How to check a token before you buy: a seven point checklist

On any open blockchain, anyone can create a token in minutes. Most new tokens are harmless experiments, some are serious projects, and some are built to take buyers money. You cannot tell them apart from the logo or the hype, but you can learn a lot from the contract and the chain in a few minutes. Here is the checklist we use. No single point proves a token is safe; together they show you where the risks are.

1. Is it the right contract?

Start with the address, not the name. Copy it from the project official channels and compare it with the token you are about to buy. Copies of popular tokens with the same name and symbol appear all the time.

2. Who owns the contract?

Many token contracts have an owner, an address with special powers. If ownership has been renounced, nobody holds those powers any more. If an owner exists, find out what it can do. An owner is not automatically bad, but you are trusting that address.

3. Can the code be changed?

An upgradeable proxy lets someone replace the code behind the token after you buy. That is useful for some legitimate projects and dangerous in the wrong hands, because the rules of the token can change overnight. If a token is upgradeable, check who controls the upgrade.

4. Does it have risky functions?

• Mint: new tokens can be created, diluting holders.
• Fee or tax setters: the cost of buying or selling can be raised, sometimes to 100%.
• Blacklists or pauses: transfers from some or all wallets can be blocked.
• Max wallet or max transaction limits that the owner can change.

5. How are the holders spread?

If a few wallets hold most of the supply, they can crash the price by selling. Look at the top holders and ignore the ones that are clearly not people, such as the liquidity pool, a burn address or a lock contract. A bubble map that links wallets which sent tokens to each other helps reveal one owner hiding behind many addresses.

6. Is the liquidity real and locked?

Liquidity is what you sell into. Check how much there is: a token with very little liquidity can show a high price that you could never actually sell at. Then check whether the liquidity pool tokens are locked, for how long, and by whom. Unlocked liquidity can be pulled out at any moment, leaving holders with a token nobody can buy. Our guide on token locks explains how to verify a lock.

7. Can you actually sell?

The final test is a simulated sale: the chain is asked what would happen if you sold a small amount right now, without sending a real transaction. If the simulation fails, or the amount you would receive is far below the quote, you are probably looking at a honeypot or a heavy sell tax.

Doing it in one place

The PEPU BANK Token check page reads all of these points from the chain for a token address: owner, upgradeable proxy, risky functions, holders, liquidity and a sell simulation. It is a starting point, not a guarantee. A token can pass every check and still lose its value, because price depends on people, not only on code.