What it checks
The 26 checks a Tok{In} scan runs on an EVM token, in 6 groups. Each line says what the check finds, and links to the guide where one explains the risk.
Trade Simulation
4What happened when a buy, a sell or a transfer of the token was simulated
- Honeypot: Bought, Cannot Sell
- A simulated buy went through and every simulated sell failed
- GuideHoneypot
- Tax Above 15%
- The deepest Uniswap V2/V3-style pool charged more than 15% on a simulated buy or sell
- GuidesHoneypotFee tax manipulation
- Transfer Blocked
- A simulated wallet-to-wallet transfer ran and failed
Trading Restrictions
9Mechanisms that limit how or when tokens can be traded
- Tax Mechanism
- Token charges a fee on buy/sell transactions
- Trading Cap Active
- A maximum trade size is currently enforced
- Trading Cap Mechanism
- Contract contains code to enforce a maximum trade size
- Modifiable Trading Cap
- The trading cap can be changed by the owner
- Position Cap Active
- A maximum wallet holding size is currently enforced
- Position Cap Mechanism
- Contract contains code to enforce a maximum wallet holding
- Modifiable Position Cap
- The position cap can be changed by the owner
- Trading Cooldown
- A minimum time delay is enforced between trades
Access Controls
7Mechanisms that restrict who can interact with the token
- Blacklist / Whitelist
- Owner can block or restrict specific addresses from trading
- GuidesHoneypotBlacklist
- Pausable
- Contract contains code to pause all transfers
- Modifiable Pause
- The pause state can be toggled by the owner
- Allowance Bypass
- A caller can move any holder's tokens via transferFrom without an approval, a hidden drain backdoor
- Owner Privileges
- One or more addresses can call functions that other holders cannot. This can be true even after ownership is renounced
- GuidesRug pullOwnership risk
- Transfer Guarded
- What transfer() does depends on a stored value, which could be used to block or change transfers
- TransferFrom Guarded
- What transferFrom() does depends on a stored value, which could be used to block or change delegated transfers
Contract Behaviour
3Code paths that can change what the token does after it launches
- External Call
- The token calls a contract whose address is not fixed in its code, so its behaviour can change without the token changing
- Timebomb
- Some functionality switches on only after a set time
- View Modifies State
- A function with the signature of an ERC-20 view function writes to storage
Supply & Lifecycle
2Mechanisms that affect token supply or contract existence
- Mint or Burn
- A party other than the holder can create new tokens or destroy a holder's tokens. A burn of the holder's own tokens does not count
- GuideHidden mint
- Self-Destruct
- Contract contains a selfdestruct call. Since EIP-6780 it can only send away the contract's ETH; the code and the balances stay
Token Profile
1Metadata about the token's deployment characteristics