Rug Pull Checklist: 10 Pair Explorer Checks to Avoid Scams

Rug pulls are the cheapest scam in crypto to run and the most expensive to suffer. Every time a new pair launches on a decentralized exchange, an anonymous deployer can flip a single contract switch and walk away with the entire liquidity pool inside one block. The only thing standing between you and that loss is the data you read on the pair explorer before you click buy.

A pair explorer is the public dashboard that every modern decentralized exchange tracker, including DEXtools, DEX Screener, GeckoTerminal, and Birdeye, exposes for any trading pair on chain. Each pair page bundles liquidity, holder distribution, transaction tape, contract source, audit results, and social signals into one screen. Used correctly, it lets you score a brand new token in under two minutes and reject ninety percent of the obvious scams.

This guide is a multi-tool ten-step pair explorer rug pull checklist. You will get the exact field to read on each platform, the safe versus dangerous threshold for each metric, the verification commands to run on Etherscan and Solscan, and a decision matrix that maps your final risk score directly to a position size. Two side by side examples close the article: a clean pair that passed every check and a textbook rug that flagged on step three.

What Is a Pair Explorer Rug Pull Checklist?

A pair explorer rug pull checklist is a fixed sequence of ten on chain checks that you perform on a trading pair page before buying a new token. Each step uses one specific tool (DEXtools, DEX Screener, GeckoTerminal, Birdeye, Etherscan, Solscan, RugCheck, GoPlus, SolSniffer, De.Fi, or Bubblemaps) and produces a numerical risk score that decides whether you skip, watch, or trade the pair, and how large the position can be.

The checklist exists because rug pulls follow patterns. Unlocked liquidity, single wallet supply, hidden tax functions, and unverified contracts appear in over ninety percent of post-mortems. Reading the same ten fields every time turns the chaotic experience of new token launches into a repeatable filter.

A Short History of Rug Pulls and Why Pair Explorers Exist

Rug pulls predate the current generation of trackers, but the introduction of Uniswap V2 in May 2020 changed the model. Anyone could deploy an ERC-20 contract, pair it with ETH, and create a public market in minutes, all without permission. The same low friction that built decentralized finance handed scammers a global launchpad. The Compounder Finance exit took ten million dollars, the Meerkat Finance pull thirty one million, and the SQUID token rug close to three million from retail buyers within hours of launch. Open liquidity, single dev wallet control, and no contract verification were visible on chain from minute one.

Pair explorers grew up in response. DEXtools launched its pair explorer in 2020 and added audit panels in 2021. DEX Screener followed with a focus on multichain coverage. GeckoTerminal layered global ranking data on the same primitives. Birdeye anchored Solana coverage. By 2026, every serious chain has at least one pair explorer with audit integration, and the question is no longer whether the data is available. It is whether you read it.

How Pair Explorers Read the Chain

A pair explorer is a read only client over an indexer. The indexer subscribes to block events from every supported chain, decodes swap, mint, burn, transfer, and ownership events, then writes them to a query store. The web frontend joins those events with token metadata, holder snapshots, third party audit results, and price feeds, then renders the pair page.

The important consequence for rug pull detection is that everything on a pair explorer page comes from the public blockchain. There is no privileged data, no insider feed, and no opinion. If a number on DEXtools says the liquidity is unlocked, you can verify the locker contract directly on the block explorer. If a holder distribution chart says one wallet owns sixty percent, you can pull the top holders list from the underlying blockchain yourself and confirm. This is what makes the checklist below testable rather than vibes based.

Anatomy of a Modern Pair Explorer Page

Every pair explorer page is built from the same five regions. Learn them on one platform and the others become trivial.

The header strip shows the trading pair, the chain, the DEX (Uniswap V3, PancakeSwap, Raydium, Orca), the contract address, the deployer address, and the pool address. Audits live on the token contract, locks live on the pool contract. Keep them straight.

The price and volume widget renders the chart, live price, twenty four hour volume, market cap, FDV, and total liquidity in USD. This is the marketing surface most beginners stop at. The checklist forces you past it. The liquidity panel shows current liquidity, locked percentage, lock contract (Unicrypt, PinkLock, Team.finance, Mudra), lock duration, and burn status. On Solana it also surfaces mint and freeze authority.

The holders and transactions panel includes total holder count, top ten holders percentage, biggest wallet percentage, dev wallet identification, transaction count, buy versus sell ratio, and unique buyer and seller counts. The audit subpanel surfaces honeypot test results, buy and sell tax, modifiable tax flag, contract verification status, and owner renounce status. The social and trending panel aggregates the website, Twitter or X handle, Telegram, trending velocity, and impressions.

The Ten Step Pair Explorer Rug Pull Checklist

This is the core of the article. Each step lists the primary tool, the exact field to look at, the safe threshold, and the immediate skip trigger. Run them in order. If a step returns a hard fail you can stop and close the tab.

Step 1. Liquidity in USD plus LP Lock Status, Duration, and Locker

Tool: DEXtools or DEX Screener pair page, liquidity panel.

Open the pair page and read the total liquidity value in USD. Under five thousand dollars is dangerous for any token because a single ten thousand dollar sell will reset the chart. Between five and twenty thousand is acceptable only for micro-cap experiments. Over fifty thousand dollars of locked liquidity is the threshold where serious traders start paying attention.

Next, locate the lock status. The pair explorer should show either a green padlock with a percentage, a burn indicator, or an unlocked warning. Click into the lock contract and verify the lock duration, which should be a minimum of six months for a serious project, and the locker identity. Trusted lockers include Unicrypt, PinkLock, Team.finance, Mudra, and on Solana the LP tokens are usually burned directly. If the lock contract is unknown or controlled by the deployer, treat it as unlocked.

Hard skip: liquidity under five thousand USD or LP unlocked with a deployer controlled withdrawal.

Step 2. Holder Count and Top Holder Percentage

Tool: DEXtools holders tab plus the underlying block explorer.

A healthy token launch should accumulate several hundred unique holders within the first day. Fewer than fifty holders after twenty four hours is either a stealth launch with insider distribution or an abandoned pair. The top ten holders combined should ideally hold less than thirty five percent of supply, excluding the LP and burn addresses. The biggest single non-LP wallet should hold under five percent.

Open the holders panel. Right click the top non-LP wallet, copy the address, and open it in Etherscan or Solscan. If the wallet has zero outgoing transactions before the token launch, that is a strong insider signal. If it has connections to the deployer through a single token transfer chain, it is almost certainly a sybil wallet.

Hard skip: single non-LP wallet holds more than fifteen percent of supply.

Step 3. Dev Wallet Identification, Balance, and First Transaction

Tool: Etherscan, Solscan, or BscScan.

Click the deployer address from the pair page header. The block explorer opens a wallet view showing the first transaction date, total balance, token holdings, and outbound transfers. Note three things. First, how the wallet was funded. Most legitimate deployers fund through a fresh wallet receiving ETH or SOL from a known exchange like Binance, Kraken, or Coinbase. A funding chain that runs through Tornado Cash, eXch, or Sinbad mixer is a high risk signal because it indicates the deployer wanted to break the trail.

Second, check the deployer balance of the new token. If the deployer kept more than two percent of supply outside the locked LP, that is an active dump risk. Third, look at other tokens deployed by the same wallet. A wallet with three failed launches in the past month is statistically more likely to rug the fourth.

Step 4. Transaction Count, Buy Sell Ratio, Unique Buyers versus Unique Sellers

Tool: DEX Screener transactions tab, or GeckoTerminal trades view.

A real pair after one day of trading should show at least three hundred transactions and roughly balanced buys versus sells in dollar value, with buy count higher than sell count for an uptrending healthy token. A pair with one thousand buys and only ten sellers is signaling that holders cannot exit. A pair where one wallet performed eighty percent of buys with no sells is a self churned pump.

Open the unique buyers and unique sellers numbers. The ratio should be reasonably close, perhaps two buyers per seller in a strongly trending pair. A ratio of twenty buyers per seller with one hundred plus transactions is a textbook honeypot signature, where the contract allows buys but blocks sells. This connects directly to step five.

Step 5. Honeypot Test by Simulating a Sell

Tool: GoPlus Honeypot, De.Fi Scanner, or Honeypot.is.

This is the single most important defensive check on EVM chains. Paste the token contract into honeypot.is or run a GoPlus scan from the pair explorer audit panel. The simulator performs a buy and an immediate sell on a forked node, then reports whether the sell succeeded and what tax was charged. A real token returns a green pass with the actual buy and sell taxes. A honeypot returns a red fail with a specific reason: blocked transfer, max tx exceeded, blacklisted, or zero output.

If the simulator cannot complete the sell, the contract is a honeypot. Close the tab. No further analysis required.

For Solana, the equivalent check is the freeze authority field on the underlying token. If freeze authority is not null, the issuer can freeze any wallet's tokens, which is functionally equivalent to a honeypot for the frozen holders.

Step 6. Token Tax (Buy and Sell) plus Modifiable Flag

Tool: DEXtools audit panel, backed by GoPlus.

The audit panel reports the buy tax and sell tax as a percentage of the trade. Anything zero to five percent is normal. Five to ten percent is acceptable for projects that fund development or marketing through the tax. Above ten percent is hostile by default. Above forty nine percent is a tax based honeypot since most routers reject the swap.

The critical secondary field is the canModifyTax or isTaxModifiable boolean. If true, the contract owner can raise the sell tax to ninety nine percent at any moment and convert a normal token into a soft rug. A clean pair shows zero modifiable tax and renounced ownership.

Step 7. Contract Verified, Code Audit Notes, and Owner Renounced

Tool: Etherscan contract tab, plus De.Fi or CertiK Skynet.

Open the token contract on the block explorer and click the contract tab. Verified contracts display the green checkmark next to the source code. Unverified contracts show only the bytecode and should be treated as opaque. No legitimate project ships an unverified token in 2026.

With the source open, search for these functions: mint, _blacklist, setFee, setMaxTx, excludeFromFee, and any modifier named onlyOwner or isAuthorized. The presence of any of these on a non-renounced contract means the owner retains the power to mint new supply, blacklist your address, change the tax, or pause transfers. Verify owner renouncement by looking up the owner address. It should be the zero address (0x000...000) or a verified multisig controlled by a known team.

For Solana programs, the equivalents are mint authority, freeze authority, and update authority. RugCheck.xyz exposes all three at the top of every report. Mint authority not null means new tokens can be minted at will.

Step 8. Social Links Validity

Tool: DEXtools social tab plus the public profile links.

Click each social link. The website should resolve to a domain registered more than thirty days ago (run a quick WHOIS check), with content that does not look auto generated. The Twitter or X handle should have more than three hundred organic followers, real engagement on tweets, and a creation date that aligns with the project timeline. The Telegram group should be open, with permission to read history, and should show natural conversation rather than spam bots.

Two specific red flags. First, a Twitter handle created the same week as the token launch with a follower spike from anonymous accounts is a buy farm. Second, a Telegram group with disabled history and forwarded only messages is hiding past chat. Both are common in rug setups because the team plans to abandon the social presence as soon as they cash out.

Step 9. Trending Speed and Organic versus Paid Impressions

Tool: DEXtools trending, DEX Screener trending, plus social analytics.

Pair explorers show trending position and velocity. A pair that jumps from rank one thousand to rank twenty in two hours is either organically viral or being aggressively boosted. Cross check by looking at the X or Twitter mention count for the contract address. Real virality produces a flood of independent mentions from accounts that already follow trading content. Paid promotion produces a wall of identical tweets from low follower bot accounts posting within minutes of each other.

This step is qualitative but it adds context. A token that climbs trending fast with zero independent social mentions is being pumped by the team itself, which usually precedes a coordinated dump.

Step 10. Clusters via Bubblemaps and Insider Holdings

Tool: Bubblemaps embedded inside DEXtools and DEX Screener, or directly at app.bubblemaps.io.

Bubblemaps renders the top one hundred and fifty holders as a graph, with each wallet as a circle sized by holdings and connected by lines representing token transfers between them. Healthy distribution looks like a scattered cloud with the LP and burn addresses as the only big nodes. Insider concentration looks like a tight cluster of medium sized circles all connected to one funding wallet, often with the deployer in the middle.

A cluster percentage above forty percent in the holder distribution means a coordinated group controls almost half the float. They can sell into any pump and crash the price by sixty to eighty percent. Cluster percentage under fifteen percent indicates organic dispersion.

If you want a deeper walkthrough of cluster reading, see our dedicated guide on detecting fake volume and coordinated trades which uses the same Bubblemaps interface from a different angle.

Walkthrough: Inspecting a Contract on Etherscan and Solscan

The block explorer steps inside the checklist deserve their own walkthrough because most traders never open the contract tab. Doing so once turns the audit panel from a black box into something you can verify yourself.

Etherscan and BscScan for EVM Tokens

Paste the token contract address into etherscan.io (or bscscan.com, basescan.org, arbiscan.io). The default token page shows total supply, holders, and recent transfers. Click the contract tab. If the contract is verified, the source code displays in a syntax highlighted editor with a green check next to the contract name.

Use the browser find feature (Ctrl plus F) to search for the functions named in step seven. Note the lines that contain function _transfer and read the body. Look for any path that calls a fee function, a balance check, or a sender check. The presence of require(_isExcluded[sender] == true) inside a transfer means the contract can blacklist transfers at will.

Click the Read Contract subtab. This exposes public read functions. owner() returns the current owner. If it returns the zero address, ownership is renounced. _taxFee() or similar returns the current tax. tradingOpen() returns whether trading is enabled. The Write Contract subtab lists the functions that the owner can call. Read every one. If the list includes manualSwap, setBots, or withdrawStuckEth, you know what powers the owner retained.

Solscan and Solana Beach for Solana Tokens

Paste the token mint address into solscan.io. The token page shows holders, top holders, and transfer activity. Open the metadata tab. The fields to read are mint authority and freeze authority. Both should display "None" or a burn address for a properly relinquished token. If either is set to a real wallet, that wallet can either mint unlimited supply or freeze any holder.

RugCheck.xyz wraps these checks in a single risk score. Paste the mint address into rugcheck.xyz and the report grades the token from Good (green) to Danger (red), with a one click view of mint authority, freeze authority, LP burn percentage, holder distribution, and known scam markers. SolSniffer at solsniffer.com provides a complementary numeric score from zero to one hundred.

DEXtools Pair Page versus DEX Screener versus Birdeye

The three most used pair explorers share the same underlying primitives but expose them differently. Knowing which tool wins on which check saves time.

The practical recommendation is to keep DEXtools open as the primary pair page for EVM trades, DEX Screener as the cross check (especially for the trades tape which renders faster), and Birdeye as the primary tool for any Solana trade. RugCheck and SolSniffer should be opened in tabs three and four when a Solana token is in scope.

The Risk Score Decision Matrix

The checklist is only useful if the result drives a decision. Score each step from zero (severe red flag) to two (clean pass), then total. A maximum score is twenty. Use the matrix below to convert score to position size.

Any single hard fail (failed honeypot, deployer holds more than two percent outside LP, single non-LP wallet above fifteen percent, unverified contract, mint authority active) overrides the score and forces a skip regardless of the total. This is the brake that prevents a single missed flag from getting through because nine other checks passed.

Side by Side: Clean Pair versus Rug Pair

Theory becomes muscle memory when you watch the checklist run on two real pair pages at once. Below is a stylized side by side breakdown of the typical signal pattern. The clean pair is the kind of mid-cap launch that survives the first week and grows organically. The rug pair is the textbook two day pump and dump that drains its pool overnight.

Common Rug Setups the Checklist Catches

The same handful of patterns repeat across thousands of rugs. Knowing the silhouette of each helps the checklist run faster because the signal pattern is recognizable.

Best Practices Around the Checklist

The mechanics matter, but a few operational habits multiply the value of running the checklist. None of these are optional if you trade new launches regularly.

Use a burner wallet for all unknown token interactions. The pair explorer checklist is excellent at filtering out scams but it cannot protect you from a contract that drains approved allowances through a malicious router. A dedicated wallet with limited funds caps your loss on the day you miss a flag. Pair the burner with the discipline of Permit2 hygiene so revoked approvals do not haunt you later.

Run a transaction simulation before signing the swap, even after the checklist passes. Modern wallets including Rabby and Frame display the simulated balance change. If the simulation says you will receive zero tokens while you signed for one million, the router is malicious and the pair explorer audit panel did not catch it.

Track your gas costs. The economics of trading small early launches break if you spend more on gas than you can recover. On Layer 2 networks like Base, Arbitrum, and Optimism the costs are an order of magnitude lower than mainnet, which makes the checklist viable for smaller speculative positions.

Backtest your decisions. Keep a log of pairs you scored, the score, the position taken, and the outcome at one week and one month. Apply backtesting discipline to your own filtering process. You will discover which steps catch the most rugs in your personal trading universe and you can tighten those thresholds.

Add general wallet security hygiene on top. Hardware wallet, fresh seed phrase storage, no clipboard reuse. Many traders lose money to address poisoning scams after they have already cleared the pair explorer checks.

Risks and Limitations of the Checklist

The checklist is a screening filter, not a guarantee. There are three classes of attack that it cannot reliably catch and you should know them.

First, the delayed rug. A project that passes every check on day one can still rug on day ninety if the team retains backdoor admin keys hidden in a proxy contract. The audit panel checks the implementation contract but not always the proxy admin. Mitigate this by re-running the checklist weekly on any token you continue to hold.

Second, the oracle exploit. A clean token can still be drained if the protocol around it (a lending market, a staking vault) is exploited through a flash loan that manipulates the pair's spot price. The pair explorer reads the pair, not the surrounding protocol stack. Pair the checklist with awareness of which markets the token is used as collateral in.

Third, the social engineering rug. A team can run a legitimate token for months, build a community, then issue a fake claim site that drains wallets. The on chain primitives stay clean but holders sign malicious transactions. The defense is wallet hygiene plus transaction simulation, not the checklist itself.

Knowing these gaps keeps you humble. A nineteen out of twenty score buys you a high probability of avoiding the obvious rugs. It does not buy you immunity. Combine the checklist with sensible position sizing and risk management and you have a defensible strategy.

Frequently Asked Questions

Q Q Q What is the fastest way to check if a new token is a rug pull?

Paste the contract address into honeypot.is for EVM tokens or rugcheck.xyz for Solana, then open the DEXtools or DEX Screener pair page and read three fields: liquidity locked status, top holder percentage, and contract verification. If the honeypot test fails, liquidity is unlocked, or one wallet holds over fifteen percent, skip the token. That triage takes under sixty seconds and catches most obvious rugs.

Q Q Q Is DEXtools or DEX Screener better for rug pull detection?

Both pull the same on chain data and both have integrated audit panels powered by GoPlus. DEXtools has a slightly more detailed holders chart and stronger trending feed. DEX Screener has a faster transactions tape and cleaner mobile experience. Most experienced traders keep both open and treat them as cross checks. For Solana specifically, Birdeye combined with RugCheck is the stronger pairing.

Q Q Q What does liquidity locked mean and why does it matter?

Liquidity locked means the LP tokens representing the pool position are sent to a time locked smart contract (Unicrypt, PinkLock, Team.finance, Mudra) or burned to a dead address. While locked, the deployer cannot withdraw the paired asset (ETH, USDC, SOL) from the pool. Unlocked liquidity gives the deployer one transaction access to drain the entire pool, which is the canonical rug pull. Always verify both the lock contract address and the lock duration.

Q Q Q How do I run a honeypot test on a new token?

Paste the token contract address into honeypot.is for EVM chains, or use the audit panel inside DEXtools and DEX Screener which run the same GoPlus simulation. The tool forks the current blockchain state, performs a buy and an immediate sell, and reports the actual buy tax, sell tax, and whether the sell succeeded. If the simulator reports the sell failed or the sell tax exceeds forty nine percent, the contract is a honeypot.

Q Q Q What top holder percentage is safe for a new token?

Exclude the LP address and burn addresses from the count. The largest non-LP wallet should hold less than five percent of supply. The top ten non-LP wallets combined should hold less than thirty five percent. Any single non-LP wallet above fifteen percent is a hard skip because that holder can dump the chart by sixty percent or more in a single transaction. Use Bubblemaps to verify whether the top wallets are independent or connected through a single funding source.

Q Q Q What is the difference between mint authority and freeze authority on Solana?

Mint authority is the account that can create new tokens of the mint. If mint authority is not null, the holder can inflate supply at will and sell into the pool. Freeze authority is the account that can freeze any token holder's balance, blocking transfers from that wallet. If freeze authority is not null, the issuer can functionally honeypot any holder. Both should display None or a burn address on Solscan for a properly relinquished token.

Q Q Q How do I verify a contract on Etherscan?

Paste the token contract address into etherscan.io and click the Contract tab. A verified contract displays the source code in a syntax highlighted editor with a green check next to the contract name. The Read Contract subtab exposes public view functions, including owner address and current tax. The Write Contract subtab lists every function the owner can call. An unverified contract shows only bytecode and should be treated as opaque and untrustworthy.

Q Q Q Can a token rug pull even if the liquidity is locked?

Yes, through other mechanisms. The owner can set the sell tax to ninety nine percent if the contract allows tax modification, blacklist holder addresses if a blacklist function exists, mint unlimited supply if mint is not removed, or coordinate a slow rug where insider clusters sell into retail buys over days. Locked liquidity is necessary but not sufficient. The full ten step checklist exists because no single check covers every attack vector.

Q Q Q What is Bubblemaps and how does it help spot insiders?

Bubblemaps renders the top one hundred and fifty holders of a token as a graph. Each wallet is a circle sized by holdings and connected by lines representing token or native transfers between wallets. Healthy distribution looks like scattered independent circles. Insider concentration looks like a tight cluster of medium sized circles all connected to one funding source. A cluster percentage above forty percent means a coordinated group controls almost half the float.

Q Q Q What is the GoPlus API and why is it used inside pair explorers?

GoPlus is a token security API that performs honeypot simulations, contract risk analysis, tax detection, and ownership checks across EVM chains. DEXtools, DEX Screener, and most other pair explorers consume the GoPlus API to power their audit panels. The advantage of knowing GoPlus is the underlying source is that you can run the same check from goplus.io directly if a pair explorer audit panel returns inconclusive data.

Q Q Q How long should LP tokens be locked for a serious project?

Six months is the minimum for any project asking for serious attention. Twelve months or longer is preferred for mid cap launches. Some projects burn the LP tokens to a dead address (0x000...dEaD on EVM), which is permanent and removes any future liquidity withdrawal possibility. Always verify the lock duration on the locker contract itself (Unicrypt, PinkLock) because the pair explorer label can be cached or wrong.

Q Q Q Should I use RugCheck or SolSniffer for Solana tokens?

Both. RugCheck.xyz produces a color graded report with detailed mint authority, freeze authority, LP burn percentage, and holder breakdown. SolSniffer produces a numeric score from zero to one hundred and adds a few unique heuristics on top wallet behavior. Run both, treat any disagreement as a yellow flag, and verify the underlying fields on Solscan when scores diverge. Birdeye token health rounds out the picture with smart money tracking.

Conclusion: The Checklist Is the Edge

Avoiding rug pulls is not about being smarter than the scammer. It is about being slower. The scammer needs you to click buy in the first thirty seconds after the pair appears in trending. The checklist forces you to spend two minutes on the pair explorer instead. Those two minutes are the entire difference between losing your capital to a honeypot and surviving to trade the next launch.

The ten steps in this guide are not aspirational. They are the minimum due diligence that experienced traders run on every new pair before they even consider position sizing. Liquidity and lock, holders and concentration, dev wallet and funding source, transaction flow and unique buyers, honeypot simulation, tax and modifiability, contract verification and owner renounce, social validity, trending velocity, Bubblemaps clusters. Ten checks, four primary tools (DEXtools, DEX Screener, Etherscan, Bubblemaps) plus two Solana specific ones (Birdeye, RugCheck). The decision matrix converts the score into a position size so the trade itself never depends on emotion.

Open a pair explorer tab right now, pick the newest token on the trending feed, and run all ten steps against it as practice. The first three runs will feel slow. By the tenth, the sequence is automatic, and you will start seeing rugs from across the room. Pair this discipline with sensible entry and exit planning and your survival rate on new launches improves by an order of magnitude. The market does not reward courage on every coin. It rewards the willingness to skip.

Related Guides

• How to Avoid Rug Pulls on Solana: Red Flags Every Trader Should Know
• How to Avoid Rug Pulls: Solana, Ethereum & Base Guide 2026
• How to Spot a Rug Pull 2026: 12-Point Free Detection Checklist
• Spot Rug Pulls Fast: Use DEXTools in 3 Minutes
• Pair Explorer Data Trend Reversals: A Pro Trading Guide