Methodology · Token risk
How HostDeFi rates token risk
Every risk score on HostDeFi comes from the same automated screen: a set of on-chain and market signals read at the moment you check, weighed together into a rating and a list of specific flags. This page explains what those signals are — and, just as importantly, what a score can't tell you.
The signals
Contract authoritiesWhether the token's mint authority and freeze authority are revoked or still live. A live mint authority means supply can be inflated at will; a live freeze authority means your tokens can be locked. Revoked authorities are the baseline of a token that can't be rugged by its own contract.
Liquidity depth and statusHow much real liquidity backs the token, how it's split across pools, and whether pool tokens are burned or locked. Thin or unlocked liquidity is the single most common exit route in a rug pull.
Holder concentrationWhat share of supply sits with the top holders and the deployer, and whether early buys cluster in ways typical of sniper rings or insider allocations. Concentrated supply means a few wallets can move the price at will.
Deployer and team-wallet behaviorThe deploying wallet's history: prior token launches, funding trails, and whether team-linked wallets have been distributing into buyers.
Trading-pattern checksSell-side simulation to catch honeypots (tokens you can buy but not sell), abnormal buy/sell taxes, and volume patterns consistent with wash trading rather than organic interest.
Metadata and ageToken age, naming that impersonates established projects, and whether the basic metadata checks out. Very new tokens with borrowed names score cautious by default.
Data sources
Signals are read from public on-chain data on the token's own network, combined with live market data (prices, liquidity, and volume) from public market-data providers. Scores reflect the state of the token at the time of the check — liquidity can be pulled and authorities can change after you look, which is why the timestamp matters.
What a score can't tell you
A risk score is a screen, not a guarantee. It catches the mechanical patterns of past scams; it cannot prove a team's intentions, and new scam designs appear constantly. A clean score means no known red flags were visible at check time — not that a token is safe.
HostDeFi's ratings are informational tooling, not an audit and not financial advice. Never trade more than you can afford to lose, and treat every new token as risky regardless of its score.