Is aura Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The aura token is implemented using the standard `spl-token` program (v3), indicating a well-established and audited token standard. A key security strength is that both the Mint Authority and Freeze Authority are revoked (None), preventing further token creation or freezing of holder accounts. The token has a total supply of 963,280,377.303489 with 6 decimals. Furthermore, all GoPlus-reported mutability flags such as `balance_mutable`, `closable`, `freezable`, `default_account_state_frozen`, `non_transferable`, `transfer_fee_upgradable`, and `transfer_hook_upgradable` are set to `False`, confirming standard, non-extensible behavior.

GovernanceHigh3/10

The token exhibits a healthy distribution with the top 10 token accounts holding 16.23% of the total supply, which is well below thresholds for significant concentration risk. Liquidity is robust at $2,470,267 USD, supporting reasonable trade sizes. The 24-hour trading volume is $236,339 USD, resulting in a Volume/Liquidity Ratio of 0.10, which is considered normal and does not suggest wash trading. The DEX pair has been active for 821 days, providing a long track record for market behavior.

UpgradesMedium5/10

The token's immutability is a significant positive, as both the Mint Authority and Freeze Authority are permanently revoked. This prevents any future changes to the token supply or the ability to freeze accounts. Additionally, the `metadata_mutable` flag is set to `False`, ensuring that the token's name, symbol, and image cannot be altered post-launch. As a classic SPL v3 token, it does not feature Token-2022 extensions that introduce upgradeability or mutable features, further enhancing its fixed state.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$2.29M across 15 pairs

RaydiumSOLanalysed$2.22M Orca wpSOL$38.5K Orca wpSOL$26.5K Meteora DLMMSOL$2.3K Meteora DYNSOL$280 Meteora DYN2SIMULATION$225

Show 4 more pairsShow less

Orca wpSOL$54 Meteora DLMMSOL$34 Meteora DYN2RNLD$27 Meteora DYN2CSR$20

The 5 remaining pairs hold $4 between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Burned99.9% · ≈ permanent lock

What Raised This Score

4 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is aura Safe?