How to Investigate a Token Before Investing
Every week, thousands of new tokens are created. Some of them turn into real projects. The majority turn out to be a rug within days or even minutes. The difference is rarely visible at first glance.
Thankfully it shows up in the data underneath, like who holds the supply, how they got it, and what they do with it.
Investigating a token sounds intimidating, but you can get most of the way with a repeatable routine. Here is how we would approach it.
One thing to keep in mind before we dive is that not every token deserves the same level of scrutiny. A memecoin that launched five minutes ago and a serious project with big VC backing and public, doxxed people behind it are very different animals. For the memecoin, you are mostly checking whether the game is rigged, because there is no team track record to lean on. With the established project, you are also looking at things like vesting schedules, investor unlocks and whether the team has a real reputation to protect. The checks below apply to both, but how strict you are should depend on what you are looking at.
Start with the basics
Before anything else, confirm you are looking at the right token. Copy the contract address from the project’s official website or social accounts when possible since fake tokens with the same name and ticker are everywhere, and moreso on trending launches.
Then check a few fundamentals on a block explorer:
- When was the contract deployed? A token that launched ten minutes ago and has a polished website deserves extra suspicion.
- Is the contract verified? Unverified code means you cannot see what it does.
- How many holders are there, and how many transactions? Very low numbers on a token that claims thousands of fans tell their own story.
None of this proves a token is safe. It just helps you filter out the obvious problems fast.
Look at who holds the supply
This is the single most useful step, and the one most people skip. A token’s chart can look healthy while 70% of the supply sits in a handful of wallets that can dump at any moment.
A holder list shows you addresses and percentages, but it is hard to read. Ten wallets with 3% each looks harmless until you realize they all belong to the same person. This is where a visual tool helps. On Bubblemaps, each holder appears as a bubble sized by how much of the supply it controls, and lines between bubbles show transfers between wallets. You can see in seconds whether the distribution looks organic or engineered.
Things to look for:
- Large clusters. A group of wallets that are all linked to each other and hold a big share together.
- Wallets funded by the same source. If dozens of “different” holders all received their first funds from one address, they are probably not different people.
- Supply held by the deployer or insiders. Check what percentage sits with the team, and whether it is locked or sitting in plain wallets.
A healthy token usually shows a wide, scattered spread of holders with few strong connections. A suspicious one often looks like a spider web around a few central wallets.
Count the fresh wallets
Here is a question that tells you a lot very quickly: how many of the top holders are fresh wallets?
A fresh wallet is one that was created recently and has almost no history. Real users can absolutely be fresh wallets, but a cluster of brand new addresses sitting among the biggest holders is a classic way to hide one person’s allocation behind many “different” holders. On the Bubblemaps holder list, freshly created wallets are marked with a green leaf, so you can spot them at a glance.
If most of the top holders carry the leaf, say 90%, you probably want to buy something else. Where exactly the line sits is harder to say, and there is no universal number. Our suggestion is to treat anything above 5% fresh wallets among the top holders as a red flag. That is a strict rule of thumb, and you may want to loosen it for very new tokens, where everyone is naturally a bit fresh, but it is a good starting point.
Trace where early buyers came from
Launch day tells you a lot. Look at the first buyers, the ones who got in within the first blocks. Were they ordinary users, or fresh wallets all funded just before launch?
Snipers and insiders often split their allocation across many new wallets to hide how much they really hold. Those wallets tend to leave a trail: the same funding source, similar timing, similar amounts. Following the funding back one or two steps is often enough to see the pattern. This is also how you spot bundles, where many wallets buy in the same block right at launch.
If you find that a large part of the early supply traces back to a single origin, treat the real concentration as much higher than the holder list suggests.
Check the liquidity
Supply is only half the story. You also need to know whether you can actually sell.
- How much liquidity is in the pool? Thin liquidity means even a small sell can crash the price.
- Who owns the liquidity? If the team holds the LP tokens and they are not locked or burned, they can pull the liquidity and leave you holding something nobody can sell.
- Is the liquidity locked, and for how long? A lock of a few days is not much comfort.
It is worth knowing why this question became less urgent for many tokens. Liquidity rugs used to be incredibly common, which is a big reason launch platforms took off. On most launchpads, the liquidity is handled by the platform itself, so a deployer cannot simply pull it. That solved one problem, but it did not end rugs. It just moved them. Bundles became the new favorite method: the deployer buys a huge chunk of supply across many wallets in the very first block, then sells into the buyers who come later. The liquidity stays safe while the people holding the bag still lose. So on a launchpad token, “the liquidity is locked” is a good sign but not a full answer. That is why the holder and cluster checks above matter so much.
Also compare liquidity to market cap. A huge market cap sitting on a tiny pool is a warning sign, because the number is mostly theoretical.
Read the contract for red flags
You do not need to be a developer to catch the common traps. Contract scanners and explorer tools can flag many of them for you. Watch for:
- The ability to mint new tokens at will
- Functions that let the owner blacklist wallets or pause trading
- High or changeable buy and sell taxes
- Ownership that has not been renounced, with powerful admin functions still active
One of these is not always fatal, since plenty of legitimate projects keep some controls. The question is whether the controls are explained and reasonable, or whether they hand one person the power to freeze everyone else.
Follow the money after launch
Investigating a token is not a one-time check. Behavior over time matters just as much as the snapshot.
Watch what the big wallets do. Are they sending tokens to exchanges? Moving funds between their own wallets? Quietly selling into every pump? Large holders who keep distributing while the project posts hype about a bright future are telling you something.
It also helps to compare what the team says with what the chain shows. If they claim the team tokens are locked for a year and you can see those wallets moving, you have your answer.
Check the project outside the chain
On-chain data is the strongest evidence, but it works best alongside a quick look at the human side.
- Does the team have a real, verifiable presence, or only anonymous accounts that were created last month?
- Is the community active and genuine, or full of repetitive bot-like comments?
- Does the project actually do anything, or is the whole pitch the token itself?
- Have credible people looked at it, or is all the promotion coming from paid shillers?
Hype is cheap to manufacture. Real usage and transparent communication are much harder to fake.
A simple checklist
When you are in a hurry, run through this list:
- Is the contract address correct and verified?
- Who holds the supply, and are there hidden clusters?
- How many of the top holders are fresh wallets?
- Where did the early buyers get their funds, and could this be a bundle?
- Is the liquidity deep and locked?
- Does the contract give anyone dangerous powers?
- What are the large wallets doing right now?
- Does the team’s story match what the blockchain shows?
If several answers make you uneasy, you have learned what you needed to know.
Final thoughts
No method catches everything, and a token can pass every check and still go to zero. Investigation is about reducing the odds of getting caught out, not removing risk entirely. The good news is that blockchain data is public. Anyone willing to spend ten minutes looking can see what most people never bother to check.
Make it a habit, and you will notice the patterns quickly. The tokens that hold up under scrutiny are usually the ones worth your attention.