Solana Security Indicators

📘

This page documents the advanced security checks the Scanner API performs on Solana tokens. Solana tokens often include authorities and extensions that can impact security and decentralization. The Scanner API extracts and evaluates these to help identify risks such as mintability, freeze authority, pausable transfers, mutable metadata, transfer taxes, and frozen accounts.

Indicators

IndicatorDescription
honeypot.scoreScore that the token behaves like a honeypot (e.g., can’t sell, heavy traps). 0-100. Higher = more likely.
honeypot.messageHuman-readable explanation of the honeypot assessment.
renouncedWhether token ownership is effectively revoked.
mintableWhether new tokens can be minted by an authority.
metadata_mutableWhether token metadata (name, symbol, URI) can still be changed.
drainableWhether a delegate/permanent authority can move funds (drain risk).
freezableWhether accounts can be frozen by a freeze authority.
pausableWhether transfers can be paused.
transfer_pausedWhether transfers are currently paused.
creator.addressDetected token creator address.
creator.balanceCreator’s current token balance.
top_accounts_frozen[]List of top holders whose token accounts are frozen.
pausableTransfers can be paused by an authority.
transfer_pausedTransfers are currently paused.
tax.pctTransfer fee percentage currently in effect.
tax.max_amountMaximum fee charged per transfer (in token units).
locked_liquidity[].pair_addressAddress of the liquidity pool.
locked_liquidity[].total_lockedTotal percent of LP locked/burned for that pool.
locked_liquidity[].locks[].percentagePercent covered by this lock entry.
locked_liquidity[].locks[].typeLock type (e.g., burn, vested).
holder_countTotal number of holders.
top_holders[]Largest holders snapshot.
authorities.mint_authorityCurrent mint authority (if any).
authorities.freeze_authorityCurrent freeze authority (if any).
authorities.update_authorityMetaplex update authority (metadata control).
authorities.pause_authorityCurrent pause authority (if any).
authorities.transfer_fee_config_authorityAuthority that can change transfer-fee config.
authorities.withdraw_withheld_authorityAuthority that can withdraw withheld fees.
authorities.transfer_hook_authorityAuthority for custom transfer hooks (code on transfer).
authorities.delegate_authorityPermanent delegate with spending abilities.
authorities.mint_close_authorityAuthority that can close the mint.
authorities.metadata_pointer_authorityAuthority controlling metadata pointer.