How to Research an ERC-20 Token Before You Buy

Why On-Chain Research Matters

The barrier to creating an ERC-20 token on Ethereum is essentially zero. Anyone can deploy a token contract in minutes with a copied template. This means the space is flooded with scam tokens, honeypots, and rug pulls alongside legitimate projects.

On-chain research — often called DYOR (Do Your Own Research) — is your first line of defense. Price charts and social media hype can be manipulated. The blockchain cannot.

Step 1: Verify the Contract

The first thing to check is whether the token's smart contract source code is verified on a block explorer. Verified means the deployed bytecode matches published, human-readable Solidity code.

• Verified contract — You can read the code, check for malicious functions (like hidden mint functions or transfer restrictions), and see exactly what the contract does.
• Unverified contract — A red flag. There's no way to know what the code does without reverse-engineering the bytecode. Many scam tokens intentionally leave contracts unverified.

On SharpBlock, verified contracts are marked with a green checkmark and you can read the source code directly on the token page.

Step 2: Check Holder Distribution

A healthy token has its supply distributed across many holders. Warning signs include:

• Top holder owns 20%+ — Unless it's a known contract (LP pool, staking, treasury), a single holder with a large percentage can dump the price at any time.
• Creator still holds a large supply — Check if the deployer address holds significant tokens. Cross-reference with any vesting claims the team has made.
• Very few holders — A token with under 100 holders is extremely illiquid and risky. Even 500 holders is considered early-stage.

Look at the holder distribution chart — ideally, no single wallet (excluding contracts) should hold more than 5-10% of the circulating supply.

Step 3: Analyze Liquidity

Liquidity determines whether you can actually sell your tokens after buying. Key things to check:

• Liquidity pool size — On decentralized exchanges (Uniswap, Sushiswap), the token is paired with ETH or a stablecoin in a liquidity pool. Pools under $50,000 mean even small trades will have massive price impact.
• Liquidity lock — Is the LP locked? If the deployer can remove liquidity at any time, they can perform a rug pull — draining the pool and leaving token holders with worthless tokens.
• 24h trading volume — Compare volume to market cap. A token with $1M market cap but only $500 in daily volume is essentially illiquid.

Step 4: Review Transaction Activity

On-chain activity tells a story. Look at the token's recent transactions:

• Organic vs wash trading — Are there many unique addresses transacting, or is it the same few wallets trading back and forth? Wash trading artificially inflates volume.
• Large sells from team/insider wallets — Track the deployer and early holder addresses. Consistent selling from insiders while promoting "holding" is a classic red flag.
• Contract interactions — Is the token being used in DeFi protocols (lending, staking, farming)? Integration with established protocols signals legitimacy.

Step 5: Smart Contract Red Flags

If the contract is verified, scan the code for these common scam patterns:

• Blacklist/whitelist functions — Functions like setBlacklist(address) that can prevent specific addresses from selling. Used in honeypot scams.
• Hidden mint functions — An owner-only mint function means the deployer can create unlimited tokens and dump them on the market.
• Modifiable tax/fees — Some contracts let the owner set transfer fees up to 99%, effectively trapping your funds.
• Proxy contracts — Upgradeable proxies can change the entire contract logic after deployment. While legitimate projects use proxies, they require extra trust in the team.

Quick Checklist

1. Is the contract source code verified?
2. Is the top holder concentration below 10% (excluding LP/staking contracts)?
3. Is there at least $100K in locked liquidity?
4. Are there 500+ unique holders?
5. Does 24h volume exceed $10K?
6. Is the contract free of blacklist, hidden mint, and modifiable fee functions?

If a token fails more than two of these checks, proceed with extreme caution — or don't proceed at all.