Rug Check Solana: 7 Tools Tested & 12-Point Workflow (2026)

A rug check Solana is the on-chain due-diligence pass you run before buying a memecoin: scan the token mint, the liquidity pool, the holder distribution, and the deployer's history to figure out whether the project is a scam waiting to happen — or just a long-shot that might actually 10x. Done in 60 seconds, it filters out 80%+ of the obvious rugs that drain retail wallets every week. Done badly, it gives you a fake green light right before the dev pulls liquidity.

The problem is that nobody actually agrees on what "passing" a rug check means in 2026. RugCheck.xyz says one thing. GMGN's risk dashboard says another. Birdeye's holder map disagrees with both. And the honest answer is that no single tool catches every pattern — you need a layered workflow, and you need to know what each tool is blind to. This guide tests the 7 rug check tools that actually matter on Solana, walks through a 12-point checklist you can run on any token in under a minute, and explains the real reason most retail traders lose money even when their rug checker says "low risk".

A Solana rug check reads the token's on-chain state and answers four questions: can the team mint more supply, can they freeze your wallet, is the liquidity locked, and is the holder map natural or staged. Everything else — Twitter check, Telegram check, dev wallet history — is layered on top of those four core signals.

The four core signals every Solana rug checker scores against:

• Mint authority. If it's not revoked, the dev can print unlimited supply at any moment and dump it into the pool. Should be null. Tools flag it as "freeze authority disabled" or "mintable: false".
• Freeze authority. If it's not revoked, the dev can freeze your wallet so you literally can't sell. Should be null on any non-stablecoin Solana SPL token.
• LP status. Liquidity pool tokens should be either burned (sent to a dead address) or locked in a verifiable program. If 100% of the LP is in a wallet the dev controls, they can pull it the second they want.
• Holder distribution. Top 10 wallets should hold under ~25-30% combined (excluding the LP and burn addresses). Bundled buys at launch — 5-15 wallets that funded from the same source and bought in the first block — are the modern soft-rug fingerprint.

Everything past those four signals is interpretive. Top holder concentration of 35% can be a CEX wallet (fine) or 17 sniper wallets pretending to be diverse holders (very not fine). The on-chain data tells you what; only context tells you why. That's why every rug checker eventually wraps the raw signals in a "score" — and why every score is wrong some of the time.

A clean rug check Solana result rules out the obvious technical scams (mintable supply, frozen sells, unlocked LP). It does not rule out the four ways most Solana memecoins actually take retail money in 2026:

• Slow rug. Dev sells small amounts every hour for two weeks. Chart bleeds 90%, no single dump, no rugcheck flag. Holder count stays flat or grows because new bag-holders refill the floor.
• Soft rug. Project ships nothing, dev disappears for a month, narrative dies. Token wasn't a scam — it was just a weekend pump dressed up as a roadmap. Liquidity stays in place; price still goes to zero.
• Bundled launch. Dev funds 12 wallets through fresh accounts, has them buy in the first block, then dumps them gradually. Holder map looks fine on paper. Bubblemap shows the truth.
• Honeypot via sell tax. Rare on Solana SPL tokens (which don't have native transfer hooks the way ERC-20s do), but increasingly common on Token-2022 with transfer fees set to 99%. RugCheck and Birdeye don't always parse the Token-2022 extensions correctly.

This is why every serious Solana memecoin trader pairs a rug checker with at least one wallet-level tool. The token data tells you whether the contract is rigged; the wallet data tells you whether the people behind it have rugged before. We covered the wallet-side workflow in our Solana wallet tracker comparison — that's the second half of the same workflow.

We ran the same 12 tokens (4 obvious rugs that already pulled, 4 "live" memecoins on a launchpad, 4 mid-cap survivors) through every tool below and scored them on (1) accuracy on the known rugs, (2) signal quality on live tokens, (3) speed, and (4) cost. None are perfect. The differences matter.

RugCheck.xyz is the default first-pass on Solana. Paste a mint, get a Good / Warning / Danger badge with a numeric score, plus the four core signals (mint authority, freeze authority, LP status, top holder %). It's free, fast (~1 second), and the API is the most-integrated rug check in the Solana ecosystem — most Telegram bots and trading terminals embed RugCheck data in their token panel.

Where it's strong: catching mintable / freezable tokens, surfacing locked-vs-burned LP status, flagging top-holder concentration above ~20%. Where it's weak: it does not visualize wallet clusters, so a clean-looking holder map of "30 wallets each holding 1-3%" can pass even when all 30 wallets share a single funder. RugCheck users learn to treat the green badge as "no obvious technical scam", not "safe to ape".

Bubblemaps is the only tool on this list that visualizes wallet relationships. It draws every holder as a circle and connects circles whose wallets transferred SOL or tokens to each other. The result is a literal picture of whether the holder distribution is organic (lots of unconnected bubbles) or staged (one big cluster of bubbles all linked back to a single funding source).

This is the single best tool for catching bundled launches — the modern soft-rug pattern where a dev funds 8-15 wallets through fresh accounts and buys their own token in the first block to fake organic interest. RugCheck shows "decentralized holders, score 85". Bubblemaps shows the dev wallet linked to 12 of the top 15 holders. Use both, always.

GMGN is a Telegram + web terminal that bundles its own rug check into every token chart. The differentiator is the dev wallet panel: it tracks how much SOL the deployer has pulled out since launch, every transaction, and links to the deployer's history of past tokens (most rug devs are repeat offenders). For active traders, the dev-history view is more actionable than RugCheck's static score because slow rugs show up as "dev sold 18% of supply across 47 transactions" not as a single red flag.

We covered the full GMGN feature set in our GMGN review — the rug check is genuinely good, the trading fees are the catch (1% per trade plus the spread on smaller pairs).

Birdeye Security is the dashboard most institutional desks use because it's the cleanest data presentation on Solana. The token security panel scores: mint authority, freeze authority, LP burn %, holder concentration, and a "trust score" derived from age + volume + holder growth. Best for mid-cap tokens (>$1M MC) where the noise level is lower and where the holder map is too big for Bubblemaps to render cleanly.

Weakness: Birdeye lags on brand-new launches under a few hours old — its index sometimes doesn't have the holder map populated for the first ~10 minutes, exactly the window where memecoin sniping happens.

Solsniffer's pitch is the numeric "Sniff Score" out of 100, broken into 12 sub-checks (token program, freeze authority, LP risk, holder concentration, etc.) with a one-sentence explanation per check. Useful when you want to show somebody else why you didn't ape into a token — the breakdown is the most readable on the market. Less useful as a daily scanner because the score weights are opaque (a 60/100 from Solsniffer doesn't map cleanly to RugCheck's risk levels).

De.Fi (formerly DeFiYield) Scanner is a multi-chain rug checker. The Solana coverage is decent but not best-in-class — De.Fi's strength is comparing the same token across Ethereum, BSC, Base, and Solana, which only matters if you trade multi-chain. For Solana-only memecoin traders, RugCheck + Bubblemaps covers everything De.Fi does and more.

GoPlus is the rug check most copy-trading bots, Telegram bots, and trading terminals use under the hood because the public API is free and well-documented. If you're building automation, GoPlus is the right primitive. As a manual checker it's clunkier than RugCheck, but the underlying data overlaps ~80%.

The fastest rug check Solana workflow that actually works in 2026 is a layered scan: run RugCheck for the technical signals, Bubblemaps for the holder map, GMGN for dev history, then read the Twitter / Telegram with skepticism. Twelve checks, ~60 seconds, in this order:

1. Mint authority revoked. Must be null. RugCheck shows "Mintable: No". If yes, dev can print supply — instant skip on memecoins.
2. Freeze authority revoked. Must be null. If the dev can freeze your wallet, you can't sell. Stablecoins and CEX tokens legitimately keep this; memecoins should never.
3. LP burned or locked. Burned (sent to dead address) is the strongest signal. Locked through a verifiable program (Streamflow, Bonfida) is acceptable. LP held in a wallet the dev controls is a hard skip.
4. Top 10 holders < 25%. Excluding the LP, burn, and known CEX wallets. Above 25%, you're betting on the goodwill of one or two whales. Above 40%, you're the exit liquidity.
5. Bubblemap is dispersed, not clustered. Pull up the token on Bubblemaps. If 8+ of the top 20 wallets are linked together, walk away — that's a bundled launch.
6. Dev wallet holds < 5% of supply. GMGN's dev panel shows current holdings + sells. If the dev still has 30%, they will sell on you eventually.
7. Dev's last 5 tokens. GMGN links to the deployer's history. If their last 5 tokens went to zero in under 24 hours, this one will too.
8. Sniper count < 30%. First-block buyers (snipers) are not investors — they're buying to dump on retail. RugCheck and GMGN both show sniper %.
9. Volume / market cap > 0.1. Real interest leaves real volume. Tokens with $5M MC and $50k daily volume are almost always ghost tokens propped up by 5-10 wallets.
10. Liquidity / market cap > 5%. Pools where LP is < 2% of MC are paper bid — a single $20k sell will wipe the chart.
11. Token age > 24 hours. Most rugs happen in the first 4 hours. Filtering everything younger than a day cuts your hit rate but also your loss rate.
12. Twitter / Telegram is real. Look for sustained engagement, not 4-hour spikes from raid groups. Most memecoin Twitter accounts are auto-followed by the same farm of 5-10k bot accounts; check the replies, not the follower count.

If a token clears all 12, you have a token that could moon — not one that will. Most high-quality opportunities pass 10-11 of 12, not all 12, so use judgment on the last two. The first 6 are non-negotiable.

The five rug patterns that drained the most Solana memecoin wallets in 2025-2026 — and the rug-check signature each one leaves:

Pattern: dev funds 10-15 wallets through fresh accounts (often via a CEX → throwaway → throwaway → buy-wallet chain) and has all of them buy in the first 1-2 blocks to fake organic interest. Token pumps 5-20x in the first hour as retail FOMOs in. Bundled wallets sell into the green.

Signature: Bubblemap shows a tight cluster of 10-20 holders all funded from the same root wallet within minutes of each other. RugCheck score might still be 80+. This is why Bubblemaps is mandatory for any token under 24 hours old.

Pattern: dev keeps a 15-30% bag at launch, doesn't pull LP, sells in small chunks (0.1-0.5% of supply per transaction) every few hours for two weeks. Chart bleeds 90%, no single dump, no obvious rug. Most retail bag-holders blame "the market" and refuse to admit they got played.

Signature: GMGN's dev panel shows 50-200 small dev sells over the article window. RugCheck doesn't flag it because no individual transaction is large enough to trip the threshold.

Pattern: dev launches a Token-2022 token (the new SPL standard with native fee extensions) and sets the transfer fee to 99%. Buyers can buy normally; sellers receive 1% of what they tried to sell. Functionally identical to an ERC-20 honeypot.

Signature: Token mint shows Token-2022 program ID, not the standard SPL Token program. RugCheck flags Token-2022 transfer fees in 2026; older tools may miss it. When in doubt, simulate the sell with a tiny test trade first.

Pattern: dev sells their bag at the top, waits for retail panic, buys back at the bottom, then pumps again to dump on the second wave of retail. Pure emotional manipulation, technically not a rug because the LP stays in place.

Signature: GMGN dev panel shows the deployer's net position is still ~original size after a 70% drawdown. The dev didn't actually exit — they just shook out weak hands.

Pattern: dev launches with a polished website, fake VC names, fake KOL endorsements, and a 6-month "roadmap". Token pumps on the narrative, dev disappears two weeks after launch. Liquidity stays, but nobody trades anymore.

Signature: cannot be caught by an on-chain rug check. The only filter is: if the team is anonymous and the marketing is too polished to be organic, treat it as a soft-rug candidate by default.

Even traders who run a perfect 12-point rug check Solana workflow on every token they touch usually lose money on memecoins. The math is brutal: if you ape into 50 tokens that all pass the rug check, ~15 will moon, ~10 will trade flat for a week, and ~25 will still bleed 80-90% over a month. The rug check eliminates the technical scams — it does not solve the base rate of memecoin failure, which is somewhere around 90%+ on a 30-day horizon.

Two things break the math:

• Position sizing. If your average winner is 5x and your average loser is -90%, you need a hit rate above ~18% just to break even. Most retail traders are below that — not because they pick badly, but because they size badly (too much in losers, too little in winners).
• Selection bias. Tokens that pass a rug check are still being picked from a pool that's 90%+ noise. The rug check moves you from "definitely going to lose" to "probably still going to lose, just slower". The actual edge isn't in the filter — it's in finding traders who already filtered.

This is the case for Solana copy trading over manual sniping: instead of running a rug check on every new token, you copy the wallet of a trader whose 12-month on-chain PnL is verifiable. They've already done the rug check. They've already done the position sizing. They've already eaten the losses on the bad picks so you don't have to learn that lesson with your money.

Both approaches have a place, and they solve different problems on Solana:

The 70/30 split mirrors the same logic we used in our copy trading for beginners piece: the bankroll layer is automated and proven, the alpha layer is your own picks where rug-checking matters most. Copy trading scales linearly with bankroll; manual sniping scales with hours. Most retail traders only have one of those.

Tokens launched directly from Solana launchpads like pump.fun, LetsBonk, and Raydium LaunchLab inherit some safety properties by construction:

• Mint and freeze authority. Always revoked at launch on pump.fun and LetsBonk (the launchpad enforces it). RugCheck score is auto-good for the first two checks.
• LP status. The bonding curve is the LP for tokens that haven't graduated. Once they graduate to Raydium, the LP is auto-burned by the launchpad — no dev can pull it.
• Holder distribution. This is where launchpad tokens still rug. Devs and bundled wallets can still snipe their own bonding curve in the first second of launch, accumulate 30-50% of supply at near-zero cost, then dump as retail buys.

The implication: for launchpad tokens, only checks #4-#8 from the 12-point list actually matter (holder distribution, bubblemap, dev holdings, dev history, sniper count). Everything else is structurally guaranteed by the launchpad. We covered the deeper economics of each launchpad in our solana launchpad comparison — the safety profile differs more than people realize.

For pump.fun specifically, the snipe-by-dev pattern is so common that pump.fun trading bots now bundle a dev-snipe filter as a standard option — auto-skip any token where the deployer wallet bought in the first block. That single filter alone removes ~40% of the worst rugs without any manual work.

The strongest rug-check workflow in 2026 isn't manual — it's a copy trading bot that runs the rug check automatically on every trade your followed traders enter, and skips trades that fail the filter. uwuu's copy trading bot wraps the GoPlus + RugCheck APIs so each followed trade is filtered through:

• Hard filters. Token must have mint and freeze authority revoked, LP must be burned or locked. Any trade where this fails is skipped silently.
• Holder concentration filter. Configurable threshold (default: skip if top 10 holders > 35% excluding LP). Most users tighten this to 25% after a month of usage.
• Token-2022 fee filter. Skip any token with a transfer fee > 5%. Catches the new honeypot pattern that older bots miss.
• Token age filter. Optional — some users want to copy first-block snipes, others want to skip anything younger than 1 hour. Both are configurable.

This is meaningfully different from manual trading on a terminal. A manual trader runs the rug check once before entering, then has to sit in front of the screen to manage the exit. A copy trading bot runs the rug check on every single trade the followed wallet makes — for the entire duration of the copy session — and applies the same filters consistently across hundreds of trades. The math compounds.

The trade-off: you give up the ability to override the bot when you "feel" a token is going to moon. In our experience that's a feature, not a bug — feelings are the most expensive input in memecoin trading.

What is a good RugCheck score on Solana?

RugCheck scores from 0-100; anything 80+ is "Good", 50-79 is "Warning", below 50 is "Danger". A Good score means the four core technical signals (mint authority, freeze authority, LP status, holder concentration) all pass. It does not mean the token is safe — it means there's no obvious technical scam. Always pair the score with a Bubblemap check for clustered wallets and a GMGN dev-history check.

Can a token rug after passing every rug check?

Yes, and it happens often. Slow rugs (dev sells in small amounts over weeks) and soft rugs (project ships nothing, narrative dies, liquidity stays) cannot be caught by any rug-check tool because they don't trip on-chain thresholds. Roughly 60-80% of memecoin losses on Solana come from slow rugs and narrative deaths, not from hard rugs. The only defense is position sizing and exit discipline.

What's the best free Solana rug checker?

RugCheck.xyz for the score, Bubblemaps for the holder cluster check, and GMGN for the dev-wallet panel. All three are free for the basic functionality you need. Use them in that order — RugCheck takes 1 second, Bubblemaps takes 5 seconds, GMGN takes 10 seconds. Sixty seconds total for a full check.

Do copy trading bots run rug checks automatically?

Good ones do. uwuu's copy trading bot runs RugCheck and GoPlus filters on every trade your followed traders enter, with configurable thresholds for mint authority, freeze authority, LP status, holder concentration, and Token-2022 transfer fees. Trades that fail the filter are skipped silently. Most Telegram-only trading bots do not run rug checks by default — that's the user's responsibility.

Are pump.fun tokens safer because they're launched from a launchpad?

Partially. pump.fun and other launchpads enforce mint and freeze authority revocation, and burn the LP automatically when a token graduates to Raydium. That eliminates two of the four core scam vectors. The remaining risks — bundled launches, dev snipes, holder concentration — still apply, and pump.fun is actually the worst chain for those because the bar to launch is so low.

What's the difference between a rug pull and a slow rug?

A rug pull is a single transaction (usually liquidity removal) that wipes the chart in seconds. A slow rug is the same outcome — your bag goes to zero — distributed across hundreds of small dev sells over days or weeks. Hard rugs trip rug-check tools instantly; slow rugs are invisible to most tools because no individual transaction is suspicious. Always check the dev wallet's cumulative outflow over time, not just the latest transaction.

How do I rug-check a token under 1 minute old?

Most rug-check tools have indexer lag of 30-90 seconds on brand-new tokens. For first-minute snipes the only reliable check is the launchpad guarantee (mint/freeze revoked, LP burned on graduation) plus the deployer's prior history. If you're sniping under 1 minute, you're betting on the deployer's track record more than the token itself — which is exactly why following a proven sniper wallet via copy trading outperforms first-block sniping for most retail traders.