# HostDeFi > Non-custodial trading app with a built-in safety layer: a free token-safety > scanner that grades any token from A+ to F using on-chain checks (mint and > freeze authority, liquidity depth, holder concentration, contract flags), > plus swaps on Solana (Jupiter-routed) and major EVM chains (KyberSwap-routed). > No signup, no custody, no HostDeFi token. The scanner is free (fair use: > 100 checks/day per IP); swaps carry a disclosed 3% platform fee. ## Core - [HostDeFi app](https://hostdefi.com/): swaps on Solana and the major EVM chains, wallet-native, no KYC - [Token safety scanner](https://hostdefi.com/scan): paste any contract address or ticker for a free A+ to F on-chain risk grade - [Guides library](https://hostdefi.com/guides/): plain-English token-safety guides (every guide listed below) - [Open data](https://hostdefi.com/data/): weekly token safety snapshot - free, citable CSV, updated Mondays - [Free API docs](https://hostdefi.com/docs/api/): free tier (100 checks/day per IP), keys, and the x402 machine-payable lane - [Sitemap](https://hostdefi.com/sitemap.xml) ## Guides (token-safety library) - [Airdrop Scams, Decoded — Dusting, Drainer Links and Fake Claims](https://hostdefi.com/guides/airdrop-scam-mechanics/): Unsolicited tokens in your wallet are bait, not a gift. How dusting, fake claim sites, and approval-phishing 'claims' actually drain ... - [Security Audit Badges — What an Audit Covers, and What It Never Can](https://hostdefi.com/guides/audit-badges-what-they-cover/): An audit is a scoped code review at one commit — not a seal of honesty. What "audited" badges prove, what they can't (rugs, dumps ... - [Bridge-Wrapped Tokens — Who Actually Holds the Keys to Your Asset?](https://hostdefi.com/guides/bridge-wrapped-tokens-custody-risk/): A wrapped token is an IOU minted against collateral locked on another chain. Who guards that collateral — a multisig, an MPC set, one ... - [How Copy-Trading Rugs Work — When the Wallet You Follow Is the Trap](https://hostdefi.com/guides/copy-trading-rug-mechanics/): Copy-trading tools broadcast your next move to the person you follow. How seeded 'winner' wallets, doctored PnL and token-gated alpha ... - [Crypto Dark Pools — Where Big Orders Go to Hide](https://hostdefi.com/guides/crypto-dark-pools-explained/): Dark pools quote privately and fill through aggregators, hiding order flow from front-runners. How on-chain dark pools work, why one ... - [Dead Token Forensics — How Projects Actually Die On-Chain](https://hostdefi.com/guides/dead-token-forensics/): Tokens rarely die in one candle — they drain, hollow out, and go quiet in a recognizable sequence. How to autopsy a chart before you buy ... - [The EU Privacy Coin Delistings — What the 2027 Rules Actually Say](https://hostdefi.com/guides/eu-privacy-coin-delistings/): The EU's anti-money-laundering regulation forces regulated exchanges to drop privacy coins like Monero and Zcash by July 2027. What the ... - [Fake Communities & Bot Holders — Spotting Manufactured Hype On-Chain](https://hostdefi.com/guides/fake-community-bot-holders/): Holder counts, busy Telegrams and viral engagement can all be purchased by the thousand. Where manufactured communities come from, why raw ... - [Fake Volume & Wash Trading — The On-Chain Tells](https://hostdefi.com/guides/fake-volume-wash-trading/): Volume is the most-faked number in crypto. Learn the wash-trading tells: sibling-wallet loops, bot ping-pong, volume that dwarfs liquidity ... - [Freeze-Authority Abuse — Anatomy of a Frozen-Wallet Trap](https://hostdefi.com/guides/freeze-authority-abuse-case/): A case-style walkthrough of how a live Solana freeze authority becomes a trap: winners frozen mid-pump, AccountFrozen errors at sell time ... - [Honeypot Variants — Sell-Tax Traps, Blacklists and Conditional Blocks](https://hostdefi.com/guides/honeypot-variants-sell-tax-blacklist/): Honeypots don't all block sells the same way. A field guide to the main variants — 100% sell taxes, blacklists, whitelist windows, balance ... - [How Honeypot Tokens Trap You — And How to Spot One Before You Buy](https://hostdefi.com/guides/how-honeypot-tokens-work/): A honeypot token lets you buy but blocks you from selling. Here's exactly how the trap is built at the contract level, the on-chain signals ... - [How to Read a Token Risk Scan — Every Field, Explained](https://hostdefi.com/guides/how-to-read-a-token-risk-scan/): What each part of a token risk scan actually means — risk level, liquidity, mint & freeze authority, holder concentration, sell simulation ... - [Jupiter's Verified List — What Verification Actually Means (and Doesn't)](https://hostdefi.com/guides/jupiter-verification-what-it-means/): On Solana, Jupiter's verified list is a legitimacy screen, not an endorsement: it confirms a mint is the real token behind a name and ... - [Liquidity Locks — What They Prove, and What They Don't](https://hostdefi.com/guides/liquidity-locks-explained/): A liquidity lock parks LP tokens with a custodian on a timer — it blocks one specific rug, and only until the clock runs out. How lock ... - [LP Tokens & Burned Liquidity — Why 'LP Burned' Matters](https://hostdefi.com/guides/lp-tokens-and-burned-liquidity/): LP tokens are the redeemable claim on a trading pool — whoever holds them can empty it. Burning them destroys that claim for good. How AMM ... - [MEV Sandwiches — Why Your Fill Was Worse Than the Quote](https://hostdefi.com/guides/mev-sandwiches-for-buyers/): A sandwich attack buys right before your swap and sells right after it, taxing you through price impact. How the attack works on Ethereum ... - [Mint & Freeze Authority on Solana, Explained — What "Renounced" Really Means](https://hostdefi.com/guides/mint-and-freeze-authority-explained/): On Solana, mint and freeze authority decide whether a deployer can print new supply or freeze your tokens. What each one is, why an active ... - [Multisig vs Single-Key Treasuries — Who Really Controls the Project's Funds?](https://hostdefi.com/guides/multisig-vs-single-key-treasuries/): A project's treasury custody tells you how many people must cooperate to take the money. What deployer wallets control, when a multisig is ... - [No-KYC Swaps — What the Label Actually Promises (and What It Doesn't)](https://hostdefi.com/guides/no-kyc-swaps-what-it-means/): A no-KYC swap means no account and no identity documents — not invisibility, and not exemption from the law. What non-custodial no-KYC ... - [How Presale & IDO Scams Work — The Playbook, Stage by Stage](https://hostdefi.com/guides/presale-scam-mechanics/): Presale and IDO scams follow a repeatable script: manufactured hype, an allowlist that flatters you, a raise, then a soft or hard rug. Here ... - [Privacy Coins vs Privacy Middleware — Two Different Bets](https://hostdefi.com/guides/privacy-coins-vs-privacy-middleware/): Monero-style privacy coins bake anonymity into the chain; middleware like shielded pools adds privacy on top of transparent chains. How the ... - [Proxy Contracts — When 'Renounced' Hides an Upgrade Switch](https://hostdefi.com/guides/proxy-contracts-hidden-upgrade-risk/): An upgradeable proxy lets someone replace a token's entire logic after you buy — even when ownership looks renounced. How proxies work, how ... - [Pump.fun Launches — Mechanics and the Risk Profile That Comes With Them](https://hostdefi.com/guides/pumpfun-launch-risk-profile/): Bonding-curve launchpads price a token before any DEX pool exists, disable mint and freeze by design, and migrate liquidity at graduation ... - [Reading a DEX Chart for Structure, Not Price — A Safety Lens](https://hostdefi.com/guides/reading-dex-charts-for-structure/): Forget predicting the next candle. A DEX chart read as a structural document reveals who got the supply at launch, whether the pool can ... - [Reading Holder Distribution — What Whale Concentration Really Tells You](https://hostdefi.com/guides/reading-holder-distribution/): Top-10 holder percentages look simple but lie constantly. How to separate LP, locker, and burn wallets from real whales, trace shared ... - [Anatomy of a Rug Pull — The On-Chain Sequence, Step by Step](https://hostdefi.com/guides/rug-pull-anatomy/): A rug pull follows a predictable on-chain sequence: seed liquidity, attract buyers, then drain it. Here's each stage, the signals visible ... - [Shielded Balances and Viewing Keys — Auditable Privacy, Explained](https://hostdefi.com/guides/shielded-balances-and-viewing-keys/): Shielded balances hide amounts and links on-chain; viewing keys let you reveal them selectively to an auditor, exchange or counterparty ... - [Sniper Bots & Bundled Launches — Reading a Token's First Block](https://hostdefi.com/guides/sniper-bots-bundled-launches/): A token's opening seconds decide who can dump on whom. How sniper bots race pool creation, how dev-side bundles fake organic demand across ... - [Solana Confidential Balances — Token-2022's Encrypted Amounts](https://hostdefi.com/guides/solana-confidential-balances/): Solana's Token-2022 confidential transfer extension encrypts balances and transfer amounts at the token level. How it works, what auditors ... - [Stablecoin Depeg Risk — What Backs the Peg, and What Breaks It](https://hostdefi.com/guides/stablecoin-depeg-risk/): Fiat reserves, crypto overcollateralization, algorithms — each peg design fails in its own way. The early warning signs of a depeg, why ... - [Token Approvals — How Wallets Get Drained and How to Revoke](https://hostdefi.com/guides/token-approval-drains-and-revoking/): Most wallet drains don't steal your seed phrase — they use a permission you signed. What ERC-20 approvals and SPL delegates actually grant ... - [Token Impersonation — Name, Symbol and Metadata Red Flags](https://hostdefi.com/guides/token-impersonation-red-flags/): Anyone can name a token "USDC" — token metadata is free text, not identity. How impersonators exploit names, symbols, logos and fake ... - [Token Taxes, Transfer Fees & Slippage — Where Your Trade Actually Goes](https://hostdefi.com/guides/token-taxes-slippage-transfer-fees/): Buy and sell taxes, fee-on-transfer tokens and slippage tolerance decide how much of your trade actually reaches you. How these mechanics ... - [The Tornado Cash Case — What It Means for Ordinary Crypto Users](https://hostdefi.com/guides/tornado-cash-case-for-users/): The prosecution of Tornado Cash's developer became the defining test of crypto privacy law. What actually happened, where the case stands ... - [How to Verify a Token's Contract Address Before You Buy](https://hostdefi.com/guides/verify-token-contract-address/): Anyone can launch a token with any name — only the contract address is identity. The canonical-source chain for finding the real one ... - [Rugged? What to Do in the First Hour — A Practical Checklist](https://hostdefi.com/guides/what-to-do-after-a-rug/): A calm, ordered checklist for the hour after a rug: confirm what actually failed, revoke approvals, isolate the wallet, capture evidence ... ## Podcast - [Crypto Scam Radar (audio RSS)](https://hostdefi.com/podcast/feed.xml) - [Crypto Scam Radar (video RSS)](https://hostdefi.com/podcast/video.xml) ## Machine-payable API (x402, for AI agents) - Discovery manifest: https://hostdefi.com/.well-known/x402 - Price catalog (JSON): https://hostdefi.com/api/v1/x402/pricing - Token safety verdict: GET https://hostdefi.com/api/v1/x402/token-risk/{chain}/{address} - Free-form verdict: POST https://hostdefi.com/api/v1/x402/token-risk - Batch verdicts (up to 10): POST https://hostdefi.com/api/v1/x402/token-risk/batch - Pre-graduation Solana signals: GET https://hostdefi.com/api/v1/x402/signals/solana/{mint} - Authority quick-check: GET https://hostdefi.com/api/v1/x402/authority/solana/{mint} - Wallet portfolio audit: POST https://hostdefi.com/api/v1/x402/portfolio - Trend-radar alerts: GET https://hostdefi.com/api/v1/x402/radar - Radar alert history: GET https://hostdefi.com/api/v1/x402/radar/history - Rug/collapse ledger (dated gate exits): GET https://hostdefi.com/api/v1/x402/obituaries - Graded token listing per chain: GET https://hostdefi.com/api/v1/x402/listings/{chain} - Weekly safety-snapshot dataset: GET https://hostdefi.com/api/v1/x402/datasets/safety-snapshot - Buy a 30-day API key with one x402 payment: POST https://hostdefi.com/api/v1/x402/keys - x402 provider-risk grade (vet a seller before paying it): GET https://hostdefi.com/api/v1/x402/provider-risk?resource={url} - x402 provider-risk full dataset: GET https://hostdefi.com/api/v1/x402/provider-risk/all - Executable EVM swap quote (ready-to-sign tx, non-custodial; 3% native-coin fee priced in): GET https://hostdefi.com/api/v1/x402/swap/evm/quote?chainId={id}&sellToken={addr|native}&buyToken={addr|native}&sellAmount={baseUnits}&taker={addr} - EVM swap price preview: GET https://hostdefi.com/api/v1/x402/swap/evm/price?chainId={id}&sellToken={addr|native}&buyToken={addr|native}&sellAmount={baseUnits} - Payment: x402 v1 + v2 dual-stack, USDC per call (Solana; Base/Polygon/Arbitrum/Avalanche offered where available); charge-on-success only. - MCP server (streamable HTTP, x402-paid tools): https://hostdefi.com/api/v1/mcp - Free tier + keys: https://hostdefi.com/docs/api/ · OpenAPI: https://hostdefi.com/api/v1/openapi.json - Agent card: https://hostdefi.com/.well-known/agent.json ## Notes - Risk grades derive from observable on-chain signals, not editorial opinion. - Every published market figure is computed from a dated snapshot and labeled "as of". - Not financial advice.