The ClankerToken is an ERC-20 compliant token with cross-chain functionality integrated via the Superchain Token Bridge. The architecture relies on standard OpenZeppelin libraries for voting and permit functionality. While the core token logic is robust, the protocol grants significant power to the Superchain Token Bridge, which can mint or burn tokens at will. 7.1 Architecture: Standard ERC-20 with cross-chain extensions. 7.2 Code Security: High, utilizing audited OZ contracts. 7.3 Access Control: Centralized via Bridge. 7.4 Economic: Inflationary risk via minting. 7.5 Governance: Admin-controlled metadata. 7.6 External: Bridge dependency. 7.7 Upgrades: N/A. 7.8 Operations: Standard.
On-chain security analysis — is it a scam or legit?
Is Anthropic Safe?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →The ClankerToken is an ERC-20 compliant token with cross-chain functionality integrated via the Superchain Token Bridge.
Read the full analysis- Mintable supply — no cap found, dilution unbounded
- Liquidity not locked
- Top-10 concentration > 30%
Exact factors
- Mintable supply — no cap found, dilution unbounded
- Liquidity NOT locked (100% of the pool) — who holds it cannot be verified
- Top-10 concentration > 30% (100.0% total → 40.6% effective; 1.0% in EOAs, 99.0% in contracts)
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Nov 2Holders
as of audit · Nov 2, 2026- Contractstreasury, vesting, bridge, staking99.0%
- Walletsanonymous holders, free to sell1.0%
How holder types affect the score
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 2, 2026
Liquidity
as of audit · Nov 2The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0xffa3…0762Security Findings
MediumLiquidity not locked
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0xffa3…0762 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY
Issue
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0xffa3…0762 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Fix
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Status
Acknowledged
InfoPrivileged Minting Capability
The crosschainMint function allows the Superchain Token Bridge to create new tokens at any time. This can lead to significant inflation and dilution of existing token holders' value. Ownership is renounced, so no one can call these functions now.CP-01
Issue
The crosschainMint function allows the Superchain Token Bridge to create new tokens at any time. This can lead to significant inflation and dilution of existing token holders' value. Ownership is renounced, so no one can call these functions now.
Fix
Implement a hard cap on the total supply or require a multi-signature approval process for large minting operations.
Status
Unresolved
InfoPrivileged Balance Manipulation
The crosschainBurn function allows the Superchain Token Bridge to remove tokens from any user's wallet. This grants the bridge controller the ability to seize assets or reduce user balances without user consent. Ownership is renounced, so no one can call these functions now.CP-02
Issue
The crosschainBurn function allows the Superchain Token Bridge to remove tokens from any user's wallet. This grants the bridge controller the ability to seize assets or reduce user balances without user consent. Ownership is renounced, so no one can call these functions now.
Fix
Restrict the burn functionality to only allow users to burn their own tokens, or implement a transparent, time-delayed process for any forced balance adjustments.
Status
Unresolved
InfoWho holds the supply
The ten largest holders own 100.0% of supply. What remains: 1.0% in wallets, 99.0% in other contracts. 5,022 holders in total.QA-HOLDERS
Issue
The ten largest holders own 100.0% of supply. What remains: 1.0% in wallets, 99.0% in other contracts. 5,022 holders in total.
Fix
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Status
Acknowledged
InfoNot listed by any independent source
5,022 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY
Issue
5,022 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Fix
Match the contract address against the project's official channels before trading.
Status
Acknowledged
InfoThe market for this token
Liquidity $10.2M (DexScreener, all pools). 24h trading volume $53.6M (DexScreener, all pools).QA-MARKET
Issue
Liquidity $10.2M (DexScreener, all pools). 24h trading volume $53.6M (DexScreener, all pools).
Fix
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Status
Acknowledged
InfoAsset class: Project token
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $10.2M of DEX liquidity across 1 pools. Launch: 365 days of market history.QA-PROFILE
Issue
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $10.2M of DEX liquidity across 1 pools. Launch: 365 days of market history.
Fix
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Status
Acknowledged
Analysis
AI Copilotas of audit · Nov 2The contract utilizes well-vetted OpenZeppelin standards for ERC-20, Votes, and Permit functionality. The code is clean and follows standard Solidity patterns for state management. However, the reliance on the Superchain Token Bridge for cross-chain operations introduces a single point of failure for supply integrity. The implementation of crosschainMint and crosschainBurn is syntactically correct but inherently powerful.
The token economic model is subject to inflationary pressure through the crosschainMint function. Token holders face dilution risk if the bridge is compromised or misconfigured. The admin role has control over metadata and image URI, which is a minor centralization concern but does not affect token balances directly.
The contract is not upgradeable and does not utilize proxy patterns. This ensures immutability of the core logic. Future changes would require a new contract deployment and migration, which is a safe but rigid approach.
Users should be aware that the Superchain Token Bridge holds absolute authority over the token supply and individual balances.
Ensure that the bridge contract is monitored for any anomalous activity or unauthorized minting events. For the protocol team, consider implementing a timelock or multi-signature requirement for any administrative changes to the admin address. Regularly audit the bridge integration to ensure that cross-chain messaging remains secure and resistant to manipulation.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Nov 2, 202654Medium
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Would You Like a More Detailed Audit of Anthropic?
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified