meme-coin-audit

Analyze EVM and Solana token contracts for rug-pull and authority risks.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/AKasem1/claude-bug-bounty --skill meme-coin-audit-akasem1
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: meme-coin-audit
Source: https://github.com/AKasem1/claude-bug-bounty/tree/main/skills/meme-coin-audit
Command: npx skills add https://github.com/AKasem1/claude-bug-bounty --skill meme-coin-audit-akasem1

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you quickly assess meme-coin and token contracts for rug-pull and scam risk by focusing on the underlying authority and trading-control mechanisms that enable exit fraud.

Core Features & Use Cases

  • Pre-dive kill signals: Skip low-signal targets with clear hard/soft indicators such as retained mint/freeze/upgrade powers or risky Token-2022 extensions.
  • Token security audit guidance: Systematically checks eight token-specific bug classes including hidden minting, honeypots, fee manipulation, LP drain, bonding-curve abuse, authority retention, fake renounce patterns, and sandwich amplification.
  • Automation and on-chain verification workflow: Uses regex-based scanning guidance for fast red-flag detection and pairs it with required on-chain checks (mint/freeze authorities, LP status, holder concentration, upgradeability, Token-2022 hook/delegate risks).
  • Use case: Perform pre-investment due diligence for a new token before engaging liquidity or capital, including Solana and EVM meme coins.

Quick Start

Use this skill to assess a specific token’s rug-pull risk by pasting the contract/program code path (or relevant source) and asking for the highest-risk authority and control findings to confirm first.

Frequently Asked Questions about meme-coin-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect a meme coin honeypot or rug-pull before buying?

You can audit Solana Token-2022 tokens for rug-pull risk by verifying on-chain mint, freeze, and upgrade authorities externally. The process specifically checks for risky Token-2022 extensions and hook/delegate risks that could enable exit fraud.

What are the kill signals that indicate a token has high rug-pull risk?

Hard and soft kill signals for rug-pull risk include retained mint or freeze powers, risky upgradeability, and suspicious Token-2022 extensions. Identifying these indicators early allows you to skip low-signal targets and avoid engaging capital in fraudulent tokens.

How do I check if a token contract has hidden minting or fee manipulation?

To check for hidden minting or fee manipulation, apply a token security audit that systematically evaluates eight specific bug classes. This includes scanning the contract logic for unauthorized control mechanisms and verifying LP status and holder concentration externally.

Can I use this approach to audit both EVM ERC tokens and Solana SPL tokens?

Yes, this rug-pull detection approach applies to both EVM ERC-style tokens and Solana SPL/Token-2022 tokens. It systematically checks token-specific bug classes including bonding-curve exploits, authority retention, and fake renounce patterns across both ecosystems.