prediction positions and share cards. Read-only by design: nothing on the page can sign.
- [Prediction Markets on Solana — Trade Outcomes with SOL](https://hostdefi.com/features/predictions/)
  Buy and sell outcome shares with SOL through Jupiter's prediction API — liquidity from Polymarket and Kalshi, positions settle in USDC underneath, winnings land back as SOL.
- [Presales — Strictly-Filtered Public Launch Sales, One-Click Buy](https://hostdefi.com/features/presales/)
  The HostDeFi presales feed lists only the launch pools that pass a hard on-chain gate — whitelist provably off, sane caps, real demand, GoPlus clean — with a one-click SOL-in buy across chains.
- [Referrals — Earn 50% to 80% of Every Fee Your Link Generates](https://hostdefi.com/features/referrals/)
  HostDeFi referrals pay 50% of every trade fee, climbing to 80% on rolling 30-day generated volume — settled on-chain in the same block as the trade. Your link, your earnings ledger, no signup wall.
- [Solana Rug Checker — The Signals a Rug Pull Can't Hide](https://hostdefi.com/features/rug-check/)
  Rug-check any Solana token: freeze and mint authority, dev-wallet sell-outs, bundled launches, whale concentration and clone tickers — hard-capped risk grading, free.
- [Token Sniffer — Free Solana & EVM Token Scanner](https://hostdefi.com/features/scanner/)
  Paste any token contract for a free on-chain risk read — honeypot simulation, mint & freeze authority, holder concentration, liquidity and sanctions checks. No signup.
- [Smart Money Tracker — Proven Solana Wallets Converging on Fresh Mints](https://hostdefi.com/features/smart-money/)
  The HostDeFi smart money tracker flags Solana tokens where two or more distinct proven-wallet trees bought the same fresh mint inside two hours — the 'five wallets turn 1k into 100k' pattern, caught at the front edge and scored on a public 30x/50x ladder.
- [Solana Sniper Bot — Launch Snipes With Auto-Armed Exits](https://hostdefi.com/features/sniper-bot/)
  A Solana sniper bot that buys pump.fun launches and migrations matching your filters in seconds — then arms take-profit, break-even and timeout exits on every fill, 24/7.
- [Solana Swap — Jupiter-Routed Token Swaps with a Risk Check](https://hostdefi.com/features/swap/)
  HostDeFi's swap routes every Solana trade through Jupiter as one atomic transaction — aggregated liquidity across every major DEX, plus a built-in token risk scan before you buy. Free, no signup.
- [The Telegram Bot — Scan and Trade Solana Tokens in Chat](https://hostdefi.com/features/telegram-bot/)
  @HostDeFiBot brings the scanner and the trading engine into Telegram: paste a token to scan it, trade through a revocable signing key, and disconnect anytime — the 1% fee, in a chat window.
- [The Telegram Mini App — Non-Custodial Solana Trading Inside Telegram](https://hostdefi.com/features/telegram-mini-app/)
  HostDeFi's Telegram mini app is a non-custodial Solana trading terminal inside Telegram — a PIN-encrypted burner key that never leaves your device, Jupiter-routed swaps, scanner reads, autosell, copy-trading and sniping.
- [Trenches — the Early-Launch Trading Terminal on Solana](https://hostdefi.com/features/trenches/)
  Trenches is HostDeFi's launch-radar terminal: pump.fun launches the moment they appear, live GeckoTerminal charts, a device-local burner wallet, and one-tap buys through Jupiter or the bonding curve.
- [The HostDeFi Wallet — Email Signup, Enclave Keys, Zero Popups](https://hostdefi.com/features/wallet/)
  The HostDeFi account wallet: sign up with an email and a 6-digit code, get a wallet created inside Privy's hardware enclave, deposit SOL and trade anywhere in the app with no per-trade popups.
- [Wallet Tracker — Follow Any Solana Wallet, Copy Its Trades](https://hostdefi.com/features/wallet-tracker/)
  The HostDeFi wallet tracker follows any Solana wallet and streams its swaps into a live feed — then lets you one-tap copy a buy or sell straight from the feed. Follows live on your device; no signup.
- [Trade with Your Own Wallet — Phantom & WalletConnect DEX](https://hostdefi.com/features/wallet-trade/)
  Connect Phantom or WalletConnect and trade Solana swaps, EVM swaps and cross-chain bridges from your own wallet — every transaction signed by you, no account deposit.
- [x402 RPC — Pay-Per-Call JSON-RPC for Agents Across 78 Chains](https://hostdefi.com/features/x402-rpc/)
  Machine-payable JSON-RPC at $0.002 per call on 78 chains — POST a JSON-RPC payload to rpc.hostdefi.com's x402 lane, pay in USDC, get the upstream result. No account, no API key, no monthly plan.

## Reports (monthly token-safety)
- [State of Token Safety — August 2026](https://hostdefi.com/reports/2026-08/)
  HostDeFi's monthly token-safety report for August 2026: 1,908 data-gated tokens graded from on-chain state — authority posture, grade distribution, and the first baseline of the monthly series. Reproducible from our open dataset.
- [State of Token Safety — September 2026](https://hostdefi.com/reports/2026-09/)
  HostDeFi's monthly token-safety report for September 2026: 2,086 data-gated tokens graded from on-chain state — authority posture, grade distribution, concentration, and the month's liquidity collapses. Reproducible from our open dataset.
- [Celebrity token safety grades — 11 tokens graded from on-chain state](https://hostdefi.com/reports/celebrity-tokens/)
  Is the TRUMP token safe? HostDeFi grades 11 celebrity-associated tokens from on-chain state as of 2026-09-15 — mint and freeze authority, liquidity depth, holder concentration. Dated figures, reproducible method, free to cite.

## Feeds
- [HostDeFi Research (guides RSS)](https://hostdefi.com/feed.xml)
- [New token launches (Atom)](https://hostdefi.com/recent.xml)

## Podcast
- [Crypto Scam Radar (show page)](https://hostdefi.com/podcast/)
- [Crypto Scam Radar (audio RSS)](https://hostdefi.com/podcast/feed.xml)
- [Crypto Scam Radar (video RSS)](https://hostdefi.com/podcast/video.xml)

## Machine-payable API (x402, for AI agents)
- Discovery manifest: https://hostdefi.com/.well-known/x402
- Price catalog (JSON): https://hostdefi.com/api/v1/x402/pricing
- Token safety verdict: GET https://hostdefi.com/api/v1/x402/token-risk/{chain}/{address}
- Free-form verdict: POST https://hostdefi.com/api/v1/x402/token-risk
- Batch verdicts (up to 10): POST https://hostdefi.com/api/v1/x402/token-risk/batch
- Token grade/score/liquidity history: GET https://hostdefi.com/api/v1/x402/token-risk/history/{chain}/{address}
- Deep token report in one call: GET https://hostdefi.com/api/v1/x402/token-risk/deep/{chain}/{address}
- Full due-diligence report: GET https://hostdefi.com/api/v1/x402/token-risk/report/{chain}/{address}
- Pre-graduation Solana signals: GET https://hostdefi.com/api/v1/x402/signals/solana/{mint}
- Authority quick-check: GET https://hostdefi.com/api/v1/x402/authority/solana/{mint}
- Wallet portfolio audit: POST https://hostdefi.com/api/v1/x402/portfolio
- Wallet risk-exposure read: POST https://hostdefi.com/api/v1/x402/wallet
- Trend-radar alerts: GET https://hostdefi.com/api/v1/x402/radar
- Radar alert history: GET https://hostdefi.com/api/v1/x402/radar/history
- Rug/collapse ledger (dated gate exits): GET https://hostdefi.com/api/v1/x402/obituaries
- Graded token listing per chain: GET https://hostdefi.com/api/v1/x402/listings/{chain}
- Weekly safety-snapshot dataset: GET https://hostdefi.com/api/v1/x402/datasets/safety-snapshot
- Fresh token launches with safety pre-reads: GET https://hostdefi.com/api/v1/x402/launches?chain={chain}&limit={n}
- Tracked Polymarket markets: GET https://hostdefi.com/api/v1/x402/predict/markets
- Polymarket market odds history: GET https://hostdefi.com/api/v1/x402/predict/history?marketId={id}
- Buy a 30-day API key with one x402 payment: POST https://hostdefi.com/api/v1/x402/keys
- x402 provider-risk grade (vet a seller before paying it): GET https://hostdefi.com/api/v1/x402/provider-risk?resource={url}
- x402 provider-risk full dataset: GET https://hostdefi.com/api/v1/x402/provider-risk/all
- Executable EVM swap quote (ready-to-sign tx, non-custodial; 1% native-coin fee priced in): GET https://hostdefi.com/api/v1/x402/swap/evm/quote?chainId={id}&sellToken={addr|native}&buyToken={addr|native}&sellAmount={baseUnits}&taker={addr}
- EVM swap price preview: GET https://hostdefi.com/api/v1/x402/swap/evm/price?chainId={id}&sellToken={addr|native}&buyToken={addr|native}&sellAmount={baseUnits}
- Metered JSON-RPC call through the chain relay: POST https://hostdefi.com/api/v1/x402/rpc/{chain}
- Payment: x402 v1 + v2 dual-stack, USDC per call (Solana; Base/Polygon/Arbitrum/Avalanche offered where available); charge-on-success only.
- MCP server (streamable HTTP, x402-paid tools): https://hostdefi.com/api/v1/mcp
- Free tier + keys: https://hostdefi.com/docs/api/ · OpenAPI: https://hostdefi.com/api/v1/openapi.json
- Agent card: https://hostdefi.com/.well-known/agent.json

## Notes
- Risk grades derive from observable on-chain signals, not editorial opinion.
- Every published market figure is computed from a dated snapshot and labeled "as of".
- Not financial advice.