GL1TCH — scan before you buy
A free, open-source token safety scanner for Solana (plus 15 EVM chains). Paste any token
and get a 0–100 risk score with a plain-language reason for every check, in seconds. Read-only:
it never asks for a signature, never touches a wallet, and costs nothing to use.
- Scanner: https://gl1tchbased.xyz/scan
- Safe Swap (Solana & 7 EVM chains): https://gl1tchbased.xyz/safe-swap · Solana Actions & Blinks (Spec v2.4)
- Paid Agent API (x402 v2 · 10 endpoints · 6 chains): https://gl1tchbased.xyz/agents/docs (USDC on Solana, Base, Arbitrum, Polygon, Avalanche, Sei)
- MCP Server & Agent Toolkit: https://gl1tchbased.xyz/api/mcp · gl1tch-agent-toolkit
- Live On-Chain Treasury & Revenue: https://gl1tchbased.xyz/revenue (reads Solana, Base, Arbitrum, Polygon, Avalanche directly on-chain)
- Mobile Prototype (Solana Mobile Wallet Adapter · Android): 52s YouTube Demo ·
mobile/
- Yield X-Ray (multi-chain APY & risk analysis across 7 chains): https://gl1tchbased.xyz/yield
- Rug Radar (risky new launches, swept every 10 minutes): https://gl1tchbased.xyz/radar
- Verdict Anchoring (sealed on Solana via SPL Memo): https://gl1tchbased.xyz/verify-scan
- Proof page (we run the scanner on our own token): https://gl1tchbased.xyz/proof
- Telegram bot: scan from chat, plus Watchtower alerts — https://t.me/gl1tch_infected
- License: MIT
Why it exists
Most tokens launched on Pump.fun collapse shortly after launch (Solidus Labs counted 98.6% of
7M+ tokens from Jan 2024 to Mar 2025 as pump-and-dumps). The warning signs sit in on-chain
state that buyers can't read: a live mint authority, a freeze authority, a hidden Token-2022
transfer fee, unlocked liquidity, bundled sniper wallets, a deployer with a history of rugs.
GL1TCH reads that state, explains it in plain words, and gives it away for free.
What every Solana scan checks
| Check | What it catches |
|---|
| Mint authority | Can someone still print new supply? |
| Freeze authority | Can your wallet be frozen so you can't sell? |
| Transfer tax | Hidden Token-2022 transfer-fee extensions |
| Liquidity | Depth, and fabricated depth (huge pool, no trades) |
| LP locked / burned | Can the dev pull the pool? |
| Top holder / insiders | Concentration and bundled or insider wallets |
| Deployer | The launching wallet's track record across tokens |
| Deployer holdings | How much of the supply the deployer holds right now (dump risk, or exited) |
| Trading activity | Bot volume: thousands of micro-trades, buy-bot skew, the same wallets trading back and forth |
| Linked wallets | A holder count inflated by one network of wallets that fund each other |
| Metadata | Can the name and image still be swapped? |
| RugCheck | An independent second opinion |
A token whose volume is botted, or whose holders are mostly one linked network, can't read better than CAUTION,
whatever its contract looks like. The scan also flags a token that has fallen 85% or more from its peak, and paid
DexScreener promotion. EVM chains use GoPlus for honeypot, sell tax, mintable, ownership, pausable and blacklist
checks, plus the same trading-activity check.
Every scan also feeds the Signal Graph, a cross-scan memory of deployers, so a serial
rugger's next token is flagged. Scoring changes are logged in
docs/scoring-changelog.md.
Use it from your own app (free, no key)
// Full safety report for one token
const r = await fetch("https://gl1tchbased.xyz/api/scan?mint=<address>&chain=solana");
const report = await r.json(); // { verdict, score, confidence, checks[], meta, bottomLine, ... }
// Search by name or symbol across chains
const s = await fetch("https://gl1tchbased.xyz/api/scan?q=bonk").then((x) => x.json()); // { candidates }
Verdicts: CLEAN, LOW RISK, CAUTION, HIGH RISK, RUG-SHAPED, UNKNOWN. The API is rate
limited per IP (40 requests/min), the same for every caller. If you are building an integration
that needs more, ask at [email protected]; it stays free.
Embed a live badge that links to the full report:
<a href="https://gl1tchbased.xyz/scan/solana-<address>">
<img src="https://gl1tchbased.xyz/api/badge?t=solana-<address>" alt="Scanned by GL1TCH" />
</a>
Machine-readable docs for agents: https://gl1tchbased.xyz/llms.txt.
How it's built
flowchart LR
U[Browser · Telegram · API caller] --> S["/api/scan (Next.js on Vercel)"]
S --> RPC[Solana RPC: mint, authorities, holders, deployer balance]
S --> RC[RugCheck: LP lock, insiders, deployer]
S --> MK[DexScreener / GeckoTerminal: market]
S --> GP[GoPlus: EVM checks]
S --> BOT[(Bot on an Oracle Cloud VM: Signal Graph, counters, Watchtower)]
BOT --> TG[Telegram alerts]
| Path | What lives there |
|---|
src/lib/scan.ts, src/lib/scan-multichain.ts | The scan engine: checks, weights, verdicts |
src/app/api/ | Public API routes (scan, badge, radar, stats, agent check) |
src/app/ | The website (Next.js App Router) |
bot/ | Telegram bot, Watchtower sweeps, Signal Graph and counters, stored as files on its VM (no database); hosting in bot/deploy/oracle |
mobile/ | Android prototype (Expo / React Native): share-to-scan, read-only wallet scan over Mobile Wallet Adapter, Sign in with Solana (demo video) |
docs/ | Threat model, risk register, scoring changelog, Signal Graph schema, specs |
remotion/, e2e/ | Video pipeline and browser automation (not needed to run the scanner) |
This is the beginning of the README. Read the rest at the original. Read the full README ↗
