In short
- Work through the categories in a fixed order so you cannot skip the boring ones.
- Treat unavailable data as uncertainty, never as a clean result.
- A single score is a summary, not a verdict — read what produced it.
Use a fixed order
The most common failure in reviewing a token is not missing a check — it is stopping early because the first two things looked fine. A fixed order defeats that, because you go through it whether or not you have already formed an opinion.
Contract permissions first, because they decide whether anything else can be taken away from you. Then liquidity, because it decides what an exit costs. Then holder concentration, then ownership and admin control, then deployer history, then trading restrictions, and finally external reputation signals. That is also the order the report itself is organised in.
Treat missing data as uncertainty
Every check that cannot run is listed as unavailable and reduces the report's confidence score. It never reduces the risk score, and that asymmetry is deliberate: a token nobody could examine must not end up looking better than one that was examined and found wanting.
In practice this means a low risk score with weak confidence is one of the least informative results you can get. It says the scan did not find problems, and it also says the scan could not look very hard. Read the two numbers together or you will systematically misread thin reports as good ones.
The first scan is not the last
Almost everything a scan measures can change: liquidity can be withdrawn, ownership can be transferred back, taxes can be raised, an implementation behind a proxy can be swapped. A scan describes a moment.
Monitoring exists for that reason, and it is honest about its limits too — checks run on a schedule, not instantly, so a change can happen between checks. Use it to notice material movement, not as a tripwire that will fire before anything can go wrong.
This guide is educational. Cryptoassets are high risk and you could lose all money used to buy them. ScanZX reports observed warning signs and data gaps at scan time — it never certifies that a token is safe. Nothing here is financial advice or a recommendation to buy or sell.