Assume the ticker can be copied
A familiar ticker does not prove identity. Treat every token result as unverified until its Mint matches a trusted reference.
- Ticker ≠ identity.
- Logo ≠ identity.
- Search result ≠ identity.
Avoid social-reply traps
Scammers often reply to real project posts with lookalike domains, fake support accounts or “new contract” claims. Return to the known project domain instead of following the reply.
- Do not trust unsolicited support.
- Do not rush because of a claimed migration.
Verify the Mint and pool separately
A correct Mint should match across project documentation and the DEX route. A project-published pool address adds another independent comparison point.
- Check Mint.
- Check pair/pool.
- Check both assets in the pair.
Use read-only verification first
You do not need to connect a wallet merely to inspect a public token Mint. Do the read-only checks before any transaction request.
- Inspect first.
- Connect only when needed.
- Read every wallet transaction request.