# RugX: Solana token security scanner

A Solana rug-pull scanner that turns 9 data feeds into one verdict, on web, Telegram and X.

*Daniel · RugX · Spain · 2025 · 2 months*

## The brief

RugX wanted to launch a security brand on Solana: a token scanner anyone could use to spot rug pulls before buying, wrapped in a product ecosystem strong enough to carry its own token launch.

That meant a full marketing site with custom design, a real-time token analysis engine, a pro tier for $RUGX holders, and bots that brought the scanner to where traders actually live, Telegram and X. We designed and built all of it, end to end, in two months.

## What we built

- **Web scanner.** paste an address, get a full risk report
- **Marketing site.** custom design, academy, funnels
- **Analysis API.** 9 sources merged into one verdict
- **Telegram bot.** branded scan cards, rendered as images
- **X bot.** replies to mentions with scan results
- **Pro tier.** wallet-signature gating, no accounts
- **Token claim flow.** cryptographic ownership proof
- **Transparency page.** live team wallets from vesting contracts

## How it works

Every scan fans out in parallel to on-chain RPC and 8+ external providers, then everything is normalized into one report schema consumed by web, Telegram and X alike. Providers time out, disagree and rate-limit, so the aggregation layer degrades gracefully and the report comes back fast and complete anyway. Pro access is stateless: sign a message with your wallet, holdings are verified server-side, and a short-lived session is issued.

## Stack

- **Web:** Next.js, React, TypeScript, Tailwind CSS, GSAP, Framer Motion, Lenis, ECharts
- **On-chain:** Solana web3.js, Metaplex, Wallet Adapter (Phantom/Solflare)
- **Server:** Node.js, Express, Firebase Firestore, Upstash Redis
- **Bots:** Telegraf, Puppeteer rendering, SendGrid

## Numbers

- **9** data sources cross-checked in every scan
- **<5s** from pasting an address to a full report
- **10,000+** tokens scanned in the first weeks
- **4** products shipped from one codebase
- **20+** risk and market signals per report
- **0** passwords stored, auth is wallet signatures

## The hardest part

Making nine unreliable data sources feel like one product. Every provider has different schemas, rate limits, latencies and failure modes, and a scan is only useful if it comes back fast and complete anyway. We built the aggregation layer to fan out requests in parallel, degrade gracefully when a provider times out, and normalize conflicting numbers, liquidity, holder counts and LP locks included, into one coherent verdict.

The other tricky piece was token-gating the pro tier with nothing but wallet signatures: proving ownership and live $RUGX balance server-side without ever creating a user account.

## What the client said

> "I hired Robert to build a Solana token contract checker and the results were excellent. He delivered a platform that verifies token contracts, checks metadata, supply, freeze authority, mint authority, and flags honeypot/rug risks. Robert knows Solana inside out: RPC optimization, Metaplex metadata, and token-2022 standards were all handled cleanly. Code is well structured, fast, and easy to maintain. Great communication and fast iterations. Highly recommend Robert for any Solana/Web3 development work."
> Daniel, Spain, rated 5/5

More work: https://dock30.com/work

## Contact

- Email: crew@dock30.com
- Book a call: https://dock30.com/contact