API reference · Holders & tokens
Token security
Honeypot check: a buy, a transfer and a sell simulated on our node, taxes, owner powers, holders and LP, with a verdict.
- Not on HyperCore: HyperCore spot tokens are not contracts: the token registry and coin detail cover them
GET https://api.femtos.xyz/v1/tokens/{address}/security
Parameters
| Param | In | Example or values | Meaning |
|---|---|---|---|
address | path | <token> (Elysium); <evmToken> (HyperEVM) | Token address |
layer | query | elysium (Elysium); hyperevm (HyperEVM) | EVM layer |
Example
Elysium
curl -H "Authorization: Bearer $FEMTOS_KEY" "https://api.femtos.xyz/v1/tokens/<token>/security?layer=elysium"HyperEVM
curl -H "Authorization: Bearer $FEMTOS_KEY" "https://api.femtos.xyz/v1/tokens/<evmToken>/security?layer=hyperevm"Key: Authorization: Bearer $FEMTOS_KEY. Get a free key, or with no browser through agent onboarding.
Response fields
| Field | Type | Meaning |
|---|---|---|
verdict | ok | caution | danger | honeypot | honeypot: cannot sell, sell tax ≥ 90 % or transfers blocked; danger: a danger check; caution: a warn check |
reasons | string[] | warn / danger findings, strongest first (at most 8) |
simulation | object | {pool, amountIn, canBuy, canSell, canTransfer, buyTax, sellTax, transferTax, buyGas, sellGas, transferGas, revert, …} |
checks[] | object | One per finding. id: can_buy, can_sell, can_transfer, buy_tax, sell_tax, transfer_tax, simulation, owner, ownership_reclaim, access_control, mintable, pausable, blacklist, whitelist, max_tx, max_wallet, trading_cooldown, trading_toggle, tax_modifiable, balance_modifiable, proxy, selfdestruct, external_call, verified_source, spam, top10_share, holders, creator_share, owner_share, liquidity_usd, lp_locked: {id, severity, value, message} |
holders | object | {top10Share, top10EoaShare, totalHolders, creator, creatorShare, ownerShare} |
liquidity | object | {usd, pools, mainPool} |
height | int | Block the checks ran at |
asOf | int | Unix ms of the report |
cached | boolean | Served from the 60 s cache (ageMs old) |
billing | heavy | heavy |
Related: Holders & tokens
- Token registry GET /v1/coins Elysium, HyperCore, HyperEVM
HyperCore tokens with their HyperEVM contract and price. - Coin detail GET /v1/coins/{layer}/{id} Elysium, HyperCore, HyperEVM
One token: its links across layers, the markets it trades on, its 5 largest holders. - Token metadata GET /v1/tokens Elysium, HyperCore, HyperEVM
Metadata of up to 100 tokens: supply, creator, logo and socials when indexed, family, spam. Also POST with a JSON body. - Token overview GET /v1/tokens/{address} Elysium, HyperEVM
One token across all its pools: price, FDV, market cap, liquidity, windows, holders, top pools. - Token across layers GET /v1/tokens/{address}/lifecycle Elysium, HyperCore, HyperEVM
One token from its Elysium launch to its HyperEVM mirror, HyperCore spot and perps, each link proven or marked inferred. - Holders GET /v1/holders Elysium, HyperCore, HyperEVM
Spot balances of a HyperCore token, largest first. - Perp holders GET /v1/holders HyperCore
Largest open positions of a perp, long and short. - Token families GET /v1/token-families Elysium, HyperEVM
Tokens whose balance moves without Transfer logs: Aave aTokens and debt tokens, stHYPE, xStocks. - Family token holders GET /v1/token-families/{token} Elysium, HyperEVM
Holders of one family token with balanceOf at the indexed head. - Token transfers GET /v1/transfers Elysium
ERC-20 Transfer events of one token, newest first. - Spam tokens GET /v1/tokens/spam Elysium, HyperEVM
Tokens the indexer flags as spam, left out of every list, and the latest flag changes.
More
- This page as Markdown
- The whole API reference
- What Elysium serves
- What HyperEVM serves
- The whole API in one Markdown file
- OpenAPI 3.1 document
Agent guide (agents.md)llms.txtOpenAPIMCP serverGet an API keyChangelog