- Curated — native coins and the stablecoins Hashlock runs itself (
verified: trueinGET /v1/assets). - Listed — tokens that passed automated safety and traction checks (
verified: false,sourcesays how). Every app shows them as unverified next to their contract address. A symbol anyone can copy is not an identity: check the address before you trade.
How a token gets listed
From a launchpad, automatically. Hashlock watches new launches and queues each token as a candidate. A candidate is re-checked every hour for 7 days; it is listed the first time it passes, and dropped if it never does.
Only chains this deployment supports are watched.
By request, with an API key. Any token on a supported EVM chain or on Solana can be submitted:
taker scope. Each account may send 20 listing requests an hour. A token checked within the last hour is answered from that check, without a new one.
The checks
A token must pass all of them.Safety
EVM tokens- Source code verified.
- Not a honeypot: it can be sold, and the whole balance can be sold.
- No buy, sell or transfer tax.
- No unlimited mint, no blacklist, no pausable transfers, no hidden or reclaimable owner, no owner-adjustable balances or taxes, not upgradeable.
- Our own transfer test: a transfer is simulated on chain from a real holder, and must arrive whole.
- A classic SPL token. Token-2022 mints are refused, because Hashlock’s Solana escrow settles classic SPL tokens only.
- No mint authority and no freeze authority. On classic SPL these are the only ways a token can stop a holder, so there is no transfer test.
- No authority that can change balances, and transferable.
USDC.e, USD₮, USDC and the like are refused).
Traction
The top-10 share leaves out the token itself, burn addresses and locked holders, and the pools and launchpad contracts Hashlock recognises: on EVM chains the Uniswap v4 pool manager and the launchpads’ own contracts (a Uniswap v2 or v3 pair still counts as a holder); on Solana the Meteora, Raydium LaunchLab and CPMM pool vaults and Jupiter Lock vesting escrows.
Wait or reject
A check the token’s own content fails — a honeypot flag, a tax, a mint authority, a look-alike symbol, a transfer that reverts for every holder tried — is a reject, and it is final. Anything that time can change or a node outage could cause — traction not there yet, a scanner or node that did not answer — is a wait.When a listed token closes
Listed tokens are re-checked daily. A token closes when:- its market falls below the bar: market cap, liquidity, 24h volume or pair age (holder count and the top-10 share only gate the first listing);
- it fails a safety check — a close for safety is final;
- it has not been traded on Hashlock for 3 months since it was listed or last reopened.
POST /v1/assets. A token closed for inactivity reopens only through POST /v1/assets, once it passes every check. Curated assets never close automatically.
Security data
