Education + play

Rug Pull Hunter crypto safety learning game

Practice asking better crypto-safety questions before you trust a token, a pool, or a promotion. The game is a lesson in recognizing warning signs, not a substitute for independent research.

Play the educational game

Treat every scenario as practice. It does not become a token report when a market-listing name is shown, and signing in or connecting a wallet cannot turn a simulated field into a verified result.

If the game does not load, the evidence guide below still provides the lesson without an iframe, account, or wallet. For a spectator-only walkthrough, you can watch the educational Rug Pull Hunter demo; demo sessions do not provide player interaction, rewards, or leaderboard credit.

What Rug Pull Hunter teaches

A rug pull is commonly used for an abrupt liquidity withdrawal, sale, or other exit that harms participants. Crypto-related harm can also happen through impersonation, pressure, misleading promises, or an off-chain investment fraud. Those are different evidence classes, so one technical signal cannot answer every safety question.

The learning objective is to slow down and ask what a signal actually measures, what it leaves unknown, and which independent source could confirm the observation. Use these lessons to investigate authorities, liquidity, holders, metadata, and project communications rather than treating the game's illustrative labels as safe or unsafe findings.

Separate a capability or observation from an allegation about intent.
Look for timestamps, address labels, pool type, and corroborating evidence.
Treat missing information as uncertainty rather than proof of fraud.
Pause before signing a transaction or sending funds because of a score, claim, or promotion.

What information the game uses

Where available, the iframe can present third-party market-listing information such as a listed project name, pair context, or simplified liquidity-related context. Listing information is supplied by another service, can change, may be incomplete, and is not a direct read of every account or program on Solana.

The game also creates educational scenarios and gameplay events. Scenario selection, labels, difficulty, point values, and some displayed fields may be randomized or simplified for play. These are illustrative examples—not verified attributes of the named project, mint, pool, or issuer. The game does not claim that a scenario score estimates the probability of fraud.

What the game does not verify

This page does not accept a mint address and return an on-chain review. It is not a contract auditor, universal scam checker, verified scanner, or investment recommendation. In particular, it does not independently establish:

the current mint or freeze authority for a supplied mint;
the behavior of a token program, Token-2022 extension, transfer hook, or other contract code;
the identity or intent of an authority, holder, deployer, promoter, or liquidity provider;
the custody, lock, active range, or removable amount of a particular pool position;
that metadata, social claims, reported entries, or market listings are authentic or complete.

Wallet connection, account access, game points, and any reward path do not expand those capabilities. You can use the educational sections without signing in, connecting a wallet, signing a transaction, or relying on the iframe.

Rug-pull warning signs are prompts, not verdicts

Warning signs can help prioritize questions. They should be read with context and an observation time; none below independently establishes fraud or safety. The ten-signal table is intentionally written as evidence guidance rather than a binary classification.

Solana technical signals in plain language

Mint authority, freeze authority, and revocation

Solana’s official token documentation defines the mint authority as the account allowed to create additional units and increase supply. The freeze authority can freeze token accounts, preventing their tokens from being transferred or burned. An enabled authority is a capability to investigate, not a finding about malicious intent.

Solana’s Set Authority guide explains that setting a selected authority to None permanently removes that role. Revocation removes one control path; it does not audit code, liquidity, ownership, metadata, or communications. The authority account is not automatically the person or organization behind a project.

Token-2022 and token metadata

Solana’s extension documentation and the Token-2022 program documentation describe Token-2022 as a token program with optional extensions, including transfer fees, transfer hooks, pausable behavior, and metadata features. Token-2022 is not inherently suspicious. A reviewer should identify the program and understand each enabled extension before interpreting transfer behavior.

Solana’s metadata guide distinguishes a metadata pointer from TokenMetadata, while the Solana and Metaplex guide explains linked metadata and update authority. Missing, mutable, polished, or immutable metadata is identity and context evidence—not a security verdict. Check the mint, program, URI, update authority, and observation time separately.

Liquidity, pool type, and active ranges

Liquidity is not one universal number. Raydium’s pool-type documentation distinguishes constant-product pools from concentrated-liquidity pools. In a CLMM, liquidity providers choose a price range, so liquidity may be active near one price and absent elsewhere. The Raydium CLMM documentation and liquidity-position guide are useful for distinguishing LP tokens from CLMM position NFTs and for asking who can remove a position.

Record the venue, pool address, pair, pool type, active range, liquidity depth, custody or lock claim, and timestamp. Low or removable liquidity is a risk factor because it can increase price impact or exit sensitivity, but it is not proof of fraud. A pool position being burned or locked also does not prove honest code, fair distribution, or future market depth.

Holder concentration

A top-holder percentage can show that a small set of displayed addresses controls a large balance, which may create market-impact or exit risk. It does not establish beneficial ownership without address classification. A pool, burn address, exchange custodian, treasury, vesting allocation, market maker, or related wallet cluster can change the interpretation. Record balances and labels at a specific time instead of treating concentration as proof of intent.

Ten-signal evidence table

Use each signal to decide what to inspect next. “Can indicate” describes a possible implication; “does not prove” records the false-positive boundary.

Warning-sign evidence table: signal, possible implication, what it does not prove, needed context, and verification method.
Signal	What it can indicate	What it does not prove	What additional context is needed	Source or verification method
Mint authority enabled	The authority can create additional units and increase supply.	It does not prove malicious intent, a planned dump, or an inevitable supply change.	Inspect the authority address, stated issuance policy, timing, and distribution history.	Official Solana token docs and a trusted explorer.
Freeze authority enabled	The authority can freeze token accounts, restricting transfer or burn operations.	It does not automatically mean honeypot behavior or malicious use.	Understand the affected account behavior, project disclosures, authority identity, and history.	Solana token docs and mint/account inspection.
Authority revoked	A selected mint or freeze control path was set to `None`.	It does not prove the token, program, deployer, liquidity, or social claims are safe.	Check which role changed, when it changed, and what other controls or extensions remain.	Solana Set Authority and transaction history.
Young token or pair	There may be limited trading history and little evidence about liquidity behavior.	It does not prove fraud; legitimate launches can also be new.	Compare mint and pool creation times, sustained volume, price impact, and issuer history.	Explorer and pool records with an explicit observation time.
Low liquidity	A trade may move price substantially or make exit difficult.	It is not proof of fraud or a universal definition of a rug pull.	Record venue, pair, pool type, depth near the quote, volume, and timestamp.	Raydium pool guidance plus current pool data.
Liquidity removal capability	An LP token or concentrated-liquidity position may be withdrawable or transferable.	Removal ability is a risk factor, not proof of a malicious exit.	Identify the pool program, position owner, lock terms, active range, and amount removable.	Raydium liquidity-position guide and position history.
Holder concentration	A small set of displayed addresses may have substantial market impact.	It does not establish beneficial ownership or malicious intent without classification.	Separate pools, burns, exchanges, treasuries, vesting, market makers, and related wallets where possible.	Explorer balances, labels, clustering assumptions, and a timestamp.
Metadata characteristics	Missing, mutable, or extension-specific identity data may require closer review.	Polished, immutable, or verified-looking metadata does not establish token safety.	Match mint and program; inspect extensions, URI content, pointer, update authority, and timestamp.	Solana metadata docs and independent URI review.
Social or promotional pressure	Urgency, impersonation, or coordinated promotion may increase social-engineering risk.	It does not by itself establish an on-chain token event or fraudulent identity.	Verify the person or organization independently and compare claims across trusted channels.	FTC consumer guidance and independent identity checks.
Guaranteed-return claims	A promise of guaranteed profit or no risk is a consumer-protection warning sign.	It does not prove a specific contract behavior or settle every fact about the offer.	Check who is making the claim, whether the seller is licensed, what is being requested, and whether evidence is independent.	Investor.gov alert, FTC, and CFTC education.

Off-chain fraud warning signs

A token can have ordinary-looking technical fields while a person or channel is using impersonation, urgency, fake endorsements, or a promise of guaranteed returns. The Investor.gov digital-asset scam alert and FTC cryptocurrency guidance discuss promises of profit, impersonation, and researching the person or company before paying. The CFTC digital-asset red-flags bulletin also cautions that no investment, signal, bot, or algorithm is guaranteed or risk-free.

Pressure to act immediately, keep a conversation secret, or bypass independent checks.
Guaranteed returns, “no risk” language, or requests for an upfront fee to unlock profits.
Impersonation of a team member, celebrity, exchange, regulator, or support representative.
Claims that a game score, bot, or automated checker guarantees an outcome.

False positives and limits of automated safety tools

Enabled mint authority does not prove malicious intent. Enabled freeze authority does not automatically mean honeypot behavior. Revoked authorities do not prove a token is safe. High holder concentration does not establish beneficial ownership without address classification. Low or removable liquidity is a risk factor, not proof of fraud.

Token-2022 is not inherently suspicious. Polished or immutable metadata does not establish token safety. “Unknown,” “not checked,” and “not proof” are meaningful outcomes when evidence is missing. Data can be stale, incomplete, misclassified, or benign in context; no automated checker guarantees safety.

External scanners may be useful optional cross-checks, but each provider has its own coverage, freshness, labels, and methodology. SiCierto does not endorse a third-party score, reproduce its methodology, or produce an equivalent report. A favorable score is not a reason by itself to sign or send funds.

Practical independent-verification steps

Copy the exact mint address and confirm the intended chain and token program; do not rely on a ticker or logo.
Inspect mint and freeze authority roles, authority changes, and Token-2022 extensions using trusted explorer data and official documentation.
Identify the actual pool or pools, venue, pair, pool type, active liquidity range, position custody, and observation time.
Review holder balances while separating known infrastructure addresses and documenting the limits of address labels or clustering.
Check metadata pointers, URI content, update authority, issuer claims, and social accounts independently; missing evidence means uncertainty.
Compare more than one independent source, and record disagreements instead of averaging them into a made-up score.
Never sign a transaction or send funds merely because a game result, scanner score, promotion, or “guaranteed” claim looks favorable.

For reported entries, you can browse reported token-risk entries as a separate reference. A submitted or flagged entry is not automatically a verified finding of fraud. Read the evidence and status rather than treating registry presence as a verdict.

Primary sources and registry methodology

These sources support definitions and consumer-education context; they do not establish a current token finding, competitor ranking, or guaranteed outcome. For how SiCierto separates submitted reports from evidence and status, read the registry methodology documentation. The registry is a reference for reported entries, not an automated real-time analysis or proof that every report is fraud.

Solana token accounts and authoritiesMint authority and freeze authority definitions.
Solana Set AuthorityAuthority changes and removal with None.
Solana token extensionsToken-2022 extension behavior and initialization context.
Solana metadata extensionsMetadata pointer and TokenMetadata context.
Raydium pool typesCPMM and concentrated-liquidity pool distinctions.
Raydium CLMM documentationActive ranges and concentrated liquidity.
Investor.gov digital-asset scam educationGuaranteed-return and impersonation warning signs.
FTC cryptocurrency scam guidanceResearch, contact, impersonation, and payment warnings.
CFTC digital-asset red flagsNo-guarantee and no-risk cautions for tools and investments.

Technical and consumer-protection source notes reviewed for this page: September 2026. Protocol interfaces, listings, balances, and external documentation can change; check the linked source and its date when doing independent research.

Quick boundary questions

Is this a Solana rug-pull checker?: No. It is an educational game and evidence guide; it does not read a supplied mint or return a verified report.
Does revoked mint authority prove safety?: No. It removes one authority role and leaves program behavior, holders, liquidity, metadata, and off-chain claims to investigate.
Is Token-2022 a scam label?: No. Identify the enabled extensions and understand their effects; the token program alone does not establish intent.
Does locked liquidity prove a token is safe?: No. It is one time-sensitive structural signal and does not establish honest code, ownership, or future market depth.
Can any checker guarantee safety?: No. Automated tools can be stale, incomplete, or wrong in context, and no score replaces independent verification.