On-Chain Due Diligence Checklist: 10 Steps Before You Buy Any New Token

New tokens launch every hour. Most of them will fail, and a meaningful percentage are outright scams. The difference between smart early investors and people who lose money consistently often comes down to one thing: a systematic due diligence process applied before every buy. This 10-step checklist covers the essential checks you should run on any new or unfamiliar token before committing capital.

Step 1: Verify the Contract

Start at the block explorer (Etherscan, BscScan, Basescan, etc.). Is the contract source code verified and published? An unverified contract is an immediate red flag — you cannot audit what you cannot read. Look for: a visible Solidity or Vyper source file, a matching compiler version, and constructor arguments that match the deployed state. If the contract uses a proxy pattern, check both the proxy and implementation addresses.

Step 2: Check the Deployer History

The wallet that deployed the token contract reveals a lot. Click through to the deployer address and examine its transaction history. Has this wallet deployed other contracts? Are those other contracts abandoned, reported as scams, or associated with known fraud? Serial deployers of failed or scam projects are a strong predictor of future behavior. A deployer with a clean history and only one or two contracts is lower risk than one with dozens of failed or abandoned projects.

Step 3: Audit the Token Distribution

Check the token holder list on the block explorer. If the top 3–5 wallets control more than 50% of the supply, the token is highly centralized and vulnerable to a developer dump. Legitimate projects typically distribute supply more broadly, with team allocations locked in a vesting contract rather than held in a standard EOA wallet. Verify that team wallets are actually in a timelock or vesting contract — not just manually locked.

Step 4: Confirm Liquidity Lock Status

Open the liquidity pool address on the DEX and check whether LP tokens are locked in a recognized liquidity locker (Team.Finance, Unicrypt, PinkLock). Verify the lock duration — a 30-day lock is not meaningful protection. Look for locks of at least 6 months, ideally 12 months or longer for new projects. Check when the lock expires: an expiring lock means the developer can drain liquidity on that date.

Step 5: Run a Honeypot and Tax Simulation

Use the CoinLaunch Rug Checker or GoPlus directly to simulate a buy and sell transaction. Confirm that sell transactions succeed at the expected tax rate. Verify that the buy tax and sell tax are both declared and reasonable (under 5% for each is standard). Check for hidden owner functions that can change tax rates or blacklist wallets.

Step 6: Verify the Audit

If the project claims to have a smart contract audit, find the actual report — not just the badge or claim. Audits from recognized firms (CertiK, PeckShield, Hacken, Quantstamp, Trail of Bits) are publicly searchable. Verify the audit date, the audited contract version (does the hash match the deployed contract?), and the severity of any findings. An audit with unresolved critical findings is nearly as dangerous as no audit at all.

Step 7: Research the Team

Search for each named team member across LinkedIn, GitHub, Twitter, and prior crypto projects. Can you confirm their identity independently? Have they delivered on previous projects? Are they active in public crypto communities with verifiable histories? Anonymous teams can still build legitimate projects, but the risk profile is significantly higher without accountability.

Step 8: Check the Unlock Schedule

Review the full vesting schedule from the whitepaper or tokenomics document. When do team tokens unlock? When do seed and private sale tokens unlock? Are there any unlocks in the next 30–90 days that could create significant sell pressure? Use CoinLaunch's presale and token pages to track upcoming unlock events for listed tokens.

Step 9: Verify Social Proof Authentically

Fake followers and bot-driven engagement are rampant in crypto. Instead of looking at raw follower counts, look at engagement quality: are replies substantive? Are the community members asking real questions and getting real answers? Check the project's GitHub for actual code commits. Look for coverage from credible crypto news outlets — not just paid press releases. A small, engaged genuine community is more valuable than 50,000 fake Twitter followers.

Step 10: Check Trading Pairs and Volume Authenticity

Finally, review the token's trading pairs on DEX aggregators. Is volume real or wash traded? Wash trading is identifiable when a single wallet or a small cluster of wallets is responsible for the majority of volume, buying and selling between themselves. Check on-chain volume sources rather than relying solely on aggregator numbers. Legitimate tokens have organic buy and sell activity from diverse wallets.

Run this checklist consistently, and you'll filter out the vast majority of scam and high-risk tokens before they cost you. Bookmark the CoinLaunch Rug Checker as your starting point for steps 2, 4, and 5 — it automates the most time-consuming on-chain checks in seconds.