Skip to content
Solana

Scan

Read any Solana token, pool or program

What it can do, what is verified, what to check. A rule-based Hook Score with every rule shown.

Automated screening, not an audit. Read from Solana mainnet through reel’s RPC.

How the Hook Score works

Rule-based and published in full. Pass earns full points, review half, fail and not checked none; a failed rule with a cap limits the final score. Holdings and trading activity add zero points. Automated screening, not an audit.

reel pools12 rules · 100 points
  • Program upgrade key retired · Program10 pts

    The upgrade authority can replace reel's code until it is revoked; it is the largest power over every pool (PROGRAM.md §10).

  • Hook Blocks and settings frozen · Pool terms10 pts

    Frozen terms mean nobody, the admin included, can change fees or rules after launch.

  • A swap pays at most 10% · Pool terms10 pts

    The ceiling of everything a swap can pay, all blocks at their maximum.

  • Sells pay at most 5% · Pool terms5 pts

    High sell charges make leaving costly; the program caps them at 20%.

  • No fragile price reference · Pool terms5 pts

    Market Guard halts every swap if its Pyth feed goes stale; sibling-pool references can move within a slot.

  • Launch liquidity locked · Liquidity10 pts

    Until it unlocks, the launch owner can't withdraw the liquidity the pool opened with.

  • Base supply fixed · Base token5 pts

    A base mint authority could print tokens into the pool.

  • Base can't be frozen · Base token5 pts

    A freeze authority over the base can freeze holders and the vault.

  • No base permanent delegate · Base token5 pts · cap 39

    A permanent delegate could pull tokens out of holders' accounts.

  • Base hook is reel-hook or none · Base token5 pts

    Any other transfer hook could refuse transfers; reel-hook only enforces the launch's guards.

  • Quote can't freeze the vault · Quote token5 pts

    A quote mint's freeze authority (USDC has one) can freeze the pool's quote vault.

  • Quote can't be paused or pulled · Quote token5 pts

    A Pausable quote stops swaps while paused; a permanent delegate could move vault funds.

Any mint10 rules · 100 points
  • Mint authority revoked · Supply20 pts

    A live mint authority can print new supply and dilute every holder.

  • No freeze authority · Holder safety15 pts

    A freeze authority can stop any holder's tokens from moving.

  • No permanent delegate · Holder safety20 pts · cap 39

    A permanent delegate can move or burn tokens from any holder, at any time.

  • Tokens can be transferred · Transfers0 pts · cap 9

    A non-transferable token can never be sold.

  • New accounts start usable · Transfers5 pts · cap 39

    With DefaultAccountState frozen, a new holder can't move tokens until the issuer thaws them.

  • Transfers can't be paused · Transfers10 pts · cap 39

    A Pausable mint's authority can stop every transfer, swaps and withdrawals included.

  • No unknown transfer hook · Transfers10 pts

    A transfer hook runs a program on every transfer, which can refuse it; an authority can change that program.

  • No transfer fee · Transfers10 pts

    A transfer fee withholds part of every transfer; its authority can raise it.

  • Name and link are fixed · Metadata5 pts

    A metadata authority can rename the token or repoint its link, the basis of copycat swaps.

  • Displayed balances are not rescaled · Metadata5 pts

    ScaledUiAmount lets an authority change how every balance displays.

Any program5 rules · 100 points
  • Code can't be replaced · Mutability40 pts · cap 74

    An upgradeable program can be replaced with any code by its upgrade authority, including code that moves funds it controls.

  • No single key can upgrade it · Mutability15 pts

    An on-curve upgrade authority is one private key; a program-derived authority is usually a multisig or governance program.

  • Not deployed in the last two weeks · Operations15 pts

    Code that changed recently has had little time in production; each upgrade needs its own review.

  • Build verified against public source · Provenance20 pts

    A verified build ties the deployed bytes to a public commit. reel's scanner can't check this yet, so it earns nothing.

  • A known program · Provenance10 pts

    Known infrastructure has public documentation and a track record; an unknown program needs its own research.

Strong 85–100Good 75–84Needs review 60–74High attention 40–59Critical gaps 0–39