What the checks mean
Every token you send gets the same checks. Here is what each one looks for, how scammers use it against buyers, and what you see in the bot.
✓ fine · ⚠ worth knowing · ✗ a problem. One ✗ makes a token 🔴 high risk.
Honeypot
A token contract built to attract buys and block sells. You can swap into it, but when you try to sell, the transaction fails. Only whitelisted wallets, usually the creator's, can sell.
The trap: the chart only goes up, because almost nobody is able to sell. That rising chart is the bait.
In the bot: ✓ sellable, or ✗ can't be sold (honeypot).
Sell tax
A fee the contract takes every time someone sells. A small tax of a few percent can be legitimate, for example to fund development or add to the liquidity pool.
The trap: a tax of 90 to 100%. Technically you can sell, but the contract keeps almost everything. Some contracts let the owner raise the tax after launch.
In the bot: ✓ no tax · ⚠ tax up to 10% · ✗ tax above 10%.
Mint rights
The power to create new tokens. Many solid projects have it: emissions on a fixed schedule, controlled by governance or a multisig, are normal.
The trap: an anonymous owner mints a huge amount of new tokens and sells them into the market, which dilutes everyone else's holding toward zero.
In the bot: ⚠ owner can mint, for tokens listed on CoinGecko or major exchanges. ✗ for unknown tokens. Minting alone doesn't stop a token from being 🟢. The circulating share and supply growth show up under Tokenomics.
Freeze rights
The power to freeze a wallet so it can't move or sell the token. Big stablecoins like USDC and USDT have it, to comply with sanctions and court orders.
The trap: on an unknown token, the owner can freeze buyers' wallets while selling their own.
In the bot (Solana): ⚠ freeze authority active, for tokens on major exchanges. ✗ for everything else.
Hidden owner and other owner powers
A contract can look "renounced", with no owner in control, but keep a backdoor: a hidden owner role, or functions that change balances, block selling or destroy the contract.
The trap: long after launch, the creator uses the backdoor to change the tax, mint tokens or switch on a honeypot.
In the bot: ✗ hidden owner · ✗ owner can change balances · ✗ can't sell all · ✗ contract can self-destruct. For tokens on major exchanges these show as ⚠, but a token with any of them is never 🟢.
Locked liquidity
The pool that makes trading possible (the token paired with ETH, SOL or a stablecoin) is locked in a time-release contract, so the creator can't pull it out.
The trap: if the pool isn't locked, the creator can withdraw it in one transaction (a rug pull), and the token can't be traded anymore. A lock can also be faked: locked for only a day, or only a small part of the pool.
In the bot: ✓ LP locked 50% or more, ✗ below. Only checked for tokens that aren't listed on CoinGecko or major exchanges. For listed tokens, trading doesn't depend on one pool.
Top 10 holders
How much of the supply the ten largest wallets hold. Exchange, pool and contract wallets can be part of this number, so a high share isn't always one person.
The trap: a few insiders hold most of the supply and sell at once. The price drops faster than anyone else can get out.
In the bot: ✓ or ⚠ top 10 hold X%. A memecoin where the top 10 hold more than 50% is 🔴. A project above 60% can't be 🟢.
Liquidity: could you get out?
How much money sits in the trading pools. It decides whether you can sell your position without crashing the price.
The trap: a big market cap with almost no liquidity behind it. On paper you're up; in reality there's no one to sell to.
In the bot: ✗ liquidity under $10k (hard to exit) · ⚠ under $50k. If a token trades mainly on exchanges or other chains, thin pools on one chain don't count against it: ✓ on major exchanges, or ⚠ trades mainly elsewhere. 🟢 needs at least $100k in DEX pools or a major exchange listing.
Brand new tokens
Most rug pulls happen in the first days, before anyone has had time to look.
In the bot: ✗ launched under 7 days ago. Memecoins younger than 30 days are 🔴 too.
What the checks can't do
These checks catch the common traps, not all of them. A passed check is not a guarantee, and new tricks appear all the time. The data comes from public sources (GoPlus, RugCheck, DexScreener, CoinGecko, DefiLlama) and can be wrong or late.
Scan My Bags is automated research, not financial advice and not a recommendation to buy, hold or sell.