← ClaudeAtlas

meme-coin-auditlisted

Meme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token analysis (freeze authority, mint authority, metadata mutability), Token-2022 extension risks (transfer hooks, permanent delegate), DEX liquidity pool attacks (sandwich amplification, LP drain, bonding curve exploits), pump.fun/Raydium/Jupiter integration risks, token_scanner.py automation, and real exploit examples from 2024-2025. Use for any token audit, rug pull assessment, meme coin security review, or pre-investment due diligence.
elementalsouls/Claude-BugHunter · ★ 1,478 · AI & Automation · score 83
Install: claude install-skill elementalsouls/Claude-BugHunter
# MEME COIN & TOKEN SECURITY AUDIT Fast-kill rug pull detection and deep token security analysis for EVM and Solana meme coins. --- ## PRE-DIVE KILL SIGNALS Check these BEFORE reading a single line of code. If any are true, skip the audit — the token is likely a rug or not worth the time. ### Hard Kills (Skip Immediately) - **Contract not verified** on Etherscan/Solscan → Cannot audit source = cannot trust - **Deployer wallet** has history of rug pulls (check Etherscan deployer page) - **Token age < 1 hour** AND no known team → Too early, wait for more data - **Mint authority retained** (Solana) AND no cap → Infinite mint = certain rug - **Freeze authority retained** (Solana) on meme coin → Honeypot confirmed - **Transfer hook present** (Token-2022) with mutable hook program → Honeypot vector - **Permanent delegate** extension (Token-2022) → Can steal all holder tokens ### Soft Kills (Proceed with Extreme Caution) - Top holder > 20% of supply (excluding DEX pools) - LP not burned or locked in verified contract - Contract is upgradeable / proxy with retained admin - Less than $5K liquidity in the pool - No social presence / anonymous deployer with no history --- ## THE ONE RULE > **"Check ALL authorities and owner functions. The retained authority IS the rug vector."** > > Every rug pull requires a privileged operation: mint, blacklist, fee change, LP removal, or authority abuse. If you find the privilege, you found the bug. --- ## BUG CLASSES (8 TOKEN-SPECIFIC) ##