Where the evidence comes from

Solana RPC

Scoring: Scored — Technical controls

• Provides: Token program, supply, decimals, mint authority and freeze authority state, and Token-2022 mint extensions.
• Timing & scope: Read live at report time from the mint account.
• Known limitations: Depends on the configured RPC endpoint; providers can fail, time out, or rate-limit.
• When unavailable: If the mint cannot be read, the report stops with a controlled state — no risk conclusion is drawn.

Solana RPC — getTokenLargestAccounts

Scoring: Scored — Holder concentration

• Provides: The largest returned token accounts and the supply share each represents.
• Timing & scope: Read live at report time.
• Known limitations: Largest token accounts only, not full wallet-owner clustering. Large widely-held tokens may exceed provider limits.
• When unavailable: Shown as insufficient evidence, never as broad or low-risk distribution.

Solana RPC — getMultipleAccountsInfo

Scoring: Scored — Holder concentration (when it adds evidence)

• Provides: The owner authority controlling each of the largest returned token accounts.
• Timing & scope: A second read after the largest accounts are fetched.
• Known limitations: Owner-authority mapping only — not entity labeling, exchange/pool labeling, or full clustering. An owner may be a program, PDA, exchange, or individual wallet.
• When unavailable: If the call fails or partially resolves, status is shown as unavailable or partial and no owner-mapping findings are added.

DexScreener

Scoring: Scored — Liquidity structure and Market behavior

• Provides: Selected-pair liquidity, valuation, 24h volume and transactions, pair age, price movement, and returned-pair distribution.
• Timing & scope: Fetched live from a third-party off-chain API at report time.
• Known limitations: Third-party data that may be incomplete, delayed, or unavailable. Returned pairs are not complete global liquidity; centralized-exchange and unreturned venues are excluded.
• When unavailable: Shown as insufficient evidence to assess liquidity or momentum, not as low or high risk.

Metaplex, Token-2022 metadata, and external metadata URI

Scoring: Scored — Social / narrative identity

• Provides: Name, symbol, description, links, logo, update authority, and metadata mutability.
• Timing & scope: On-chain metadata read at report time; an external metadata URI is fetched through a hardened server boundary (IPFS and Arweave gateways only).
• Known limitations: Project-provided and unverified. It is identity/usability information, not security evidence or endorsement.
• When unavailable: Missing metadata is shown as insufficient evidence for the identity category.

Project-provided metadata fields

Scoring: Scored — Social / narrative identity

• Provides: Website, X, Telegram, Discord, docs, and GitHub links extracted from metadata.
• Timing & scope: Derived from metadata at report time. Links are not crawled or verified.
• Known limitations: Unverified links, not verification or endorsement. No website/social scraping or account verification is performed.
• When unavailable: Absence of links is shown as insufficient evidence.

Bounded Solana RPC signature search

Scoring: Not scored — experimental, excluded from Overall

• Provides: The earliest observed transaction within a bounded search, the observed fee payer, and authority-overlap cross-references.
• Timing & scope: Bounded search at report time; deeper launch history runs only on explicit user action.
• Known limitations: Evidence-only. Not proof of the real creator, ownership, common control, or intent. Not full wallet clustering.
• When unavailable: Shown as unavailable or partial; it never affects any score.

Local Evidesa snapshot file

Scoring: Not scored — informational

• Provides: Prices this Evidesa instance recorded on previous reports for the token, with observed high/low and drawdown.
• Timing & scope: Recorded locally when reports are generated, if snapshot storage is enabled.
• Known limitations: Incomplete local history, not full market history or continuous monitoring. May be disabled and may not persist on ephemeral deployments.
• When unavailable: Shown as disabled, insufficient history, or unavailable; never a collection failure that affects scoring.

Creator DNA scoring, related-wallet clustering, and transfer-graph analysis are not implemented and contribute nothing to scoring. See the methodology and limitations for what this evidence does and does not establish.