Early-stage security check — honeypot & rug-pull analysis

Is Agent ID a Scam?

.AI

BNB Chain

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked Oct 25, 2026 · 1 audit on recordNew Launch · 3h old

Chart

50/ 100

Medium RiskHow is this score calculated?

How the score breaks downratings: 10 is safest

Technical8/10 Governance7/10 Upgrades8/10 Checks passed7 of 7 Findings1 High · 1 Medium · 1 Low · 7 Info10

SummaryAI Copilot

The BinanceAgentTaxToken is a complex, tax-enabled token implemented as an EIP-1167 minimal clone.

Read the full analysis

What raised the score

A privileged address can replace a contract every transfer depends on; held by tokenmodule: Other-Contract
Owner can change the buy/sell tax; held by migratemodule: Other-Contract, shareholdermanager: Multisig, vault: Other-Contract
Liquidity < $50k
Volume/Liquidity > 15×
Code: Rounding Loss Due to Division Before Multiplication

Exact factors

A privileged address can replace a contract every transfer depends on; held by tokenmodule: Other-Contract
Owner can change the buy/sell tax; held by migratemodule: Other-Contract, shareholdermanager: Multisig, vault: Other-Contract
Liquidity < $50k ($12,148 across 1 pairs — thin market)
Volume/Liquidity > 15× (38.7× — wash-trading signal)
Code: Rounding Loss Due to Division Before Multiplication (Low, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (3h old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Oct 257 of 7 checks passed

Contract verifiedVerified

OwnershipRenounced

MintNo mint

Liquidity lockLocked

UpgradeabilityFixed code

HoneypotNone found

Buy / sell tax0% / 0%

Holders

as of audit · Oct 25, 2026310 holders

ContractsWalletsDEX poolsEveryone elseBubble area = share of supply

49.4%of supply sits with the top 10 holders

Contractstreasury, vesting, bridge, staking1.5%
Walletsanonymous holders, free to sell14.8%
DEX poolsthe pools' own liquidity33.1%
Everyone else300 holders50.6%

Effective concentrationwhat the score reads15.4%

How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 25, 2026

Liquidity

as of audit · Oct 25$12.1K

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$12.1KShare of depth100.0%

LP Burned100.0% · ≈ permanent lock

LP Locked100.0% · Null Address

Security Findings

1 High1 Medium1 Low7 Info

High

Centralized Control Over Core Logic

The postInitialize function allows a privileged address to change the external contracts that the token relies on for core operations. This means the controller can redirect token logic at any time.CP-03

Issue

The postInitialize function allows a privileged address to change the external contracts that the token relies on for core operations. This means the controller can redirect token logic at any time.

Fix

Restrict the ability to change core dependencies to a multi-signature wallet or implement a time-lock to provide transparency to users.

Status

Unresolved

Medium

Dynamic Fee Manipulation

Multiple functions allow privileged addresses to modify transfer fees and tax collection parameters, which can be used to drain value from users or alter token economics unexpectedly.CP-07

Issue

Multiple functions allow privileged addresses to modify transfer fees and tax collection parameters, which can be used to drain value from users or alter token economics unexpectedly.

Fix

Set hard caps on the maximum fee that can be charged and require a time-lock for any changes to fee structures.

Status

Unresolved

Low

Rounding Loss Due to Division Before Multiplication

The _doDispatchFee function performs division before multiplication, which can lead to precision loss and minor discrepancies in fee calculations.CD-01

Issue

The _doDispatchFee function performs division before multiplication, which can lead to precision loss and minor discrepancies in fee calculations.

Fix

Reorder operations to perform multiplication before division to maintain precision.

Status

Unresolved

Info

Privileged Control Over Transfer Path

Privileged functions can toggle the 'swapping' state, which directly impacts whether transfers or liquidity operations are permitted, effectively allowing the controller to freeze or manipulate trading. Ownership is renounced, so no one can call these functions now.CP-05

Issue

Fix

Implement clear event logging for all state changes and limit the scope of the swapping switch to prevent arbitrary trading halts.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 49.4% of supply. Of that, 33.1% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 14.8% in wallets, 1.5% in other contracts. 310 holders in total.QA-HOLDERS

Issue

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

310 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

310 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

Liquidity burned — cannot be withdrawn

100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY

Issue

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

The market for this token

Liquidity $12K (DexScreener, all pools). 24h trading volume $470K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $12K (DexScreener, all pools). 24h trading volume $470K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Meme token

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: launched on four.meme, a meme launchpad. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $12K of DEX liquidity across 1 pools. Launch: launched on four.meme, under a day of market history.QA-PROFILE

Issue

Fix

Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.

Status

Acknowledged

Info

Recently launched — less than a day of market history

The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT

Issue

Fix

Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 25

Executive SummaryWhat the contract is and what the review found

The BinanceAgentTaxToken is a complex, tax-enabled token implemented as an EIP-1167 minimal clone. The architecture relies heavily on external modules and privileged roles to manage token logic, fee structures, and liquidity operations. While the code is modular, the high degree of centralization and the ability for privileged addresses to alter core transfer logic and fee parameters introduce significant trust requirements for token holders.

Technical8/10Low risk

The contract utilizes a modular architecture with clear separation between tax logic and token state. 7.1 Architecture is well-structured for a tax-token, though 7.2 Code Security is impacted by complex state dependencies. 7.3 Access Control is heavily reliant on external modules like tokenmodule and taxvault. 7.6 External dependencies are significant, as core transfer logic depends on addresses set via postInitialize.

Governance7/10Low risk

7.4 Economic and 7.5 Governance risks are high due to the extensive control privileged roles have over fees and liquidity. Functions like onMigrate and onBondingTrade allow for dynamic fee adjustments that directly impact user balances. There is no on-chain governance mechanism, meaning control is entirely centralized in the defined modules.

Upgrades8/10Low risk

7.7 Upgrades are not applicable as the contract is an EIP-1167 minimal clone, which is immutable by design. 7.8 Operations are stable, but the inability to upgrade the logic means any discovered vulnerability in the implementation cannot be patched via proxy updates. The implementation is fixed at deployment.

Final RecommendationWhat to do about this score

Token holders should be aware that the token's transfer logic and fee structures are subject to change by privileged modules.

We recommend that the project team implement a multi-signature wallet or a time-lock for all privileged functions to mitigate the risk of unauthorized or malicious state changes. Furthermore, ensure that all external modules interacting with the token are audited and secured, as the token's functionality is fundamentally tied to their correct operation. Any future iterations should consider reducing the number of privileged functions to minimize the trust surface.

Contract & Record

1 audit on record

TypeBinanceAgentTaxToken

NetworkBNB Chain

Token age3h

Contract0x4783…4444

Deployer0xc48e…21f9

Badge for your website

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History

Oct 25, 202650Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the .AI contract address?

The Agent ID (.AI) contract on BNB Chain is 0x478318f7ae11140a30c6cd1940b9f9069b9f4444. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.