meme-coin-audit

Featured

Meme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token analysis (freeze authority, mint authority, metadata mutability), Token-2022 extension risks (transfer hooks, permanent delegate), DEX liquidity pool attacks (sandwich amplification, LP drain, bonding curve exploits), pump.fun/Raydium/Jupiter integration risks, token_scanner.py automation, and real exploit examples from 2024-2025. Use for any token audit, rug pull assessment, meme coin security review, or pre-investment due diligence.

AI & Automation 4,056 stars 722 forks Updated 2 days ago MIT

Install

View on GitHub

Quality Score: 93/100

Stars 20%
100
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# MEME COIN & TOKEN SECURITY AUDIT Fast-kill rug pull detection and deep token security analysis for EVM and Solana meme coins. --- ## PRE-DIVE KILL SIGNALS Check these BEFORE reading a single line of code. If any are true, skip the audit — the token is likely a rug or not worth the time. ### Hard Kills (Skip Immediately) - **Contract not verified** on Etherscan/Solscan → Cannot audit source = cannot trust - **Deployer wallet** has history of rug pulls (check Etherscan deployer page) - **Token age < 1 hour** AND no known team → Too early, wait for more data - **Mint authority retained** (Solana) AND no cap → Infinite mint = certain rug - **Freeze authority retained** (Solana) on meme coin → Honeypot confirmed - **Transfer hook present** (Token-2022) with mutable hook program → Honeypot vector - **Permanent delegate** extension (Token-2022) → Can steal all holder tokens ### Soft Kills (Proceed with Extreme Caution) - Top holder > 20% of supply (excluding DEX pools) - LP not burned or locked in verified contract - Contract is upgradeable / proxy with retained admin - Less than $5K liquidity in the pool - No social presence / anonymous deployer with no history --- ## THE ONE RULE > **"Check ALL authorities and owner functions. The retained authority IS the rug vector."** > > Every rug pull requires a privileged operation: mint, blacklist, fee change, LP removal, or authority abuse. If you find the privilege, you found the bug. --- ## BUG CLASSES (8 TOKEN-SPECIFIC) ##...

Details

Author
shuvonsec
Repository
shuvonsec/claude-bug-bounty
Created
4 months ago
Last Updated
2 days ago
Language
Python
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category