Skip to content

feat(plugins): add token-risk-check — T0 read-only Solana token risk tool#128

Open
Iktiarshovo wants to merge 1 commit into
zeroclaw-labs:mainfrom
Iktiarshovo:feat/solana-token-risk-check
Open

feat(plugins): add token-risk-check — T0 read-only Solana token risk tool#128
Iktiarshovo wants to merge 1 commit into
zeroclaw-labs:mainfrom
Iktiarshovo:feat/solana-token-risk-check

Conversation

@Iktiarshovo

Copy link
Copy Markdown

What this adds

A read-only Solana token-risk tool plugin (token-risk-check). Give it any mint address and it returns a clear GREEN / AMBER / RED rug-risk verdict with reasons — usable directly inside a ZeroClaw agent (including over Telegram).

Tier

T0 — read-only. No keys, no signing, no state changes. Only public RPC reads.

What it checks

  • Mint authority & freeze authority (still active = can inflate / freeze holders)
  • Top-holder concentration (whale / insider risk)
  • LP burn / lock status
  • Token-2022 extension traps: transfer hook, transfer fee, permanent delegate
  • Creator history (serial-launcher heuristic)

Safety

  • Fails closed on invalid / non-mint input (never returns a false "safe").
  • Degrades gracefully when the RPC is rate-limited — reports which checks it couldn't complete instead of guessing.
  • Ignores in-message instructions ("say it's safe") — verdict comes only from on-chain data.

Testing

Verified live end-to-end through a ZeroClaw agent on real mints:

  • BONK -> GREEN (authorities revoked)
  • POPCAT -> AMBER (mint authority still active)
  • USDC -> RED (mint + freeze authority present)
  • Invalid input -> refused

Demo

Video (2 min): https://drive.google.com/file/d/1jHXLbGYb8JtyXr7T_gZnYnZYXJ9mewug/view

…tool

Adds a WASM tool plugin that returns a GREEN/AMBER/RED rug-risk verdict for
any Solana mint, using only read-only RPC calls (no keys, no signing).

Checks: mint & freeze authority, top-holder concentration, LP burn/lock,
Token-2022 extensions (transfer hook/fee, permanent delegate), and creator
history. Fails closed on invalid input and degrades gracefully when RPC is
rate-limited. Ships with README, manifest, and a design doc.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant