The $12,400 Rug You Can Spot in 60 Seconds (Before You Even Buy)

A trader on Solana saw a token with a "burned" LP, a locked chart, and a dev who'd supposedly doxxed himself on a livestream. The chart looked perfect — green candles, climbing volume, a community that wouldn't shut up about it. He went in with $12,400. The moment he hit buy, the price dropped 40%. He checked the holders tab and saw it: one wallet holding 68% of the supply. He tried to sell. The transaction failed. Then it failed again. Then the token contract went dead and his $12,400 was gone in eleven minutes. Here's the part that stings: every single red flag was visible on the token page before he clicked buy. Nobody checks the three numbers that matter. You're about to learn the exact three — plus the nine others that catch the other scams — and you'll never lose to a rug the same way twice.

🔍 The First Check That Would've Saved That $12,400

Most people open a token page and look at the chart. The chart is where the scammer wants you to look. The chart is painted theater. The holders tab is where the truth lives, and 90% of traders never open it.

Here's the single highest-signal number in all of crypto: the top-10 holder percentage. On GMGN, open any token and click the Holders tab — it's right next to the chart. Look at the top of the list where it shows the concentration. The rule is brutally simple:

• Under 20% top-10 concentration: institutional-grade distribution. Rare, and usually a sign of a real community or a serious team. Green flag.
• 20-40%: normal for memecoins. Manageable. Proceed with other checks.
• 40-60%: you're the exit liquidity for a handful of wallets. High risk.
• Over 60%: this is not a trade, it's a donation. The wallet at the top can dump the entire supply into your buy order at any second.

The $12,400 trader's token showed 68% top-10 concentration. One glance at the Holders tab would have ended the session before it started. Do this check first, every time, before you even look at the chart. It takes five seconds and it filters out more scams than every other check combined.

Want the full toolkit in front of you while you run these checks? The free security scanner on GMGN puts every signal I'm about to show you on one page.

🔥 The Liquidity Trap: Burned vs. Locked Is a Lifelong Difference

Here's where most people get this wrong: they hear "LP burned" and assume the token is safe. That's not what burned means half the time.

LP burned means the liquidity pool tokens were sent to a dead address. Nobody — including the dev — can pull the liquidity. This is the gold standard.

LP locked means the pool tokens are in a vesting contract for a set period, usually 30 days to a year. If it's locked for 6 months, the dev can't rug today, but the countdown is ticking.

The scam pattern that's flooding Solana and BSC right now: the dev renounces or burns the LP, but keeps a multi-million-token dev wallet. The LP is safe — you can't pull the pool — but the dev wallet can dump 30% of supply into the pool at any moment with zero warning. The chart is safe from a "classic rug," but you're still holding a bag that's about to lose 70% of its value in one candle.

On the GMGN token page, check the Security tab. It lists the LP status explicitly — burned, locked, or neither. The red-flag thresholds:

• LP not burned AND not locked: skip instantly. There is no upside case for this.
• LP locked less than 30 days: extreme caution. The dev can unlock and pull within a month.
• LP burned with a dev wallet over 5%: still very dangerous. The LP check is necessary but nowhere near sufficient.
• The ideal: LP burned AND dev holdings under 2-3%.

The combination that kills most traders is burned LP plus a fat dev wallet. They see "burned" and stop thinking. The dev wallet is the actual bomb.

🧟 The Mint-and-Freeze Check: The Contract That Can Print Your Bag Away

You're holding a token. The price is pumping. Then the dev calls the mint function and doubles the supply. Your bag is now worth half. This is the mint function and it's one of the oldest tricks in the book.

The second contract-level check: freeze authority. Some tokens let the owner freeze individual wallets — including yours — which means they can block your sell order mid-dump while their wallets exit freely. That's not paranoia, that's a standard feature of many token standards.

On the GMGN Security tab, both are listed in plain text:

• Mint: Renounced or Not Renounced. Not renounced = the dev can print new supply at will. Skip.
• Freeze: Renounced or Not Renounced. Not renounced = the dev can lock your wallet. Skip.

The threshold here is binary, not a spectrum. If either one is NOT renounced, you don't need any other check. That token is a trap by design. Walk away.

There's exactly one edge case: some legit projects keep the mint function for future deflationary burns or airdrops. That's a story the dev tells you. The on-chain reality is that an unrenounced mint is a loaded gun pointed at your position. In a memecoin with no product and no audited contracts, there's zero reason to accept that risk. Move on.

💸 The Tax That Drips You Dry: Buy, Sell, and the Silent Transfer Fee

The buy tax is obvious. The sell tax is obvious. The one that gets people is the transfer tax hiding in the contract — a fee on every single transfer, including when you move tokens between your own wallets. It doesn't show up on the chart. It shows up as a slowly shrinking balance.

Here are the exact thresholds you treat as red flags on GMGN's Security tab:

• Buy tax over 5%: only acceptable for serious projects with real utility and a large community. For a fresh memecoin, this is a greedy dev signal.
• Sell tax over 5%: a sell tax is the first thing a dev raises to trap you. Over 10% sell tax is a hard skip.
• Any transfer tax above 0%: unusual and hostile. Most legit tokens have a 0% transfer fee. A transfer tax means friction for every holder and a revenue stream for the dev.
• Buy and sell tax asymmetry: if sell tax is meaningfully higher than buy tax, the dev is structurally discouraging exits. That's a honeypot in slow motion.

The worst honeypots combine a 15% sell tax with a dev wallet that holds most of the supply. You buy, the price pumps from the dev's own buys, and when you try to sell you're both taxed 15% and dumped on by the dev's simultaneous sell. The GMGN Security tab shows the tax numbers directly. Check them before you buy, not after.

And the pro move: run a test transaction. Buy a tiny amount — 5 to 10 dollars — and immediately try to sell it. The most reliable honeypot test in existence costs less than a cup of coffee to run. If the sell fails, if the output is absurdly less than the input, or if the transaction just doesn't confirm, you've found a honeypot the hard way — but with $10 instead of $12,400.

🤖 The Bundle-and-Sniper Read: How Much of This Chart Is Even Real?

This is the number that separates casual traders from people who actually read charts. A chart can look like a healthy pump with rising volume. But if 60% of the supply was bought in the first block by sniper bots, that "organic volume" is just bots trading with themselves to create the illusion of demand.

On GMGN's Security tab, there's a Bundler section and a Sniper section:

• Bundler: a single deployer wallet splits the supply across multiple wallets to fake distribution and hide the true concentration. If the bundler holds over 30-40% of the supply across the bundled wallets, that's not distribution — that's a dev preparing a coordinated dump.
• Sniper %: the percentage of supply bought by automated bots in the first moments of the launch. If snipers hold over 30% of the supply, they will dump on any real buying pressure the moment the chart starts pumping. You are late by design.

The thresholds: bundler wallet holdings over 30% is a red flag. Sniper supply over 30% is a red flag. Together, you're in the danger zone regardless of what the chart's doing.

Here's the fuller reframe you probably haven't considered: a "successful" chart is often a better signal of manipulation than a dead one. The project that hypes for days, builds a huge Telegram, and then launches with 50% sniper supply is not a failed project — it's a surgical extraction. The dead launches with low snipers are usually just failed attempts. The dangerous ones are the ones that look exciting. Most people get this backwards. They see a big launch and assume attention equals legitimacy. On-chain, attention is often just the countdown timer for the dump.

Once you've read the distribution this way, the smart money tab is the next layer: on GMGN's Holdings tab, filter to Smart Money and Insiders to see whether actual whale wallets are holding or whether the entire top of the chart is bots and the dev's own wallets. If smart money is absent and insiders dominate the top-10, that's all the confirmation you need.

👤 The Dev's History: The Check Nobody Runs

Here's the brutal truth: most scams are repeat offenders. The same wallet addresses, the same dev patterns, the same Telegram layout, the same launch style. If you check the dev's history, you'll often find this exact same playbook was already run three weeks ago — and it rugged then too.

On GMGN's token page, click the Dev section. It shows two things:

• Dev token history: every previous token this wallet deployed. If the previous projects are all dead, rugged, or abandoned, you have your answer. Why would this one be different? It won't be.
• Dev holdings: the percentage of the current supply the dev still holds. If it's over 5-10%, the dev has a loaded gun.

The missing insight: a dev with a clean history of successful, still-alive projects is a genuinely rare and valuable signal. A dev with zero history is a coin flip. A dev with a graveyard of dead tokens is a hard no — no matter how good the chart looks. Most people never click this tab. It takes five seconds and it catches the most expensive category of scam: the professional repeat offender.

📉 Liquidity vs. Market Cap: The Ratio That Prices the Risk

A token can have a $1M market cap and $3,000 in liquidity. That's not a $1M token; that's a $3,000 token with an inflated number in a browser. The market cap is fantasy. The liquidity is the actual amount of money you can get out.

The ratio you need: liquidity should be at least 10-20% of market cap for a healthy memecoin. In practice:

• Under 5%: the price can move violently in either direction and you may not be able to exit at a reasonable price. Extreme slippage risk.
• 5-10%: fragile. Moves are unforgiving.
• 10-20%: healthy for a memecoin. Normal bid-ask depth.
• Over 20%: excellent. Rare and worth extra attention.

The trick here is that market cap numbers update live, and liquidity can be added or removed at any block. GMGN's token page shows both numbers side by side at the top. The moment you see a market cap with two commas and a liquidity number worth only four figures, the check is done. You don't need to read another line of that token's data.

🎭 The Honeypot Final Exam: Three Confirmation Signs

You've run the checks, and the token is passing. Before you commit, here's the final three-signal honeypot confirmation designed to catch the tricks that pass everything else:

Signal one: the sell-tax gap. If the Security tab shows a sell tax materially higher than the buy tax — say 8% vs. 2% — that's the structural disincentive to exit. Combined with anything below, it's the kill shot.

Signal two: the liquidity concentration. Check the LP holders on the Holders tab. If the top LP position is a single wallet with over 50% of the liquidity, a single move out drains the pool and your position is worthless.

Signal three: the dead Telegram. A real project has a community with organic questions and real members. A rug project has a Telegram full of pinned hype, admins that never answer direct questions, and a member count that's mostly bots. If the community can't produce a single substantive answer to a technical question about the token contract, that's the human-level confirmation that the on-chain red flags you've been checking are all real.

Run the three-signal test on every token that passes the earlier checks. The full gauntlet takes about a minute: top-10 holders on the Holders tab, LP + security on the Security tab, mint/freeze/tax on the same page, bundler/sniper percentages, dev history, and the liquidity-to-market-cap ratio. That's the entire field guide. That's the 60 seconds that saves the $12,400. Run the full check in one place on GMGN and the whole minute gets faster.

🏴 What You Get From the Empire on This Exact Topic

This isn't a "do your own research alone" newsletter. The Blackhat Empire gives you the compounding edge on every one of these checks:

• The free alert network — @gmgnalerts — surfaces early-chain runners on SOL, BSC, ETH, Base, and Robinhood, but more importantly it shows you which launches are passing the basic checks before they reach your screen, so you're not wading through the 95% that are obviously dead.
• XTRACK — @xtrack1bot — the tracking bot that follows the actual wallets and patterns so you can see repeat-offender devs and known sniper behavior before a token even gets popular enough to show up on your feed.
• And the full toolkit hub at blackhat.finance with the scanners and the education all in one place.

The point is that every check in this guide is a real, learnable, repeatable skill. And the tools make the checks faster. But the skill is yours — nobody can rug you out of knowing how to read a holders tab.

🎯 Bottom Line

Every rug you've ever lost money to showed its hand before you bought. The top-10 holders tab never hides a 68% concentration. The Security tab never hides an unrenounced mint. The dev history never hides the graveyard of previous projects. The ratio never hides a $200K market cap with $8K in liquidity. What's hidden is never the data — it's the willingness to spend 60 seconds reading it instead of 60 seconds staring at the chart.

Run the seven checks: top-10 concentration under 20% or walk, LP burned with dev wallet under 3%, mint and freeze both renounced, taxes under 5% with no transfer fee, bundler under 30% and snipers under 30%, a dev history without a corpse trail, and liquidity at 10%+ of market cap. That's the gate. Everything that passes still deserves your discipline, but everything that fails deserves your absence.

The $12,400 trader didn't lose because he was stupid or greedy. He lost because nobody taught him that the chart is the last place to look. Now you know where to look first. The next token you buy — the one that passes every check in this guide — is the one where your edge finally starts compounding. Join the Empire for the alerts, check any token free on GMGN before you buy, and always remember: the truth was never hidden. It was one tab away. DYOR, stay sharp, and never buy anything you haven't verified in the last 60 seconds.

---

🏴 Blackhat Empire — Free Multi-Chain Alert Network

➡️ JOIN THE EMPIRE — free live buy/sell alerts on SOL · BSC · ROBINHOOD

📲 Trade on GMGN (register free): gmgn.ai 📍 Live trenches & full DYOR library: blackhat.finance 🏴 Add all 7 MAIN groups: t.me/addlist 💬 Community Chat: @gmgnx_chat 🤖 Power tools: @xtrack1bot · @VBMBbot