The domain says so
A DNS TXT record on the project's domain, officialca=<CA>, or a file at /.well-known/officialca.json. Only whoever controls the domain can publish either.
Proof of origin for Solana tokens
Every launch that gets attention is cloned within hours. Check any contract address, ticker, website or X handle against projects that proved which CA is theirs.
The problem
Copycats relaunch a coin's name, ticker and picture within hours, sometimes several times a day. Buyers searching the ticker can't tell which contract is real, and the project has no way to say so that anyone can check.
Official CA is that way. A project proves its CA with its domain, its creator wallet and its X account, and links here on launch day. Anyone can check in a second.
Dm4R…QpumpOfficial7xKp…9pumpSame tickerH2vt…8pumpGreek EC9wa…LpumpLook-alikeIllustration. The radar catches these with homoglyph-aware matching: 0 and O, l and I, Greek and Cyrillic look-alikes, spaces and emojis.
Certificate of originNo. 0001
Lumen Labs
$LUMEN
Dm4RkV9tPq2wXyZbN6hJcLfA3sGeTu8mWiYoBr1Qpump
How a CA becomes official
A DNS TXT record on the project's domain, officialca=<CA>, or a file at /.well-known/officialca.json. Only whoever controls the domain can publish either.
The wallet that created the coin signs a plain message naming the CA and the project. Free, instant, and it can't move funds. We check it against the creator on-chain.
The project's account tweets the CA with a one-time code. We read the tweet, its author and its timestamp.
Any two proofs from different sources earn the seal; creator wallet plus domain is the strongest pair. We re-check them, and a removed record shows as lapsed.
Copycat radar
For projects
Verify once, then link your certificate in the bio, the website and the launch tweet. The badge updates itself: if a proof lapses, it turns grey.
<a href="https://officialca.fun/t/<CA>">
<img src="https://officialca.fun/badge/<CA>.svg"
alt="Official CA verified" height="28">
</a>