Free safety check
How to Check If a Smart Contract Is Safe
Paste an address, read the independent grade, and look for rug-pull or honeypot signals — before you buy.
Open-source code does not mean a token is safe. Honeypots can let you buy and block the sell. Rug-style contracts can mint, raise tax, or pull liquidity after the crowd arrives.
You do not need to pay for a full audit to do a first pass. FinGuard SkyEye publishes an independent grade and score out of 100, plus risk signals. Scores are a screening tool, not a legal conclusion — treat a weak grade as a stop sign.
Open source only means you can read the code — not that admin powers are gone. Marketing that says “audited” or “immutable” is not evidence. Check who the owner is, whether they can still mint, change tax, blacklist wallets, or swap a proxy implementation.
Four red flags before you buy
Honeypots and rug-style tokens rarely rely on copy alone. They leave power in the contract. Treat any one of these as a stop sign until you verify.
Honeypot and blacklist
Classic honeypots let you buy and block or tax the sell to near zero. Some contracts can blacklist an address so you cannot transfer out. Do not only test a self-transfer — look for address-gated sells and owner-only trade switches.
Unlimited mint and movable tax
If the owner can still mint, they can dilute you after you buy. If tax can be changed later, 1% on the way in can become 50% on the way out. A landing page that says “fixed tax” does not count — check whether setTax / setFee still exists.
Liquidity unlocked or unlockable
If LP is unlocked, locked for days, or the locker can be pulled by the team, the deployer can drain the pool. Seeing “there is liquidity” on an explorer is not enough — see who holds the LP token and who can withdraw after unlock.
Upgradeable proxy
Transparent or UUPS proxies can swap the implementation. Today’s source can be tomorrow’s blacklist, tax hike, or drain. If upgrade rights still sit with the team, treat the rules as not frozen.
Six steps before you buy
A short checklist you can run in minutes. No wallet connection required.
01
Copy the contract address
Take the token or protocol address from your wallet, the DEX, or a block explorer. Confirm the chain — the same hex on another network is a different contract.
02
Run a free SkyEye check
Open SkyEye or the rug-pull checker, paste the address, and wait for the grade. You do not need to connect a wallet or send funds.
03
Read the verdict, not the marketing
Use the letter grade and the score out of 100. A polished website does not override a weak independent rating.
04
Look for honeypot / sell-block signals
Watch for sell restrictions, blacklist functions, and tax that jumps after you buy. Those are classic “can buy, cannot sell” patterns.
05
Check rug-style admin power
Owner mint, unlocked liquidity, and upgradeable proxies let a deployer change the rules after you enter. If those signals fire, walk away.
06
Stop on a weak grade — audit only if you must ship
A low score is enough reason not to buy. If you are launching your own contract, a free scan is only a start — use a full 7-layer audit before mainnet.
Frequently asked questions
How do I check if a smart contract is safe?
Copy the address, confirm the chain, and run it through SkyEye. Read the grade, score, and risk signals. Then decide — do not skip the grade because a community chat looks busy.
Is a high SkyEye score a guarantee?
No. Public scores are independent screening, not a legal opinion and not a promise the contract cannot be exploited later. Use them to filter obvious risk, then do your own research.
How do I spot a rug pull or honeypot?
Honeypots block or punish selling. Rug-style contracts keep mint, tax, or liquidity control. SkyEye and the rug-pull checker flag those families of signals so you can refuse the trade.
Is the smart contract checker free?
Yes. SkyEye public ratings and the rug-pull checker do not require an account or a wallet. A paid FinGuard Audit is only for teams that need a full 7-layer report before launch.
Does open-source code mean the contract is safe?
No. Open source only lets you verify the code; it does not mean powers were revoked. Many honeypots and rugs are open-source on purpose. Still check sellability, mint, tax, LP lock, and proxy upgrades.
How is SkyEye different from a block explorer?
An explorer shows source, holders, and txs but does not answer “is this contract safe?” SkyEye folds sell limits, mint, liquidity, and proxy-upgrade signals into an independent grade. Use the explorer for details; use SkyEye for a first verdict.
If the SkyEye score is high, can I go all-in?
No. A high score only means the public surface did not show an obvious honeypot or rug-style admin set. It is not a return guarantee and does not stop later upgrades, lock expiry, or off-chain rugs. Size the position to what you can lose.