Project
Trust
Tools
Insights How to buy FAQ Join community
Insights · How-to

How to Verify Any Solana Token in 60 Seconds

Anyone can claim a token is safe, supply-capped, or authority-revoked. The blockchain lets you confirm it yourself in under a minute — no trust required.

8
Steps to verify
<60s
Time required
Free
No account needed
On-chain
Immutable source of truth
Context

Why you should never just take a project's word for it

The Solana token ecosystem moves fast. Projects make claims — "mint revoked," "1 billion fixed supply," "no freeze authority" — that are easy to say and just as easy to verify. The data lives on a public ledger. You don't need to trust the team. You need to know where to look.

Mint authority risk

If mint authority is not revoked, the deployer can create unlimited new tokens. This silently dilutes every holder's position — often ahead of a sell-off.

Freeze authority risk

An active freeze authority means the team could prevent your wallet from transferring or selling tokens. This is a property of the SPL token standard — it must be explicitly revoked.

Concentration risk

A token where five wallets hold 80% of supply is structurally fragile. One decision from one holder can move the market. Distribution data is public — check it.

The checklist

Eight steps, one browser tab

We'll use TrustTails (TAIL) as the worked example throughout. Every step applies to any Solana SPL token.

Step 1

Get the mint address from an official source only

The mint address (also called the contract address) is the unique identifier for a token on Solana. Before you open any explorer, you need to be sure you have the right address. Get it from:

  • The project's official website (look for a clearly labelled contract section)
  • A pinned post on their verified X/Twitter account
  • Their official Telegram announcement channel — not a group chat, and never from a DM

Scam warning: This pre-launch period is exactly when fake accounts distribute counterfeit addresses in replies and DMs. If someone DMed you an address, discard it. Always confirm from a source you navigated to yourself.

TrustTails example: The official TAIL mint address is 4NoNV3jSYLRbUtVWSTK5XdkpuvRzGpMCmfZSBKMuk6Rc — published on this website, on X @trusttailscoin, and in the official announcements channel.

Step 2

Open the token on Solscan

Navigate to solscan.io and paste the mint address into the search bar, or use the direct URL pattern:

https://solscan.io/token/<MINT_ADDRESS>

For TrustTails, the direct link is: solscan.io/token/4NoNV3jSYLR…uk6Rc

The Overview tab loads by default. This is where the most important fields live. Other reliable Solana explorers include explorer.solana.com and solana.fm — all pull from the same on-chain data, so the results will match.

Step 3

Check Mint Authority — look for "None"

On the Overview tab, find the field labelled Mint Authority. There are only two meaningful values:

  • None — the authority has been revoked. No one can ever create additional tokens. Supply is fixed forever.
  • A wallet address — someone holds the ability to mint new tokens at any time. This is an ongoing risk.

TrustTails example: Mint Authority shows None — revoked at launch. The supply of 1,000,000,000 TAIL is mathematically fixed. You can verify this directly on Solscan.

Step 4

Check Freeze Authority — also look for "None"

Directly below Mint Authority is the Freeze Authority field. This controls whether the token issuer can freeze a wallet's token balance — effectively preventing that wallet from selling or transferring.

  • None — revoked. No one can freeze your tokens. You retain full control.
  • A wallet address — someone can freeze balances. Even if they have no stated intention to use it, the capability exists.

TrustTails example: Freeze Authority is also None — revoked. Once you hold TAIL, no one can freeze or lock your balance. This is on-chain and permanent.

See also: our Security page and Is it legit? for how TrustTails approaches these structural questions.

Step 5

Verify the total supply matches what was claimed

The Overview tab displays Current Supply. Cross-check this number against whatever the project's website, whitepaper, or social accounts state. They must match exactly.

  • If a project claims "1 billion tokens" but Solscan shows 900 million, ask why — tokens may have been burned, which can be legitimate, but it should be explained and verifiable.
  • If Solscan shows more tokens than claimed, that is a direct contradiction of the project's stated tokenomics.

TrustTails example: Current Supply on Solscan reads 1,000,000,000 TAIL. Our Tokenomics page and whitepaper state exactly the same number. No discrepancy.

Step 6

Check holder distribution

Click the Holders tab on Solscan. This shows every wallet that holds the token, ranked by balance, with percentage of total supply. What to look for:

  • Top 10 wallets: What percentage of supply do they hold collectively? The higher this number, the more concentrated — and fragile — the token is.
  • Labelled wallets: Solscan sometimes labels known wallets (e.g. "Burn," "Raydium LP," "Team"). If a single unlabelled wallet holds 20%+ of supply with no explanation, probe further.
  • Number of holders: A genuinely community-distributed token should have a growing, spread holder count. Very few holders at launch is not inherently bad, but it is a data point to track over time.

No distribution is "perfect," but comparing the on-chain reality to the project's stated allocation plan is a useful signal. Our own allocation is detailed on the Tokenomics page.

Step 7 · Post-launch only

Check liquidity — and whether it is locked

This step only applies to tokens that are already trading. TrustTails is currently pre-launch with no active Raydium pool or DEX listing — so there is nothing to check here yet. We note it for completeness.

Once a token is trading, look for:

  • Liquidity pool (LP) tokens: When a team adds liquidity to a DEX like Raydium, they receive LP tokens. If those LP tokens are sent to a burn address or locked via a time-lock contract, the team cannot withdraw liquidity.
  • Unlocked LP: If the team holds LP tokens freely, they could withdraw all liquidity at any time — leaving buyers unable to sell. This is the mechanics of a "rug pull."
  • DexScreener / Birdeye: These aggregators show pool size, LP burn status, and trading history. Always verify LP lock claims with the lock contract address itself, not just the team's assertion.

We will update our Is it legit? page with LP lock details and relevant explorer links when trading launches.

Step 8

Cross-check every official link

The final step is simple but frequently skipped. Take each social/community link from the project's website and confirm it matches what is independently published.

  • Search the X/Twitter handle directly — does the account match what the website links to? Check the handle character-for-character. Scammers use @trusttai1scoin (a one, not an L) or added underscores.
  • Open the Telegram link from the website. Is it the same group you may have found via search? Telegram group names are not unique.
  • For email contact, confirm the domain matches — [email protected] is our contact, not any other variation.

TrustTails official channels (verify these match):

Quick reference

Green flags vs red flags

A summary of what the data should — and should not — show on a trustworthy Solana token.

Signs of a well-structured token

  • Mint Authority: None (revoked on-chain)
  • Freeze Authority: None (revoked on-chain)
  • On-chain supply matches stated supply exactly
  • Distribution aligns with published tokenomics
  • LP locked or burned (once trading starts)
  • Official links match across all channels
  • Team makes claims that are verifiable on-chain

Red flags to walk away from

  • Mint authority is an active wallet address
  • Freeze authority is held by the team
  • On-chain supply contradicts stated supply
  • Top 1–2 wallets hold majority of supply, unlabelled
  • LP tokens not locked or burned
  • Addresses or links shared only via DMs
  • Claims that cannot be verified on-chain
Honest limits

What on-chain verification cannot tell you

These steps reduce risk. They do not eliminate it. It is worth being clear about where the data ends and judgment begins.

Team identity

On-chain data tells you about the token's structure, not about the people behind it. An anonymous or pseudonymous team is not automatically a red flag, but it is a risk factor to weigh separately from the token mechanics.

Future execution

Revoked authorities and good distribution confirm the token is structurally sound today. They say nothing about whether the team will build what they say they will. That assessment requires reading the roadmap, whitepaper, and community track record over time.

Price and value

A structurally clean token can still lose value. Market conditions, macro sentiment, community growth, and execution all affect price. Nothing on this page — or anywhere on this site — is financial advice. Crypto assets can lose all value.

Common questions

Verification FAQ

Is Solscan the only explorer I can use?
No. Solscan is widely used and well-presented for token details, but you can cross-check with explorer.solana.com (the official Solana Foundation explorer) or solana.fm. All pull from the same on-chain data. Using two explorers on the same address is a good habit for high-stakes decisions.
What does "revoked" actually mean technically?
On Solana's SPL Token standard, the mint authority and freeze authority are fields in the token's mint account. When revoked, those fields are set to null on-chain. This is an irreversible operation — there is no function to reinstate a revoked authority. It is permanently gone, enforced by the Solana program itself, not by any promise from the team.
Can a project fake what Solscan shows?
No. Solscan reads directly from Solana's blockchain state. A project can fake a screenshot, but they cannot alter what solscan.io displays when you navigate to the address yourself. Always open the explorer in your own browser using the mint address you obtained from official sources — never rely on screenshots shared by the project or other users.
What is the difference between the mint address and the token ticker?
The ticker (e.g. TAIL) is a human-readable label that multiple tokens can share — anyone can create a token called "TAIL." The mint address is a unique cryptographic identifier on Solana. It cannot be duplicated. Always verify using the mint address, not the ticker. Fake tokens frequently impersonate popular projects using the same ticker but a different address.
TrustTails is pre-launch — what should I verify right now?
Steps 1–6 and Step 8 all apply now. You can verify the mint address, confirm both authorities are revoked, check the total supply is exactly 1,000,000,000, review holder distribution, and cross-check all official links. Step 7 (liquidity) becomes relevant once trading begins. We will update the Is it legit? page with LP details at that point.
Are there any audits or security certifications?
We do not claim any third-party audit at this time. The on-chain verifiable facts — revoked mint authority, revoked freeze authority, fixed supply — are verifiable by anyone without any audit. If a formal audit is commissioned in the future, it will be publicly announced and linked from our Security page.
Verify it yourself

TrustTails on Solscan — open it now

Every claim we make about TAIL is on-chain and publicly verifiable. Mint authority revoked. Freeze authority revoked. 1,000,000,000 fixed supply. Check it for yourself — that is the point.

Not financial advice. Cryptocurrency carries significant risk including total loss of value. Nothing on this page constitutes investment advice or a solicitation to buy any asset. Always do your own research.