Open source, free, yours
Don't want the bot? Take the rug protection anyway.
You do not have to buy anything. You do not even have to download PumpStriker. If all you walk away with is the ability to build your own bot that eats fewer rugs, using the checks we ground out through real experiments, that is a win. Happy to share some of my work.
(For an unknown reason, GitHub shadowbanned my account. Until that clears, any download or update is served from another source, not from GitHub.)
What RugKit is
RugKit is the token-safety layer behind PumpStriker, pulled out on its own. You hand it a Solana token address, it hands back a plain report: SAFE, CAUTION, or DANGER, with the exact evidence behind every call. Drop it into your own bot and your entries stop walking into honeypots and mint rugs.
It is read-only and keyless. It never touches your wallet, never signs, never moves funds. The only thing it does is look, explain, and warn. It is the safety work, not the secret sauce: the part worth sharing so nobody has to relearn it the expensive way.
The checks, and why each one matters
This is the part people pay months of trial and error for. Here it is, laid out.
Who controls the token?
The fastest rugs are baked into the mint itself. These are hard fails, not warnings.
- ▸Mint authority. Is it revoked? A live mint authority can print infinite supply and dump on you.
- ▸Freeze authority. Is it revoked? A live freeze authority can lock your wallet so you can never sell.
- ▸Blacklist / pausable authority. Hidden functions that can block your address or pause transfers.
- ▸Token-2022 hostile extensions. Transfer hooks, permanent delegate, non-transferable, default-frozen: the new rug vectors.
Can you actually sell?
A token you can buy but never exit is the classic honeypot. We test the exit, not just the entry.
- ▸Sellability simulation. We route a real sell through Jupiter. If it cannot route out, it is a trap.
- ▸Buy / sell tax. A tax high enough to make selling pointless is a honeypot in disguise.
- ▸Transfer fee. The Token-2022 fee extension read straight from the mint, not from a promise.
Who holds it, and is the liquidity real?
A token where a handful of wallets own everything is a rug waiting for one click.
- ▸Holder concentration. Top-holder share and real public float, after excluding known LP, burn, and lock addresses.
- ▸LP status and pulls. Is liquidity locked or burned, or dev-held and ready to be pulled? Plus stale-pool detection.
How did it really start?
The story is in the first blocks: who funded the early buyers, and what the dev has done before.
- ▸Insider and bundle clustering. Early wallets sharing one funder, or bundled into a single launch tx, controlling the supply.
- ▸Dev wallet history. Dev holdings, dev sell behavior, and whether the deployer has rugged before.
A second opinion, and a live watch
Never trust a single source, and never assume safe stays safe.
- ▸RugCheck cross-validation. An independent risk score and rugged flag, so no single check decides alone.
- ▸Live watch mode. The open version of Rug Cancel: it re-checks while you hold and alerts the moment a safe token turns dangerous.
Grab it, or ask for it
Building your own bot? Take this as a starting point so it ships with fewer rugs from day one. The code and updates come from another source while the GitHub situation clears, so the fastest way to get the current drop is to ask directly.
Prefer the whole thing already wired together? The full PumpStriker bot is free too, and its execution layer is MIT-licensed. More about who builds this.
RugKit flags risk, it does not promise safety. A token that passes every check can still turn on you later, which is exactly why the live watch mode exists. It is a tool for research and safer building, not financial advice. Always do your own research. Read the Risk Disclaimer.