1. Deployer Wallet History
The wallet that deployed a token tells you everything about its creator. If that wallet has launched five other tokens that all went to zero, you are looking at a pattern.
Most retail investors never check this. They look at the contract, they look at Twitter, they look at Telegram — but they skip the one thing that actually predicts behavior: what the deployer did before.
Serial ruggers use the same wallets repeatedly because creating new infrastructure is expensive. Checking deployer history takes 30 seconds and catches 60% of obvious rugs before you lose anything.
2. Unlocked Liquidity
Locked liquidity means the developer cannot pull the pool and run. Unlocked liquidity means they can exit at any time.
Always verify the lock duration and the platform where it is locked. Common lock platforms include Team.Finance, Unicrypt, and PinkLock.
⚠️ "Renounced" is not the same as locked
Contract renouncement means the owner gave up admin rights. But liquidity can still be unlocked and drained. Always check both separately.
3. Honeypot Code
Honeypot tokens let you buy but block sells through code embedded in the smart contract. You will not see it in the UI. You will not see it on the price chart.
You will only discover it when you try to sell and the transaction fails — or succeeds but sends your tokens to a black hole address.
Honeypot detection requires simulating a sell transaction against the contract code. This is not something you can do manually on Etherscan. You need a dedicated scanner.
4. Concentrated Holder Distribution
If the top 10 wallets control more than 50% of the supply, a coordinated dump can crash the price instantly.
Watch out for "shadow wallets" — multiple addresses controlled by the same entity, designed to fake decentralization. They show up as different holders but move in sync.
Healthy token distribution means no single entity has enough to move the market unilaterally. As a rule of thumb, no single wallet should hold more than 5% of supply for a new token.
5. No Audit, No KYC, No Credibility
Anonymous teams launching unaudited contracts are not automatically scams. But they are significantly higher risk.
A verifiable team and a reputable audit (CertiK, Hacken, PeckShield) cut that risk substantially. Look for audit reports linked directly from the project website — not just claims in a Telegram group.
Check All 5 Factors in One Scan
TokenGuard AI analyzes deployer history, liquidity locks, honeypot patterns, holder concentration, and contract code automatically. Free, no sign-up required.
Scan a Token Free →More ArticlesNFA. DYOR. TokenGuard AI is one data point in your research, not financial advice.