Contracts that generate a "crypto scam score" often rely on identifying structural conditions such as owner-controlled permissions that enable exit restrictions or supply manipulation. A core pattern involves transfer restrictions like whitelist-only exits, where only approved addresses can sell tokens, effectively locking out others. This is mechanically implemented through require() checks or blacklist mappings in the transfer function, reverting transactions for non-whitelisted or blacklisted addresses. Such patterns are detectable through code inspection without trading activity. The score typically aggregates these contract-level signals to assess the likelihood of scam-like behavior, focusing on mechanisms that can trap liquidity or enable sudden supply inflation.
This pattern becomes risk-relevant when the controlling authority can modify whitelist or blacklist entries post-launch, preserving the ability to block sales selectively. In such cases, buyers may be unaware of exit restrictions until attempting to sell, which can result in trapped capital and forced losses. Conversely, the presence of whitelist or blacklist functions alone does not confirm malicious intent. Legitimate projects sometimes use these controls for regulatory compliance, fraud prevention, or staged token releases. The key distinction lies in owner mutability and transparency: immutable or time-locked controls reduce risk, while dynamic, opaque modifications raise it.
Additional signals that would shift the assessment include the presence of active mint or freeze authorities. If mint authority remains with the deployer without clear operational justification, the risk of arbitrary supply inflation increases, which can dilute holders and undermine token value. Similarly, an active freeze authority can pause transfers on individual wallets, potentially used to enforce compliance or, conversely, to selectively lock out sellers. Observing upgradeable proxy patterns without multisig or timelock protections also heightens risk by enabling sudden contract logic changes. Conversely, verified renunciations of mint and freeze rights, transparent governance, and multisig controls would mitigate concerns and lower the scam score.
When combined with thin liquidity pools or low market capitalization, these structural risks can produce pronounced negative outcomes. For instance, cliff unlocks of large token allocations absorbed by shallow pools often trigger extended price declines rather than discrete drops, exacerbating losses for holders unable to exit. The presence of exit-blocking mechanisms like whitelist-only sales or blacklists can amplify this effect by preventing orderly sell-offs, effectively creating soft honeypots. However, in deeper pools with active market participation and transparent controls, the same contract features might pose less systemic risk. Thus, the realistic range of outcomes spans from manageable operational controls to severe liquidity traps, depending on the interplay of contract permissions and market conditions.