A contract address checker reads the public data behind a token’s contract address and shows what the token is made of: how much money is in its pools, who holds it, whether more tokens can be created, and which rug pull warning signs are present. This guide shows how to check a contract address step by step, how to read the result, and what no checker can tell you.
Last updated Nov 4, 2026
To check a crypto contract address, do these five things.
Every token is a smart contract, and every smart contract has an address: a long string of letters and digits that identifies it on one blockchain. On Ethereum and the other EVM networks it is 0x followed by 40 characters. On Solana it is a string of 32 to 44 characters.
A contract address checker, also called a token scanner or a token risk scanner, takes that address and reads public data about it: the trading pools, the holders, the powers the creator still has and the trading history. It turns what it finds into warning signs and, in Codex, into scores with reasons.
The address matters more than the name. Anyone can create a token with the same name and symbol as a popular one, but every contract has its own address. Checking the address is how you know that you are looking at the token you mean.
Be careful with addresses that arrive in direct messages, in replies under a post, or in links from strangers. Tokens with the same name and symbol exist, and the same project can have a different address on each network. If two official sources give two different addresses, stop and find out why.
A Codex result has two parts: the scores, and the facts behind them. This table shows what each fact tells you and when to worry.
| What you see | What it tells you | When to worry |
|---|---|---|
| Liquidity | How much money sits in the token’s trading pools, and so how much can be bought or sold before the price moves a lot. | A small or empty pool: the price jumps on small trades, and you may not be able to sell. |
| Locked or burned share | How much of the pool’s money the creator cannot take out. | Liquidity that is not locked or burned, or a lock that ends soon. |
| Mint and freeze authority | Whether new tokens can still be created, or the tokens in a wallet frozen. | Either power still open on a new, unknown token. |
| Holders | How many wallets hold the token and how the supply is spread. | A few wallets own most of the supply, or many wallets were funded from the same place. |
| Taxes and honeypot signs | Whether selling is blocked or very expensive. | A honeypot, a blacklist, a high tax, or a tax that the owner can change. |
| Token age | How much history there is to check. | A brand-new token: there is little history and the scores can change quickly. |
| Volume against trades and holders | Whether the trading looks real. | A lot of volume with few trades or few holders can mean bots trading with themselves (wash trading). |
The Codex score is a number from 1 to 99. It is the average of the Trust, Liquidity and Volume scores, and it falls into one of six bands:
| Codex score | Band |
|---|---|
| 90–99 | Very low risk |
| 81–89 | Low risk |
| 71–80 | Medium risk |
| 55–70 | Risky |
| 45–54 | Highly risky |
| 1–44 | Extremely risky |
A high score means fewer warning signs were found in the data that was available. It is an estimate, not a guarantee. How the scores are calculated →
One warning sign is a reason to look closer. Several together are a reason to walk away. The rug pull guide lists all the warning signs.
A checker is fast, but it works from data providers, and data can be late or incomplete. For anything more than a small amount, confirm the key facts yourself:
The mint authority guide and the liquidity lock guide show what to look for.
Codex is for information only and is not financial advice.
Token Search & Risk Scan works with token contract addresses on Solana, Ethereum, BNB Chain, Base, Arbitrum, Polygon, Avalanche, Optimism, Sui, Tron and many other networks. It looks at the liquidity in all the pools of the token together and how much of it is locked or burned, at the holders, at the trades, and at rug pull signals such as open mint or freeze authority, taxes and honeypot code. Pools, liquidity, volume and trades come from GeckoTerminal and DexScreener, and risk signals from sources such as GoPlus, RugCheck and Jupiter.
Which security checks can be run depends on the network. A check that cannot be run is shown as missing data and costs points. Codex has no accounts and no sign-up, and it never asks for a seed phrase or a private key. Methodology →
It is a tool that reads public data for a token’s contract address, such as its pools, holders and permissions, and turns it into warning signs or a score. In Codex it is Token Search & Risk Scan: paste an address and read the Trust, Liquidity, Volume and Codex scores with the reasons behind them.
Codex works with token contract addresses on Solana, Ethereum, BNB Chain, Base, Arbitrum, Polygon, Avalanche, Optimism, Sui, Tron and many other networks. Which security checks are available depends on the network. A check that cannot be run is shown as missing data and costs points.
Not for certain. It shows warning signs, such as liquidity that is not locked, open mint power, a honeypot, or a few wallets holding most of the supply. Labels such as “scam” or “rug pull” in Codex are automatic risk signals from public data. They are not proof, and they can be wrong.
No. A high score means fewer warning signs were found in the data that was available. It is an estimate, it can miss risks, and it is not an audit.
On the project’s own website or social accounts, on a block explorer, or on a chart page. Check that the address matches before you trade, and never take it from a message from a stranger.
It means that a check could not be run for that token or network, for example because a data source did not answer. Codex shows it as missing data and it costs points.