Add rug-pull protection to your Ethereum bot in 5 lines

If your bot, wallet or launchpad touches freshly deployed ERC-20s, every one of them is a coin flip: honeypot, hidden mint, unlocked LP, or a deployer who has already rugged ten tokens this week. You can reimplement honeypot simulation and bytecode analysis yourself, or you can ask an API.

Here is the whole thing.

5 lines

npm install @mik3fly-lab/rektradar-sdk

import { RektRadar } from "@mik3fly-lab/rektradar-sdk";



const rr = new RektRadar({ apiKey: process.env.REKTRADAR_KEY });



const verdict = await rr.token("0xTOKEN");

if (verdict.score >= 70) return; // high risk: skip the trade

verdict.score is 0-100 and verdict.flags is a list of machine-readable red flags (hidden_mint, lp_not_locked, ownership_not_renounced, ...). Targeted lookups like this are real-time for everyone. No key? It still runs, anonymously, on the free tier.

No signup to try it

The base URL is https://api.rektradar.io. Anonymous calls work:

curl https://api.rektradar.io/v1/token/0xTOKEN

A key (free or paid) lifts the rate limit and removes the delay on the live feed.

The interesting part: react before the rug

A verdict that arrives 10 minutes late is worthless, so the activity flow (new deploys, fresh rugs) is the real product. On a free key it is delayed about 10 minutes; on a paid key it is real-time. Every response carries dataDelaySeconds (0 = real-time, 600 = delayed).

Poll the REST feed:

const { rugs, dataDelaySeconds } = await rr.rugs({ since: "24h" });

Or subscribe to the push stream and act the moment liquidity is pulled:

import WebSocket from "ws";



rr.stream({

  events: ["new_token", "rug"],

  WebSocket,

  onMessage: (e) => {

    if (e.type === "rug") notifyHolders(e.data);

  },

});

Prefer server-side push? Register an HTTPS endpoint and RektRadar POSTs signed events to it:

import { verifyWebhook } from "@mik3fly-lab/rektradar-sdk";



const ok = verifyWebhook(rawBody, req.header("X-RektRadar-Signature") ?? "", SECRET);

if (!ok) return res.sendStatus(401);

What it is (and is not)

Basic honeypot checks are commodity - several providers give them away free. The edge here is the proprietary intel on top: the deployer graph (who deployed, funded by whom), reused drainer-kit bytecode clusters, rug forensics, and the real-time new-deploy / pre-rug feed.

• REST + WebSocket + signed webhooks


• Official TypeScript SDK (zero runtime deps, isomorphic)


• OpenAPI 3.1 reference:
  

Free to start. Wire the five lines into your buy path and stop trading into honeypots.