Quantum Audit Logo

Is Anvil Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Anvil ANVL
0xaeea…5597
Ethereum
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
Executive SummaryAI Copilot

The Anvil contract implements a standard ERC-20 token with voting capabilities. The audit found no critical, high, or medium severity vulnerabilities. The contract adheres to established standards, features no privileged functions, and is not upgradeable, which simplifies its security profile. The overall risk level is assessed as Low.

1 Medium5 Informational
Volume 24h
$204.4K
Liquidity
$124.3K
Price
$0.001011
Token Age
12mo
Top 10 Holders
23.1%

Security Findings

Medium

Liquidity not locked

QA-LIQUIDITY0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 8 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Issue0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 8 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

No issues identified in the reviewed source

I-01The verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint capability, holder concentration) were applied separately and feed the risk score.
IssueThe verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint capability, holder concentration) were applied separately and feed the risk score.
FixRe-check after any contract upgrade or ownership change, both of which can alter behaviour without changing this page.
StatusAcknowledged
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 23.1% of supply. What remains: 16.7% in wallets, 6.4% in other contracts. 3,420 holders in total.
IssueThe ten largest holders own 23.1% of supply. What remains: 16.7% in wallets, 6.4% in other contracts. 3,420 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Identity verified by independent sources

QA-IDENTITYListed on CoinGecko as Anvil (ANVL), market cap $87M, rank #317. 3,420 holders. Verified by: CoinGecko.
IssueListed on CoinGecko as Anvil (ANVL), market cap $87M, rank #317. 3,420 holders. Verified by: CoinGecko.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $127K (DexScreener, all pools). 24h trading volume $418K (CoinGecko, all markets, daily snapshot). 24h trading volume $248K (DexScreener, all pools).
IssueLiquidity $127K (DexScreener, all pools). 24h trading volume $418K (CoinGecko, all markets, daily snapshot). 24h trading volume $248K (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $127K of DEX liquidity across 5 pools. Launch: 363 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $127K of DEX liquidity across 5 pools. Launch: 363 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged

Category Ratings

TechnicalLow10/10

The Anvil contract implements a standard ERC-20 token with additional voting capabilities (ERC20Votes). The architecture (7.1) is straightforward, adhering to established standards. Code security (7.2) is robust, with no identified vulnerabilities. Crucially, there are no privileged functions or special access controls (7.3) that could centralize power or introduce single points of failure, ensuring decentralized operation of core token functionalities.

GovernanceLow9/10

The economic model (7.4) is based on a standard ERC-20 token, with no complex internal mechanisms or external dependencies that could introduce economic exploits. The contract incorporates voting functionality (7.5), allowing token holders to delegate votes and participate in governance, which is a standard and well-understood mechanism. There are no unusual governance structures or economic incentives within the contract itself that pose a risk.

UpgradesLow9/10

The Anvil contract is not implemented as an upgradeable proxy (7.7). This design choice eliminates all risks associated with upgrade mechanisms, such as proxy initialization issues, storage collisions, or insecure upgrade paths. The contract's immutability ensures its behavior remains constant post-deployment.

Security Checklist

Contract VerifiedPass
Ownership Renounced?
No Mint FunctionPass
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

16.7% in wallets6.4% in contracts
Effective Concentration19.3%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

Top-1 Unlocked Holder47.0%
Top-3 Unlocked75.9%

Key Addresses

Deployer
0xa4f4…1c9d
Unlocked LP Held By
0xe853…f2500xa8ba…791d0xf8bd…791f0xcc2c…3f8a0x5f8e…d8e20xfebb…60c00x8035…69c50x22e5…0c54

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

  • Liquidity NOT locked (100% of the pool; this pool is 98% of DEX liquidity) — held by independent providers — market-depth risk

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

Unity Software (UNITY)Low Risk4CHANLow RiskMOO DENG (MOODENG)Low RiskPAAL AI ($PAAL)Low RiskVeridiaLow RiskArtificial Pepe (AP)Low Risk

Would You Like a More Detailed Audit of Anvil?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit