Early-stage security check — honeypot & rug-pull analysis
BNB ChainGangToken is an ERC-20 implementation featuring centralized control mechanisms via a 'launchpad' role.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
How the supply is spread across holders could not be read — the indexer's holder list does not add up to the supply. Check the largest holders on a block explorer, which reads current balances.
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The 'launchpad' address has the authority to execute 'reclaim' and 'pullFor' functions, which allow it to move tokens from user wallets to the launchpad address. This centralized control effectively grants the controller the ability to seize tokens or manipulate liquidity.
Implement a time-lock mechanism for these privileged functions or transition the 'launchpad' role to a decentralized governance structure to prevent unilateral actions by a single entity.
Unresolved
Liquidity $10K (DexScreener, all pools). 24h trading volume $291K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: 3% on buy, 3.03% on sell. Market: $10K of DEX liquidity across 1 pools. Launch: under a day of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
GangToken is an ERC-20 implementation featuring centralized control mechanisms via a 'launchpad' role. The contract includes administrative functions that allow for token transfers and pair configuration. While the core ERC-20 logic is standard, the centralized control over supply and transfer rules introduces significant trust requirements for token holders.
The contract utilizes standard OpenZeppelin-style ERC-20 logic, ensuring 7.1 Architecture and 7.2 Code Security compliance. 7.3 Access Control is implemented via a custom 'onlyLaunchpad' modifier, which effectively restricts sensitive functions. 7.6 External interactions are minimal, reducing the attack surface for reentrancy or flash loan exploits.
7.4 Economic and 7.5 Governance aspects are heavily centralized under the 'launchpad' address. This entity holds the power to manipulate token flows and pair settings, which directly impacts 7.8 Operations. While this allows for controlled launches, it creates a single point of failure for token holders.
The contract is not upgradeable (7.7 Upgrades), meaning the logic is immutable once deployed. This provides certainty to users regarding the contract's behavior, as the code cannot be altered post-deployment.
Token holders should be aware that the 'launchpad' address possesses significant control over the token's economic parameters and transfer capabilities.
We recommend that the project team considers transitioning the 'launchpad' role to a multi-signature wallet or a decentralized governance contract to mitigate the risks associated with centralized control. Ensure that the private keys associated with the 'launchpad' role are stored in a highly secure environment, such as a hardware security module or a multi-party computation (MPC) wallet, to prevent unauthorized access and potential abuse of the privileged functions.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Add your links and get it Verified
