Quantum Audit Logo

Is Ambire Wallet Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Ambire Wallet WALLET
0x8880…94ae
Ethereum
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

The WALLETToken contract implements basic ERC-20 functionalities with an additional minting capability controlled by a `supplycontroller` address. While core transfer mechanisms appear sound, the ability for a single entity to increase token supply introduces a centralized economic risk. One medium-severity finding related to this minting function was identified.

3 Medium3 Informational
Volume 24h
$244.0K
Liquidity
$828.7K
Price
$0.01811
Token Age
4y
Top 10 Holders
79.2%

Security Findings

3 Med3 Info
Medium

Privileged Token Minting Capability

CP-01The `supplycontroller` address has the ability to call the `mint(address,uint256)` function, which creates new tokens and adds them to the total supply. This means that the controller can increase the total number of tokens at any time, potentially diluting the value of existing tokens held by other users.
IssueThe `supplycontroller` address has the ability to call the `mint(address,uint256)` function, which creates new tokens and adds them to the total supply. This means that the controller can increase the total number of tokens at any time, potentially diluting the value of existing tokens held by other users.
FixToken holders should be aware that the `supplycontroller` can mint new tokens. It is recommended to understand the project's policy regarding token supply increases and to monitor the `supplycontroller` address for any changes or unexpected minting activity. Consider if the project's governance model allows for community input on such critical actions.
StatusUnresolved
Medium

Liquidity not locked

QA-LIQUIDITY0.0% of the pool's LP is burned or time-locked. 98.6% is held, unlocked, by 10 address(es) other than the owner/deployer. One of them — a contract, 0x55e0…a4fa — holds 72.8% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Issue0.0% of the pool's LP is burned or time-locked. 98.6% is held, unlocked, by 10 address(es) other than the owner/deployer. One of them — a contract, 0x55e0…a4fa — holds 72.8% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Medium

The market for this token

QA-MARKETLiquidity $829K (DexScreener, all pools). 24h trading volume $273K (CoinGecko, all markets, daily snapshot). 24h trading volume $244K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $15.23 on 2026-05-13; the price is now 99.8833% below it.
IssueLiquidity $829K (DexScreener, all pools). 24h trading volume $273K (CoinGecko, all markets, daily snapshot). 24h trading volume $244K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $15.23 on 2026-05-13; the price is now 99.8833% below it.
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 79.2% of supply. Of that, 4.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 8.1% in wallets, 66.7% in other contracts. 9,016 holders in total.
IssueThe ten largest holders own 79.2% of supply. Of that, 4.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 8.1% in wallets, 66.7% in other contracts. 9,016 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Listed, but not independently verified

QA-IDENTITYListed on CoinGecko as Ambire Wallet (WALLET), market cap $13M, rank #1139. 9,016 holders.
IssueListed on CoinGecko as Ambire Wallet (WALLET), market cap $13M, rank #1139. 9,016 holders.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Asset class: Governance token

QA-PROFILEA token whose main use is voting on a protocol's decisions (delegation and vote checkpoints in its code). The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Governance. Tokenomics — Supply: mintable with no on-chain cap found. Control: supplycontroller — a contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $829K of DEX liquidity across 3 pools. Launch: 1706 days of market history.
IssueA token whose main use is voting on a protocol's decisions (delegation and vote checkpoints in its code). The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Governance. Tokenomics — Supply: mintable with no on-chain cap found. Control: supplycontroller — a contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $829K of DEX liquidity across 3 pools. Launch: 1706 days of market history.
FixCheck how much of the voting supply insiders hold and what governance can change.
StatusAcknowledged

Category Ratings

TechnicalLow8/10

The WALLETToken contract provides standard ERC-20 functionalities such as `transfer`, `transferFrom`, `approve`, `balanceOf`, and `allowance`. The implementation of these core functions (7.2 Code Security) appears straightforward and does not show immediate reentrancy or integer overflow vulnerabilities. However, the contract is noted to be missing the `totalSupply()` function, which is a standard ERC-20 component. The contract includes a `mint(address,uint256)` function (7.3 Access Control) that allows a designated `supplycontroller` to create new tokens, which is a significant centralized control point. The `changeSupplyController(address)` function also allows the current controller to transfer this power.

GovernanceHigh1/10

The economic model of WALLETToken is heavily influenced by the `supplycontroller` address, which has the sole authority to `mint` new tokens (7.4 Economic). This centralized control over the token supply means that the `supplycontroller` can unilaterally increase the total supply, potentially diluting the value for existing token holders. The `changeSupplyController` function (7.5 Governance) allows this power to be transferred, but it remains a single point of control. There is no explicit governance mechanism for token holders to influence these critical economic decisions.

UpgradesHigh2/10

The WALLETToken contract is not implemented as an upgradeable proxy (7.7 Upgrades). Therefore, the contract's logic cannot be modified or upgraded after deployment. This eliminates upgrade-related risks but means any future changes would require a new contract deployment and migration.

Security Checklist

2/5 checks passed
Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionFail
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

79.2% in top 10
8.1% in wallets66.7% in contracts
Effective Concentration34.8%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$829.0K across 3 pairs
Uniswap v3WETHanalysed$828.7K100.0%Uniswap v4ETH$2850.0%SushiswapUSDT$40.0%

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

Top-1 Unlocked Holder72.8%
Top-3 Unlocked85.9%

Key Addresses

11 addresses
Deployer
0xbf07…5bca
Unlocked LP Held By
0x55e0…a4fa0x9bf3…a63b0x8808…514a0x62d0…370a0x99cd…13840x6ecc…7c1e0x8ff1…335b0x1b26…55620xcd54…88d30x10fd…bae5

What Raised This Score

3 factors
  • Mintable supply — no cap found, dilution unbounded; held by supplycontroller: Other-Contract
  • Liquidity NOT locked (100% of the pool) — who holds it cannot be verified
  • Top-10 concentration > 30% (79.2% total → 34.8% effective; 8.1% in EOAs, 66.7% in contracts; 4.4% burned, locked or in pools excluded)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
FOXMedium RiskStorjToken (STORJ)Medium RiskFTT (FTX TOKEN)Medium RiskMorphoMedium RiskUniswap (UNI)Medium RiskBeamMedium Risk

Would You Like a More Detailed Audit of Ambire Wallet?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit