Skip to main content
Anyone can mint a token called NVDAx. It will have the right ticker, a plausible name, and in a wallet it will look exactly like the real one. The question “is this the real NVDAx” cannot be answered by looking at what the token calls itself.

​
Verified by who serves the metadata

A token’s metadata lives at a URI the mint points to. Stonkpile checks which host serves that URI. A token calling itself NVDAx whose metadata is served from the issuer’s own domain is the issuer’s token. One served from anywhere else is not, however convincing the name.
This is why the check survives a copycat that gets everything else right. A fake can copy the symbol, the name, the decimals and the image. It cannot serve metadata from a domain it does not control.

​
Why not a list of known mints

A curated list of addresses goes stale the moment an issuer lists something new, and every index built on one silently under-reports. Reading the metadata host instead means a newly issued token is recognised the first time the index rebuilds, with no human in the loop.

​
The four verdicts

​
What this does not cover

The universe is built from Solana’s verified token list, which is also where every other index we know of builds from. Issuers that mint into allowlisted wallets never reach that list, so their tokens do not appear here.That is a real gap and it is worth knowing about. Reading issuer registries directly is the work that closes it.
Verification also says nothing about whether a token can be sold. A perfectly verified token with no pool behind it is still something you cannot exit. That is a separate question and it has its own answer.