Short answer: The most widely used free rug pull checkers are GoPlus, Token Sniffer, and Honeypot.is for EVM tokens and RugCheck for Solana. Firepan Sentinel covers both EVM chains and Solana and keeps contract safety separate from adoption, so a well-built but thinly traded token isn't confused with a risky contract. No single checker catches everything, so the strongest approach is to use two: a broad scanner plus a honeypot simulator.
Disclosure: Firepan publishes this guide and makes Sentinel. Third-party descriptions come from each tool's own pages or the cited 2026 roundup, and we have not benchmarked the tools against each other.
| Checker | Best for | Chains | Cost |
|---|---|---|---|
| Firepan Sentinel | Broad risk read with separate safety and adoption scores | Ethereum, Base, Arbitrum, Polygon, BNB Chain, Solana, Robinhood Chain | Free basic scan |
| GoPlus Security | Token, address, approval, and NFT security data, including via API | Many chains, EVM and Solana | Free |
| Token Sniffer | Comparing new tokens against known scam patterns and clones | EVM networks | Free |
| Honeypot.is | Testing whether a token can actually be sold | Ethereum, BSC, Base | Free |
| RugCheck | Solana token authorities, holders, liquidity, and insiders | Solana, Fogo | Free |
| De.Fi Scanner | Contract and wallet permission risks | 10+ chains | Free |
| Bubblemaps | Visualizing connected wallets and concentrated supply | Multiple | Check site |
Paste an address at sentinel.firepan.com for a point-in-time read of honeypot and sell-restriction signals, owner, mint, pause, and blacklist permissions, proxy upgradeability, holder concentration, liquidity, and source verification, with a plain-English AI summary. Sentinel draws on third-party security data, including provider honeypot and permission signals, and combines it with its own liquidity and holder analysis. It is also available in ChatGPT and to AI agents through MCP. Browse token overviews for 49 major tokens.
GoPlus offers free security APIs covering token security, malicious addresses, NFT authenticity, and wallet approvals. Many wallets and tools build on its data, which is why its signals appear across the ecosystem.
Token Sniffer compares new tokens against known scam patterns, with clone detection and honeypot simulation, according to the 2026 Bitrue roundup.
Honeypot.is simulates a buy and a sell to determine whether a token is a honeypot, and measures buy and sell taxes. It covers Ethereum, BSC, and Base, and notes that a token that passes today could change later.
RugCheck describes itself as a Solana and Fogo token risk scanner. It checks token authorities, holders, liquidity, insider networks, and bundled launches.
De.Fi's scanner checks contract and wallet permission risks across 10+ chains. Bubblemaps maps connected wallets, which helps spot supply that looks spread out but is controlled by one group.
For the full process, see how to check if a token is safe.
A scan reflects the contract and market at scan time. A team that controls the contract or its liquidity can still act afterwards, and some scams happen off-chain through fake sites or social engineering. A clean result means no critical issue was found by the checks that ran, not that a token is safe.
Q: What is the best rug pull checker?
A: There is no single best one. For EVM tokens, pair a broad scanner such as Firepan Sentinel or GoPlus with a sell simulator such as Honeypot.is. For Solana, RugCheck is a common choice.
Q: Are rug pull checkers free?
A: Most are. Firepan Sentinel's basic scan, GoPlus, Token Sniffer, Honeypot.is, and RugCheck all have free use. Check each site for current limits.
Q: Can a rug pull checker be wrong?
A: Yes. Scanners can miss new scam patterns, flag legitimate admin controls as risky, and go out of date as on-chain state changes. Use more than one and recheck before large trades.
Q: What is the difference between a honeypot and a rug pull?
A: A honeypot lets you buy but stops you from selling. A rug pull is when the team or insiders drain liquidity or dump their holdings, crashing the price. Checkers look for signs of both.
Firepan
Run a free scan — results in minutes, no credit card required.
Run Free Scan →An 8-step checklist to check whether an Ethereum, Base, or Arbitrum token is safe before buying: verify the address, scan for honeypots, read owner powers, check liquidity and holders, and limit approvals.
A 15-step security checklist for launching a DeFi protocol: testing and invariants, external review, oracle and access-control configuration, deployment runbooks, key management, and incident response.
The free smart contract audit tools worth using in 2026: no-account AI scans, open-source analyzers like Slither and Aderyn, and fuzzers. What each finds, what it needs, and where free tools stop.
A 10-step checklist to prepare for a smart contract audit: freeze the code, define scope, document the design and invariants, raise test coverage, run automated tools, and plan the fix review. Prepared code costs less to audit.
Copy-paste GitHub Actions workflows for Solidity security: Slither with SARIF code scanning, Foundry invariant tests, and Echidna fuzzing — plus how to set failure thresholds without drowning in noise.