Trust nothing, check everything

Verify it yourself

Every number on this site comes from public Solana data. Here is how to confirm all of it without trusting this site at all.

The only identifier that matters

The mint address. Names, symbols and images can be changed by whoever holds the metadata authority; the mint address cannot.

DhCywpJmr3w16JHne2R8FVwK2uWtR5ZbXuaKrLT1Xh9w

Read the mint yourself

curl -s https://api.mainnet-beta.solana.com -X POST \
 -H 'content-type: application/json' \
 -d '{"jsonrpc":"2.0","id":1,"method":"getAccountInfo",
      "params":["DhCywpJmr3w16JHne2R8FVwK2uWtR5ZbXuaKrLT1Xh9w",{"encoding":"jsonParsed"}]}' | python3 -m json.tool

In the output, mintAuthority and freezeAuthority are the two headline authorities. null means revoked and permanent. Anything else is an address that can still act.

Check the extensions

In the same output, extensions lists the Token-2022 features. Look for permanentDelegate (can move your balance), transferFeeConfig (skims transfers, and whose transferFeeConfigAuthority can raise it) and transferHook (a program that can reject transfers).

Check the supply

curl -s https://api.mainnet-beta.solana.com -X POST \
 -H 'content-type: application/json' \
 -d '{"jsonrpc":"2.0","id":1,"method":"getTokenSupply",
      "params":["DhCywpJmr3w16JHne2R8FVwK2uWtR5ZbXuaKrLT1Xh9w"]}'

Or just use an explorer

Solscan shows the same fields with no command line. If this site and an explorer ever disagree, believe the explorer — or better, believe the RPC call above, which is what both are reading.

What "verifiable" is worth

It does not make a token safe. ZOLTAN is verifiably risky: you can confirm for yourself that its keyholder can freeze and seize. The point of verifiability is that you never have to take a project's word for anything — including this one's.

ZOLTAN / Verify it yourself