On-chain security analysis — is it a scam or legit?
BNB ChainThe AEON token is a standard ERC-20 implementation with additional administrative controls for minting and pausing.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 29, 2026
The 10 remaining pairs hold $508 between them and are not listed. The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0xc324…5cabNo privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
The mint(address,uint256) function allows the Minter role to create new tokens at will. This can lead to significant dilution of existing token holders' value if the role is compromised or misused.
Restrict the minting authority to a multi-signature wallet or a governance contract, and consider implementing a hard cap on the total supply.
Unresolved
The pause and unpause functions allow the Pauser role to halt all token transfers globally. This creates a risk where users may be unable to move their funds during critical market conditions.
Limit the use of the pause functionality to emergency scenarios only, and ensure the Pauser role is held by a secure, multi-signature entity.
Unresolved
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a wallet, 0xc324…5cab — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The ten largest holders own 86.4% of supply. What remains: 8.3% in wallets, 78.2% in other contracts. 52,186 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as AEON (AEON), market cap $7M, rank #1503. 52,186 holders.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $788K (GeckoTerminal, all pools). 24h trading volume $3.5M (CoinGecko, all markets, daily snapshot). 24h trading volume $555K (GeckoTerminal, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $788K of DEX liquidity across 20 pools. Launch: 95 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The AEON token is a standard ERC-20 implementation with additional administrative controls for minting and pausing. The contract architecture is straightforward and follows established OpenZeppelin patterns. However, the centralization of power in the Minter and Pauser roles introduces significant trust requirements for token holders.
The contract utilizes standard, battle-tested OpenZeppelin libraries for ERC-20 functionality. 7.1 Architecture is modular, and 7.2 Code Security is high due to the use of audited base contracts. 7.3 Access Control is implemented via role-based modifiers, though these roles are highly privileged. 7.6 External dependencies are minimal and well-understood.
7.4 Economic risks are present due to the minting capability, which allows for arbitrary supply inflation. 7.5 Governance is currently centralized, meaning token holders have no say in minting or pausing decisions. 7.8 Operations rely entirely on the integrity of the addresses holding the Minter and Pauser roles.
7.7 Upgrades are not supported as this is a non-proxy contract. The logic is immutable once deployed. This eliminates risks associated with malicious implementation updates but prevents patching future vulnerabilities.
The protocol should consider transitioning the Minter and Pauser roles to a multi-signature wallet or a decentralized governance contract to mitigate the risk of a single point of failure.
Additionally, implementing a time-lock on sensitive administrative actions would provide transparency and protection for token holders. Users should be aware that the supply is not fixed and that the ability to pause transfers can be used to restrict liquidity at any time. We recommend monitoring the addresses assigned to these roles for any suspicious activity.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
