How to Check a Smart Contract Before You Trust It With Money

Most people who get rug-pulled didn't get outsmarted by genius code. They skipped five minutes of free, non-technical checks because the chart was green and the group chat was loud. You can avoid the majority of disasters without reading a single line of Solidity. Here's the routine.

1. Is the contract even verified?

Open the token's contract on a block explorer. The first thing to look for: is the source code verified (publicly published and matching what's deployed)? Unverified code on something asking for your money is an instant pass. You don't trust a restaurant that won't let anyone see the kitchen.

2. Who holds the supply?

Explorers show the holder distribution. Red flags:

• One or two wallets holding a huge percentage of the supply. That's a single person who can dump on everyone.
• The "team" or "deployer" wallet holding the lion's share with no lock.
• A tiny number of holders overall, despite loud claims of a big community.

Healthy projects look spread out. Traps look concentrated. This is the on-chain version of the homework in how to research an altcoin before you buy it.

3. Is the liquidity locked?

For a new token, check whether the trading liquidity is locked in a time-lock contract. If it isn't, the team can pull the liquidity at any moment and leave you holding a token you can't sell for anything. Locked liquidity isn't a guarantee of honesty, but unlocked liquidity is a guarantee of risk.

4. Can you actually sell it?

Some tokens are honeypots — engineered so you can buy but never sell. The code quietly blocks ordinary holders from selling while letting insiders cash out. You don't have to spot this by hand: paste the contract into a reputable token-scanner tool, which simulates a buy and a sell and flags whether selling is blocked, whether the tax is absurd, or whether the owner can mint unlimited new tokens.

5. Read the audit — and the date

If there's an "audited" badge, find the actual report. Check three things: who did it, what they actually reviewed, and when. An audit of an old version, or one that lists serious unresolved findings, is a badge with no substance. And remember — an audit lowers the odds of certain bugs; it never certifies that the humans behind the project are honest.

6. Who can change the rules?

Look for owner privileges: can a single address pause trading, change taxes, mint new supply, or blacklist wallets? Some control is normal early on, but unlimited, unrenounced power over a "decentralized" token is a person holding a kill switch over your position.

The five-minute habit

Verified code. Spread-out holders. Locked liquidity. Sellable in a scanner. A real, recent audit. Limited owner powers. None of it requires technical skill — just the discipline to run the checklist before you click buy, when it's boring, instead of after, when it's a screenshot in a "got rugged" thread. The projects worth your money will pass these checks easily. The ones that get angry that you asked are answering the question for you.