How Do You Know If a Meme Coin Is Safe? A Guide to Spotting Honeypots and Rug Pulls
Before buying any meme coin, run four on-chain checks — can you sell, contract permissions, liquidity, and holders — to dodge most honeypots and rug pulls.
Before you buy any meme coin, run four on-chain checks — can you sell, contract permissions, liquidity, and holder distribution — and you’ll dodge the large majority of meme coin scams. That’s not an exaggeration: according to Chainalysis’s 2025 Crypto Crime Report, of the 2 million-plus tokens launched in 2024, about 3.59% showed patterns consistent with a suspected pump-and-dump, and in those suspected pools, roughly 94% of the liquidity was pulled by the wallet that created it. Every one of these signals sits right there on a token’s GMGN page, so you can verify them one by one before you buy. The people who get burned are usually the ones who skipped a check.
More specifically, the risks fall into three buckets: contract traps (you can buy but can’t sell, or you can sell but high taxes or fresh minting eat most of your gains), exit scams (insiders or the team dumping on holders, or pulling the LP and running), and wallet security risks (unrelated to the token itself — think phishing, account compromise, or signing a malicious approval). The first two you can clear with the four on-chain checks above; the third comes down to your own wallet habits, which we’ll cover at the end.
Meme coins are volatile and move fast, and yes — some people have walked away with returns many times their stake. That’s exactly why the crowds keep piling in. What this guide is built to do is help you get in on it without stepping into the traps you could have avoided. But before we go check by check, there’s one thing you need to get straight first: why most meme coins were always going to zero in the first place.
Why do most meme coins go to zero?
Most MEME coins don’t go to zero because the market suddenly tanked — they go there because they were never built to last. The price runs on attention and emotion, not cash flow or fundamentals. Most new tokens never have any real liquidity to begin with, and the few that do tend to fizzle out within days: the hype fades, the buyers vanish, and nobody’s left trading it. Take pump.fun, the largest launchpad, as an example: only about 1% of tokens ever “graduate” (fill their bonding curve and migrate to the PumpSwap DEX), and the rate has stayed under 2% over time. Even the ones that do graduate rarely trade for more than a month — many stop trading within a day as holders take profit or pull liquidity (Cryptopolitan). Flatlining isn’t the exception here — it’s the default, and it usually happens fast.
But common as it is, it isn’t random. Almost every blowup traces back to the same handful of signals — and you can read them on-chain before you buy. So “most people lose” doesn’t have to mean you lose blindly. The rest of this guide is about reading those signals.
What’s different about trading meme coins on-chain vs. a CEX?
Trading meme coins on-chain and buying on a centralized exchange (CEX) are two different risk models: on-chain, no one vets the token for you, while who controls the wallet depends on how you trade. A CEX reviews what gets listed and custodies your assets, and when needed, it can freeze funds or help recover them. On-chain, anyone can launch a token in minutes. If you trade through a connected third-party wallet, you control its private key.
| Dimension | Centralized Exchange (CEX) | On-chain Trading |
|---|---|---|
| Who vets the token | Exchange listing review | No one |
| Who holds the funds | The exchange (custodial) | Self-custodial or custodial, depending on the trading setup |
| Can a third party freeze or recover funds | In some cases | Rarely, transactions are final |
| Who screens for scams | The exchange and the user | The user, with on-chain tools |
What GMGN adds back is token screening. Doing these checks by hand used to mean bouncing between a block explorer, a honeypot scanner, and a DEX price page, plus tracing wallets yourself. GMGN pulls them right onto the coin’s detail page, so the pre-buy risk checks no longer mean switching back and forth between a handful of tools.
Before you buy: how to check if a meme coin contract is safe
To judge whether a meme coin’s contract is safe, check a handful of key fields written into the contract before you buy: whether mint authority has been renounced, whether it’s a honeypot (i.e. can you actually sell), whether there’s a blacklist function, how steep the buy/sell tax is, whether the contract is verified, and whether owner privileges have been renounced. Some of these let you buy in but never sell out; others let you sell, only for high taxes or fresh minting to eat most of your profit. What they all have in common: nearly every one is written into the contract, so you can look it up before you ever buy.
| Check | Safe Sign | Risk Signal |
|---|---|---|
| Mint authority renounced | Yes | No. The team can still mint new supply and dilute your holdings |
| Not a honeypot | Yes | No. Selling is restricted — you can buy in but can’t sell out |
| No blacklist | Yes | No. Your address can be blacklisted and blocked from selling |
| Buy/sell tax | Low | High. An excessive sell tax (e.g. 99%) is a honeypot in disguise; also watch for the “delayed honeypot / mutable tax” setup — tax is low at launch, then quietly cranked up by the dev later |
| Verified contract | Yes | No. The source code isn’t public, so it can’t be audited |
| Ownership renounced | Yes | No. The creator can still use owner privileges (change the tax, blacklist addresses, enable minting when needed) |
A clean contract doesn’t mean a safe token. Whether liquidity is burned or locked, whether the float is concentrated in the dev’s wallet and insider bundles, and whether the deployer has rugged before are just as critical to check before you buy — they’re simply not in the contract code. They live in the token’s on-chain state and history, and they’re where “exit scam” risk actually hides.
A word of caution: never trust a single check in isolation — always cross-reference. Even a “renounced” flag can be spoofed; a contract can present as renounced while quietly keeping the power to mint, hike the tax, or blacklist wallets. The contract checks above, along with the liquidity and holder signals covered next, all run in a single pass on a token’s GMGN detail page and get flagged right there — so you can read the full picture at a glance before you ever buy.
Before you buy: how to check dev holdings and spot a rug pull
Spotting a rug pull comes down to one thing: liquidity. A rug pull is, at its core, a type of exit scam — the dev pumps the price, then abruptly pulls liquidity or runs off with the funds, leaving retail holding a token they can’t sell and that goes to zero. It comes in two forms. A hard rug is premeditated: they yank the LP, run with the money, scrub their socials and website, and the price flatlines in an instant. A soft rug is quieter: the team gradually walks away, offloading its own allocation bit by bit while the price slow-bleeds to the floor.
That’s why your first checkpoint before entering is liquidity: focus on whether the LP is burned (not just “locked”), how long the lock runs, who controls the pool, and whether it’s deep enough — and check the contract permissions alongside it (can they mint, blacklist, or change the tax).
| Liquidity signal | What it tells you |
|---|---|
| LP burned | The LP tokens have been sent to a dead address — gone for good, no way to pull them. The “pull liquidity and run” exit is sealed off. |
| Locked only, not burned | Once the lock expires, liquidity can still be withdrawn — so check how long the lock runs and who holds the unlock keys. “Locked” ≠ “burned.” |
| Neither locked nor burned / dev can move the pool | The team can pull liquidity and run at any time — highest hard-rug risk. Steer clear. |
| Liquidity too thin | Even with the LP burned, a shallow pool is easy to blow through with a single large order, and easy to manipulate. |
Holder distribution is a different read entirely. Concentration isn’t a rug on its own — it’s the setup for a dump: when the dev and linked wallets are sitting on most of the float, they can dump in unison even with the LP locked and the contract spotless, and retail ends up as their exit liquidity. The holder signals on a token’s GMGN page let you spot who’s positioned to dump on you before they do:
| Holder signal | What it tells you |
|---|---|
| Dev has rugged before | This dev wallet has rugged past launches — could run the same script again. |
| Dev holds a heavy bag | The dev’s bag is big enough to nuke the chart in a single sell. |
| Heavy insider / bundle concentration | A large portion of supply sits in dev-controlled wallets, ready to be dumped in lockstep with the team. |
| Bundled buys | One entity behind a cluster of wallets, buying in sync to fake organic demand. |
| Top holders are fresh or scam wallets | Most top holders are brand-new wallets or flagged scam wallets with a rug-trading history. |
After you buy: how to keep your wallet safe from scams
If you’re using your own third-party wallet on GMGN, stay alert every time you approve a transaction. On-chain wallets get drained all the time, and it almost always comes down to two things: phishing and careless approvals. According to blockchain security firm CertiK’s Hack3d 2025 report, phishing was the most frequent attack vector of the year — around 248 incidents and roughly $720 million in losses — and these attacks usually don’t break the contract; they trick you into signing an approval yourself. GMGN can check the token itself for you on the token page, but how you store your keys and whether a given approval is safe to sign is on you.
Here are the most common plays — and the easiest to fall for.
-
Fake “Revoke / Migrate Assets” Sites
Never touch a “revoke approval” link dropped by a stranger in the comments—it’s a phishing play that surfaces right after a major hack, while everyone’s panic-securing their funds. Scammers squat lookalike domains with “revoke” or “claim” in the URL, pass them off as legit tools, and bait you into connecting your wallet and signing—and that one signature hands over approval to your tokens and gets your wallet drained on the spot. For revoking approvals, only use the official tool you bookmarked yourself. Links from comments, DMs, or group chats? Never click.
-
Blind signing
Blind signing means approving a transaction you can’t actually read — like handing someone a signed blank check, where they fill in the amount, and the recipient, and you have no idea what you just agreed to. To avoid it, use a wallet that supports “clear signing”: it translates the unreadable code into plain language and tells you exactly how much this signature will move, and to whom. Before you sign, run it through a transaction simulator to preview what’ll actually happen. In short: if you can’t understand it, don’t sign it.
-
Address poisoning
Crypto addresses are long and messy, so a lot of people don’t bother memorizing them — next time they send funds, they just copy the last address from their transaction history. That habit is exactly what scammers target. They send you a tiny transfer from an address whose first and last characters look almost identical to one you use often (the middle differs, but most people only glance at the ends). The transfer slips into your history, and the next time you copy, paste, and confirm out of habit, the money goes straight to them. So never copy an address from your transaction history. Either check the full address character by character, or only pick from an address book you’ve saved yourself.
-
Fake wallet extensions, and “paste this code to verify” pages
These are really two scams. One is a counterfeit browser extension that mimics the wallet you use and steals your keys the moment it’s installed — so only download wallet software from official sources, never from search results or random links. The other is sneakier: some pages ask you to copy a snippet of code and paste it into your browser’s “console,” claiming it’s “to prove you’re not a robot.” Remember — this is never legit. The moment you paste it in, you’ve handed over your account.
Build the habits, keep the discipline:
- Before connecting to any link or community, confirm it’s official. Official admins never DM you first, and they’ll never ask for your private key.
- Never share your private key or seed phrase, and never store them digitally.
- Check your wallet approvals regularly, and revoke any you no longer trust.
- Use a dedicated wallet for trading memes, and keep only part of your funds in it; put the rest in another wallet that you don’t connect to unfamiliar sites.
- Turn on 2FA for your GMGN account.
A 60-second pre-buy safety checklist
Run the same token-safety check before every meme buy. Make it a habit, not a gamble.
- Contract: mint revoked, ownership renounced, LP burned, not a honeypot, low buy/sell tax, no blacklist, open-source contract.
- Dev: no prior rugs from the creator; the dev and insiders don’t hold an outsized share.
- Holdings: top 10 hold under ~30% of supply; the top wallets aren’t mostly fresh or scam-linked.
- Wallet: approvals cleaned up, 2FA enabled, review every transaction before signing — no blind signing.
- Position: only risk what you can afford to lose, and set your exit before you enter.
The first three risk checks are one tap away on a token’s detail page in GMGN’s on-chain trading terminal. The other two are on you — you’ll need to verify and set them up yourself.
Information in this article is current as of June 2026. GMGN updates frequently, so refer to the live product for the latest interface.
Disclaimer: Meme trading involves significant risk and may result in the loss of your entire capital. This article is for informational purposes only and does not constitute financial or investment advice. Always do your own research before trading. GMGN does not promise, guarantee, or predict any profit or return. Any user gains or case studies mentioned are individual, exceptional, and not representative of typical outcomes or of future performance.