Methodology
How TokenSentry calculates risk scores — transparent, auditable, evidence-backed.
TokenSentry scores risk using a transparent point-accumulation system. Every flag adds a fixed number of points to the score. The final score is clamped between 0 and 100. No check is hidden — you can see every contributing factor directly in each report.
Missing data does not automatically raise the score — it is surfaced as a data-quality note. A low score with limited data is less reliable than a low score with full coverage.
Risk Score Scale
Low Risk
Score 0 – 33
No major red flags detected. Always verify independently before investing.
Medium Risk
Score 34 – 66
One or more concerning signals. Use caution and research further.
High Risk
Score 67 – 99
Multiple serious red flags. High probability of rug pull, honeypot, or scam.
Extreme Risk
Score 100 +
Extreme danger — token exhibits hallmarks of a confirmed scam or active rug pull.
How the score is calculated
Each detected flag adds its point value to a running total, clamped to 100. Example: mint function (+40) + no locked liquidity (+30) + whale holder (+35) = 105 points, capped at 100 (High Risk). Passing checks add 0 points but appear as positive evidence in the report.
All Checks and Point Values
| Flag | Chain | Points |
|---|---|---|
| Contract source not verified | ETH | +25 |
| Honeypot — sell failure detected | All EVM | +40 |
| Sell tax > 25% | All EVM | +30 |
| Sell tax 10-25% | All EVM | +15 |
| Buy tax > 25% | All EVM | +20 |
| Buy tax 10-25% | All EVM | +10 |
| Owner can mint unlimited tokens | All EVM | +40 |
| Hidden owner detected | All EVM | +50 |
| Contract can reclaim ownership | All EVM | +45 |
| Transfers can be frozen by owner | All EVM | +35 |
| Self-destruct code present | All EVM | +45 |
| Upgradeable proxy contract | All EVM | +15 |
| Team wallet holds > 30% supply | All EVM | +30 |
| Team wallet holds 10-30% supply | All EVM | +12 |
| Single whale > 50% of supply | All EVM | +35 |
| Single whale > 20% of supply | All EVM | +18 |
| Top 5 wallets > 80% of supply | All EVM | +20 |
| Fewer than 50 total holders | All EVM | +20 |
| 50-200 total holders | All EVM | +10 |
| Liquidity not locked | All EVM | +30 |
| Less than 50% of liquidity locked | All EVM | +12 |
| Liquidity less than $10k | All chains | +25 |
| Liquidity $10k-$50k | All chains | +15 |
| Token listed less than 3 days ago | All chains | +10 |
| Token listed 3-30 days ago | All chains | +5 |
| RugCheck danger flags | Solana | +40 each |
| RugCheck warning flags | Solana | +20 each |
| Largest holder > 50% (Solana) | Solana | +35 |
| Largest holder > 20% (Solana) | Solana | +18 |
High Medium Low
Honeypot Detection
A honeypot is a token where you can buy but cannot sell. The contract includes hidden code that blocks the sell transaction or routes it to fail. This is one of the most common crypto scams.
TokenSentry uses Honeypot.is to simulate both a buy and sell against the real contract. If the sell fails, the token is flagged (+40 points). High taxes detected during simulation are also flagged separately.
Source: honeypot.is — free, no API key. Covers all 7 EVM chains.
Contract Risk Scan
Smart contracts can contain functions giving creators dangerous levels of control. TokenSentry checks these via the GoPlus Security API:
Uncapped mint (+40)
Owner can create unlimited tokens at any time, diluting all existing holders.
Hidden owner (+50)
True owner is concealed. They can act as admin without public accountability.
Ownership reclaim (+45)
Even after apparent renouncement, a function exists to restore admin control.
Transfer pause (+35)
Owner can freeze all transfers, locking everyone out of selling.
Self-destruct (+45)
A function exists to destroy the contract, potentially wiping out liquidity.
Upgradeable proxy (+15)
Logic can be silently replaced — enabling future backdoors.
Unverified source (+25, ETH only)
Code not published on Etherscan — cannot be independently audited.
Source: GoPlus Security API — free, no key. Covers all 7 EVM chains.
Tax Detection
High taxes make tokens unprofitable to sell and can be raised to 100% by the owner at any time, effectively converting a taxed token into a honeypot. TokenSentry flags taxes above 10%.
Source: Honeypot.is simulation result.
Ownership and Team Holdings
When a project team retains a large percentage of supply, they can dump their holdings at any time and instantly crash the price. This requires no malicious contract code and is one of the most common rug pull vectors.
- ›Team holds 10-30%: +12 pts (Medium)
- ›Team holds more than 30%: +30 pts (High)
Source: GoPlus owner_percent and creator_percent fields.
Holder Concentration
A token dominated by a single wallet or small group is highly vulnerable to price manipulation. TokenSentry filters out known DEX liquidity pool addresses before analysing wallets, focusing on real wallet holders only.
- ›Largest wallet 20-50%: +18 pts (Medium)
- ›Largest wallet more than 50%: +35 pts (High)
- ›Top 5 wallets more than 80% of supply: +20 pts (Medium)
- ›Fewer than 50 total holders: +20 pts (Medium)
Source: GoPlus holder list (EVM). RugCheck top holders (Solana).
Liquidity Analysis
Liquidity is the value of assets available to trade against on a decentralised exchange (DEX). Low liquidity means high slippage and makes exiting a position very difficult. LP lock status is equally important — if LP tokens are unlocked, the team can drain the pool instantly in what is called a rug pull.
Sources: DexScreener (liquidity depth); GoPlus (LP lock status).
Token Age
Brand-new tokens have limited on-chain history to assess. Scam tokens are typically launched, drained, and abandoned within days. Token age is a risk amplifier, not proof of a scam.
- ›Listed less than 3 days ago: +10 pts (Medium)
- ›Listed 3 to 30 days ago: +5 pts (Low)
- ›Listed more than 30 days ago: 0 pts
Source: DexScreener pair creation timestamp (earliest listing found).
Supported Chains
Ethereum (ETH)
Etherscan + Honeypot.is + GoPlus + DexScreener
BNB Chain
Honeypot.is + GoPlus + DexScreener
Polygon
Honeypot.is + GoPlus + DexScreener
Arbitrum
Honeypot.is + GoPlus + DexScreener
Base
Honeypot.is + GoPlus + DexScreener
Avalanche
Honeypot.is + GoPlus + DexScreener
Optimism
Honeypot.is + GoPlus + DexScreener
Solana
RugCheck + DexScreener
Data Sources
- Honeypot.is
Buy/sell simulation — detects honeypots and measures tax rates for all EVM chains. Free, no key required.
- GoPlus Security
Contract security analysis — 10+ checks including mint, hidden owner, LP lock, and holder concentration. Free, no key.
- DexScreener
DEX market data — liquidity depth and pair listing age. Free, no key required.
- RugCheck
Solana-specific danger and warning flag analysis. Free, no key required.
- Etherscan
Ethereum contract verification and source code. Optional free API key; degrades gracefully without.
- CoinGecko
Token name/symbol lookup and multi-chain address resolution. Free, no key required.
Disclaimer
TokenSentry provides automated heuristic analysis for educational and security research purposes. Scores are not financial advice and do not guarantee safety. Always conduct your own research before investing.