Verify a token

Anyone can launch a token, and a name on a screen proves nothing. The token page at /token/<token address> reads a token's records on Solana and lists what it found in plain words, so a buyer can see before buying what a creator could do afterwards, and a creator can see what buyers will see.

Not a safety rating. The page lists facts and what they mean. It never says a token is safe, because no list of facts can. A token can pass every line and still lose you everything. Latch is unaudited, and the page is part of Latch.

How to use it

1. Copy the token's address (also called the mint) from your wallet or an explorer, and paste it into the box on the token page. You can also open /token/ followed by the address.
2. Read the red flags and warnings first. They are sorted worst first, and each one says what it means.
3. Open Every check to see the full list. Each check says what was found, and how to look at the same thing yourself in an explorer. You never have to take the page's word for it.
4. If the token has a Latch pool, a Buy or sell box appears under the facts. It trades straight with the pool. Read the fee note before you press anything.

The page needs no wallet and no account to read. It asks the network directly from your browser. If the connection is busy or refuses a search, the affected checks say could not check instead of guessing.

What the labels mean

What each check looks at

Nobody can print more tokens. The mint authority is the power to create new tokens. If someone still holds it, they can make as many as they like and sell them, which pushes the price down for everyone else. A Latch launch revokes it in the same step that creates the supply. If it is present, that is a red flag.

Nobody can freeze your tokens. A freeze authority can stop a holder from moving or selling. Latch never sets one. If one exists, that is a red flag.

Supply. The Latch launch page always creates 1,000,000,000 tokens with 9 decimals. A different number is a warning, not a verdict: it only means the token was probably not made on the Latch page, so Latch's promises may not apply.

A Latch pool for this token. A Latch launch puts the whole supply into a Meteora DAMM v2 pool that pairs the token with wrapped SOL (the pool's form of SOL). If none is found, the pool checks are skipped and the page says "No Latch pool found". That does not mean the token is bad. It may trade somewhere else, and nothing here covers that.

The liquidity is locked. Liquidity is the SOL and tokens inside the pool. Locked means no wallet can ever withdraw them. The page compares the pool's total liquidity with its permanently locked part. A sliver of unlocked dust is normal. A gap of 0.01% to 10% is a warning. 10% or more is a red flag, because whoever holds the unlocked part can withdraw about that share of the SOL that buyers put in. Anyone can add liquidity to a pool at any time, so a gap does not always mean the creator did it. The page lists the pool's positions and who holds each one.

How much of the supply is in the pool. At launch the whole supply is in the pool. After that, buying moves tokens out, and trading fees are paid partly in the token. The page shows the share still in the pool. If less than half is there, it warns, because that can be heavy buying or part of the supply never being put in, and the page cannot tell which.

Who holds the locked position. Every pool position has a token (an NFT) whose holder can claim that position's trading fees. Two cases matter:

• A wallet holds it. This is a warning: that wallet can claim the fees (paid in SOL and in the token, which it can then sell), and the vault's fee split does not apply. The liquidity itself stays locked either way.
• A vault launch account holds it. The fees pass through the Latch vault, which splits them between the creator and the protocol. This is not a safety statement: it only tells you who applies the split.

Fee split recorded in the vault, and who receives the creator's share. When the vault holds the position, the page reads the vault's record: the creator's share, and the address that receives it. If that address is the creator's wallet, it is unchanged. If it is a different wallet, the creator pointed the share elsewhere, and the page flags it as a warning, because that is how fee rights get handed over quietly. If the launch names an X account, the share waits in an escrow for that account's owner.

Name and symbol can be changed. The Metaplex metadata holds the name, symbol and a link to the image. If it is marked frozen, the on-chain name and symbol can never change. If it is changeable and a wallet holds the update authority, the creator can rename the token instantly, with no delay and no public queue, and renaming is how a token is made to look like a popular one. If the vault manages the name with a delay, a change must be queued publicly first, and the page shows any change that is queued right now.

Where the image and description live. Freezing the on-chain fields does not freeze the file the link points to. A link to IPFS or Arweave is permanent. An ordinary web link can be changed by whoever controls that website.

What the creator wallet holds. The creator is found from the vault record or the pool. The page shows how much of the token that one wallet holds. Over 1% is a warning and over 20% is a red flag, because the creator can sell it into the pool. Holding zero here proves little: the same person can hold the token through other wallets.

Early buys from wallets the creator funded. This check loads after the others. It reads the pool's first trades: the first 10 minutes after trading opened, or the first 25 buys. If the creator bought inside the transaction that opened the pool (the launch page's optional first buy, capped at 10 percent), the page says so plainly, because that buy was made in the open. For up to 10 other early buyers it looks at each wallet's first few transactions for SOL sent by the creator wallet. Any hit is a warning, and a red flag if those wallets bought 20% of the supply or more. This is a heuristic. Funding through an exchange or a chain of wallets is not detected, and a hit is not proof of bad intent. A pool with a very long history shows "could not check" on a public connection rather than guessing.

Biggest holders outside the pool. The largest wallet that is not the pool itself. 20% or more is a warning and 50% or more is a red flag.

Can Meteora's program be changed. Meteora's program owns the pool and enforces the lock. If its upgrade authority exists, whoever holds that key could in principle change how pools and locks behave. The page shows the address. Whether it is a multisig (several people must sign) or one person is for you to find out. Run solana program show cpamdpZCGKUy5JxQXB4dcpGPiikHawvSWAd6mEn1sGG to check.

Can the vault program be changed. The same question for Latch's own vault, shown only when the vault holds this token's position. Whoever can upgrade the vault can redirect every launch's fees.

What registering with the vault proves

A vault launch record shows that the position belongs to a Meteora pool, that its liquidity was locked when it was registered, and that the vault holds the position token. It does not prove that the mint authority is empty, that the whole supply sits in the pool, that the Latch site made the token, or that the creator keeps the split they chose. That is why the page checks each of those itself, and why a creator can skip the vault entirely.

Buying from the token page

The Buy or sell box uses Meteora's own swap through your wallet. It shows what you pay, what you should get, the least you will accept, the price impact and the fee. Three things to know:

• The fee starts high. Latch pools charge 15% on a trade at the start, easing to 1% over ten minutes. The page reads the live fee from the pool. Most of the fee goes to the creator and the protocol, so buying in the first minutes costs noticeably more.
• Slippage is how far the price may move against you before the swap stops instead of going through. The default is 1%.
• The creator may hold tokens. They can buy first from another wallet, and can sell into the same pool.

The page also links to Jupiter, a swap app that routes across many pools. That is the way to pay with another token, such as a tokenized stock. It only works if Jupiter has found the pool, which can take a while after a launch.

What this page cannot tell you

• Who the creator is, or whether they are honest.
• Whether the creator holds tokens through wallets the page does not know about.
• Whether the project has any value, or whether the price will rise.
• What the token's website or social accounts say.
• Anything about pools on other exchanges.
• Whether Latch's own code has bugs. It has not been audited.

For what you still have to trust in the whole system, read the security model.

For creators

Buyers will see this page. To make yours read well without cutting corners: freeze the metadata if you do not need to change it and host the image on IPFS or Arweave, keep the position in the vault with a split you are willing to stand behind, do not move the fee recipient without telling people, and do not leave a large balance in the launch wallet. A page full of "nothing wrong found" is not an endorsement, and a warning is not an accusation. It is what a careful buyer will read first.