On-chain security analysis — is it a scam or legit?
PolygonThe AS token is a standard ERC-20 implementation with integrated access control and fee management.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 20, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
0x6a92…b26e0xdfe7…24190x0232…69590x11eb…0da60x9808…33480x8927…71300xeb35…d26f0xd452…ef220x6acd…2fe0A privileged address — the deployer, the owner, or the token contract itself — is among these holders, so that party can withdraw liquidity.
The mint function allows a privileged vault address to create new tokens at will, which can dilute the value of existing holdings. This function is restricted to the vault role.
Implement a hard cap on the total supply or require a multi-signature approval process for minting events to protect token holders from unexpected dilution.
Unresolved
The setRatio function allows administrators to change transfer fees dynamically. This grants the controller the ability to significantly alter the cost of moving tokens.
Set a maximum fee limit in the contract to prevent administrators from setting confiscatory fee rates, and document the fee policy clearly for users.
Unresolved
Liquidity $6.7M (DexScreener, all pools). 24h trading volume $151K (CoinGecko, all markets, daily snapshot). 24h trading volume $130K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $27.90 on 2025-08-05; the price is now 99.3335% below it.
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The ten largest holders own 94.9% of supply. Of that, 6.6% burned, 6.1% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.0% in wallets, 82.2% in other contracts. 405,849 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as AKAS (AS). 405,849 holders.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: 0% on buy, 3% on sell. Market: $6.7M of DEX liquidity across 3 pools. Launch: 495 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The AS token is a standard ERC-20 implementation with integrated access control and fee management. The protocol relies on centralized administrative roles to manage supply and transfer parameters. While the code is clean and follows standard patterns, the high degree of centralization poses a risk to token holders.
The architecture utilizes standard OpenZeppelin libraries for ERC-20 and AccessControl, ensuring 7.1 Architecture and 7.2 Code Security standards are met. 7.3 Access Control is implemented via roles, though it centralizes power. 7.6 External dependencies are minimal and well-vetted. The code is readable and follows modern Solidity practices.
7.4 Economic and 7.5 Governance aspects are heavily centralized. The ability to mint tokens and adjust fees allows administrators to significantly impact token value. There are no on-chain governance mechanisms to limit these administrative powers. Users must trust the entity holding the default admin and vault roles.
7.7 Upgrades are not currently implemented as the contract is not a proxy. 7.8 Operations are straightforward, relying on standard ERC-20 functionality. No complex upgrade logic exists to introduce hidden risks. The contract is immutable in its current deployment state.
The protocol should consider implementing a timelock for sensitive administrative functions like minting or fee adjustments to provide transparency and protection for token holders.
Additionally, transitioning to a multi-signature wallet for the default admin role would mitigate the risk of a single point of failure.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
