Contract Audit (I.)
The Contract Audit reads the token's code and tells you, in plain words, what the people who control it are able to do to you. Most launchpad tokens are standard and harmless by shape; the value here is catching the exceptions that hide a trap.
The section header shows the headline: "CLEAN · 0 LEVERS" or "N LEVERS" (a "lever" is a non-standard power the owner can pull).
The left column: what kind of contract it is
| Field | Meaning |
|---|---|
| Standard | The contract type (e.g. a normal ERC-20 or SPL token). |
| Template | Whether it matches a known launchpad template. Matching a common template is reassuring; it means the code is a known quantity. |
| Fingerprint | A short code identifying the contract's shape, tagged existing (seen before, lower risk of hidden code) or new (unique, worth extra care). |
| Deploy route | How the contract was created (the launchpad or method). |
| Migration (Solana) | How long it sat on the launchpad before going live. Tags: ⚡ snipe (graduated in under a minute, often coordinated) or 💤 late (took over a day, unusual). |
| Typical token | "Yes, standard config" or "No, non-standard." |
The right column: anomalies (the levers)
If the contract is clean, you'll see a single green clean badge: "No non-standard functions or extensions flagged: nothing the owner can pull on holders."
If not, each anomaly is listed with a severity and a plain-English description:
| Severity | Examples of what it flags |
|---|---|
| critical (red) | Mint authority (print new tokens, diluting you), freeze authority (lock your wallet so you can't sell), upgradeable/backdoor code. |
| high (orange) | Transfer fees (skim a % of every trade), transfer restrictions, balance manipulation. |
| medium (yellow) | Withdraw functions, mutable metadata, certain extensions. |
| info (green) | Benign, near-universal extensions worth noting but not worrying about. |
Real examples you might read:
Mint Authority: Owner can print new tokens anytime, diluting supply. Transfer Fee: All trades charge a % fee to a contract account; the team can withdraw it. Freeze Authority: The team can freeze wallets, preventing holders from selling.
How to use the Contract Audit
- Critical levers are usually disqualifying. A live mint or freeze authority means the team can rug or trap you at will. On most legitimate tokens these are renounced (disabled).
- A matching template + "existing" fingerprint is a good sign; the code is a known, vanilla shape rather than something bespoke and hidden.
⚡ snipemigration is a yellow flag; a token that graduated in seconds often had a bundle ready and waiting (cross-check Holders & Funding).- "info" anomalies are fine. They're common, benign details; don't let the word "anomaly" scare you off a clean token.
This section answers the single most important safety question: "Can the team take my money through the code itself?" Critical/high levers mean yes, potentially. Clean means the danger, if any, lies elsewhere (the people, the holders, the market), so keep reading.