Methodology
Rapport combines public on-chain records with third-party scanners. Every figure on a report names its source. This page explains how the numbers are produced and where they stop being reliable.
Risk score
Each check returns one of three states: flagged, clear or no data. Only flagged checks add to the score, by severity, capped at 100. Any critical flag sets the level to Critical regardless of the total. With fewer than four checks completed the level is “Insufficient data” — a missing signal is never treated as a clean one.
| Severity | Points | Examples |
|---|---|---|
| Critical | 40 | Honeypot, owner can change balances, deployer linked to honeypots, sell tax ≥ 30% |
| High | 20 | Mint or freeze authority, unverified source, unlocked liquidity on a young token, top-10 ≥ 50% |
| Medium | 8 | Upgradeable proxy, blacklist, pausable transfers, top-10 ≥ 30%, deployer holds ≥ 10% |
| Low | 3 | Ownership not renounced, mutable metadata, token younger than 72 hours |
Levels: 0–14 low · 15–39 medium · 40+ high · any critical flag → critical.
Holder concentration
Liquidity pools, burn addresses and lock contracts hold supply without controlling it, so they are set aside before measuring concentration. Exchange wallets are not yet removed automatically and can inflate the figure for listed tokens. Free EVM sources list only the top 10 holders.
Deployer activity
The deployer is the wallet that created the token contract or mint. Outflows are the deployer’s recent transfers of this token; they may be sales, distributions, vesting or moves between the same person’s wallets. The dollar value is the net outflow at today’s price — an estimate, not realised profit.
Revenue
Revenue appears only for tokens tied to a protocol tracked by DefiLlama. Fees are what users pay; revenue is the share the protocol keeps. Both are before costs and emissions, and neither necessarily reaches token holders.
Sources
- Token metadata & supply
- Chain RPC (Alchemy, Helius), with public RPC fallback
- Holders
- RugCheck & Helius (Solana), GoPlus or Moralis (EVM)
- Security checks
- GoPlus, RugCheck, on-chain proxy slot reads
- Deployer
- Etherscan (Ethereum), GoPlus + archive RPC search (Base, BNB), RugCheck + Helius (Solana)
- Market
- DexScreener
- Revenue
- DefiLlama fees & revenue
Freshness
Reports are cached for 15 minutes. After that, the cached report is shown while a new one is built in the background, and the page says when it was last updated. If sources fail, the last good report remains available.