Safety and privacy
Scam tokens
The checks Hermit runs before you can buy a Solana token.
Anyone can make a Solana token in a minute and call it whatever they like. Most new ones are traps: no one to sell to, a creator who can freeze your coins, or a copy of a famous name. These are the checks Hermit runs before you buy in Spot and Memes.
Where the tokens come from
Section titled “Where the tokens come from”The Spot and Memes lists only show tokens on Jupiter’s verified list with at least $50K of liquidity, sorted by 24-hour volume.
Type two or more letters in search and Hermit looks wider: verified tokens first, then everything else Jupiter’s search finds. Those extra results carry tags from Jupiter’s audit of the token.
The tags
Section titled “The tags”| Tag | What it means |
|---|---|
| Unverified | Not on Jupiter’s verified list. Anyone can make a token with any name. Always red. |
| Freeze on | The creator can freeze holders’ tokens so they can’t be sold. Red on an unverified token, amber on a verified one (USDC has a freeze authority too). |
| Mint on | The creator can still mint more. |
| Low liquidity | Under $50K, so trades move the price a lot. Red under $5K. |
| Top holders 62% | The biggest holders own half the supply or more. |
| New | Less than 7 days old. |
When you pick a token, the same findings show as amber lines in the buy box, like “Its creator can still mint more of it.” or “Less than a day old.”
What Hermit won’t buy
Section titled “What Hermit won’t buy”Some tokens can’t be bought at all. The Swap button stays grey and the reason shows in red:
- Under $5K of liquidity: “Only $3.1K of liquidity, under Hermit’s $5K minimum, so Hermit won’t buy it.”
- Unverified, and the creator can freeze holders: “Its creator can freeze holders’ tokens so they can’t be sold, so Hermit won’t buy it.”
- An unverified token Hermit couldn’t check: “Hermit couldn’t check WIF, so it won’t buy it. Search for it again.”
You can still buy an unverified token that passes these. The review then opens with the strongest warning we have, and the token’s full mint address so you can compare it with the one you meant: “WIF is NOT on Jupiter’s verified list. Anyone can make a token with this name. Check its full mint is the one you mean: …”
Price impact
Section titled “Price impact”Under the amount, the buy box shows something like “Price impact 0.42%, slippage up to 0.5%”.
| Price impact | What happens |
|---|---|
| Over 2% | The line turns amber. |
| Over 5% | The review warns: “Price impact is 6.1%. You get noticeably less than the market price.” |
| Over 15% | Hermit won’t send it. The box says “Too much to send: try a smaller amount.” |
Selling works the same way, with “Try selling less.” at the top end.
Checks on Jupiter’s transaction
Section titled “Checks on Jupiter’s transaction”When you tap Approve on the review, Jupiter builds the swap transaction for your wallet. Before Face ID (Touch ID on a Mac) unlocks the key, Hermit reads that transaction and refuses it unless:
- your wallet pays the fee and is the only signer,
- every program it calls is one a Jupiter swap uses,
- no token account changes owner or delegate, and any closed account pays back to you,
- the SOL it sends stays within the swap, and its priority fee is 0.01 SOL or less.
Then Hermit runs it once on Solana as a test. The test has to take no more than the quoted amount, give you at least the quoted minimum after slippage, and move no other token out of your wallet.
If any of that fails, nothing is signed and you see why, like “A test run of Jupiter’s transaction doesn’t match the quote: another token would leave your wallet. Nothing was signed.” The reason shows on the review, and nothing has left your wallet.
Buys also count toward your daily limit. See the spending policy.