How to verify a token contract

How to check a token's contract address in THORWallet and in a block explorer, so you can tell the real token from an imitation.

Updated 2 min read
Short answer

Open the token in THORWallet, copy its Contract Address and compare it with the address published by the project. A token name can be copied by anyone. The contract address cannot.

On this page

Anyone can create a token with the same name and symbol as a well-known one. What they cannot copy is the contract address. Checking it takes a minute and protects you from imitation tokens.

What THORWallet shows

On screenMeaning
Verified with YesTHORWallet's token list recognises this contract.
Verified with No, or the red label Unverified TokenThe contract is not on the list. Be cautious.
Risk with Malicious, or the banner Flagged as maliciousThe contract is marked as a scam token. It has no price in THORWallet and cannot be swapped.

Check the contract address

  1. On the wallet home screen, tap the token to open its asset page.
  2. Find the row Contract Address and tap the copy icon next to it.
  3. Open the project's official website, or a known price-tracking site such as CoinGecko or CoinMarketCap, and find the contract address for the same network.
  4. Compare the two addresses. Every character must match. Check the start and the end at least.

Make sure you compare addresses on the same network. A token can have a different contract on Ethereum, on Base and on BNB Chain.

Look it up in a block explorer

  1. On the asset page, tap Explore. A block explorer opens with your own address on that network, for example Etherscan for Ethereum.
  2. Paste the copied contract address into the explorer's search field.
  3. On the token's page, look at the name and symbol, the number of holders and the links to the project.

A real, widely used token usually has many holders and a long history. A copy often has few holders and was created recently. No single sign proves that a token is genuine.

Note

Explore is not shown for Monero, because Monero addresses cannot be looked up on a public explorer.

Before you add a custom token

When you add a token by contract address, THORWallet loads its details under Verify token details: Ticker, name and Decimals. Check that they match the token you expect. If THORWallet shows This token is flagged as malicious, tap Cancel.

If the addresses do not match

Do not swap into the token and do not send it anywhere. If it arrived in your wallet without your action, leave it alone. See Stay safe from scams.

Common questions

What does Unverified Token mean in THORWallet?

THORWallet's token list does not recognise this contract. That alone does not prove a scam, but be careful and compare the contract address with the project's official source before you use the token.

What does Flagged as malicious mean?

The contract is marked as a scam token. THORWallet shows it without a price and does not let you swap it. Do not follow links or messages that promote it.

Where do I find the contract address of a token?

Open the token from your wallet home screen. The asset page shows a row called Contract Address with a copy icon.

Two tokens have the same name. Which one is real?

The one whose contract address matches the address published on the project's official website. Names and symbols can be copied.

Does a coin like BTC or ETH have a contract address?

No. The native coin of a network has no contract. Only tokens issued on a network have one.

Was this article helpful?