Quantum Audit Logo

Is BagsPay a Scam?

Early-stage security check — honeypot & rug-pull analysis

Is this your token? Publish your own audit on this page →

BagsPay BAGSPAY
H8WTvo…BAGS
Solana
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record New Launch · 3d old
Executive SummaryAI Copilot

This audit of the BagsPay SPL token mint identifies a low-severity risk related to mutable metadata, allowing the token's name, symbol, or image to be changed post-launch. Key authorities, including mint and freeze, have been revoked, indicating a fixed supply and unfreezable accounts. Holder concentration data was unavailable, and liquidity is moderate with a significant portion locked.

1 Low6 Informational
! Early-stage analysis. This token has limited on-chain history (3d old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.
Volume 24h
$494.2K
Liquidity
$113.6K
Price
$0.0006334
Token Age
3d
Top 10 Holders
0.0%

Security Findings

Low

Mutable Metadata

L-01The token's metadata is mutable, as indicated by 'metadata_mutable: True'. This means that the token's name, symbol, or image can be changed post-launch by the controlling authority.
IssueThe token's metadata is mutable, as indicated by 'metadata_mutable: True'. This means that the token's name, symbol, or image can be changed post-launch by the controlling authority.
FixVerify metadata against off-chain expectations before trusting branding. Be aware that the token's identity elements could be altered in the future.
StatusUnresolved
Info

Not listed by any independent source

QA-IDENTITYNot listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
IssueNot listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Liquidity locked with no expiry

QA-LIQUIDITY95.5% of the pool's LP is burned or time-locked. 95.5% of the pool's liquidity is locked for good in the pool program — only its trading fees can be collected; no one can withdraw the liquidity. 4.4% is held, unlocked, by 3 address(es) other than the pool's creator. This assessment covers the main pool, which holds 87% of the token's DEX liquidity; the other pools were not assessed.
Issue95.5% of the pool's LP is burned or time-locked. 95.5% of the pool's liquidity is locked for good in the pool program — only its trading fees can be collected; no one can withdraw the liquidity. 4.4% is held, unlocked, by 3 address(es) other than the pool's creator. This assessment covers the main pool, which holds 87% of the token's DEX liquidity; the other pools were not assessed.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $131K (DexScreener, all pools). 24h trading volume $583K (DexScreener, all pools).
IssueLiquidity $131K (DexScreener, all pools). 24h trading volume $583K (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

What the token's controller can do

QA-POWERSThe contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
IssueThe contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
FixCheck who holds these powers and whether a timelock or multisig stands between them and holders.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $131K of DEX liquidity across 11 pools. Launch: 3 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $131K of DEX liquidity across 11 pools. Launch: 3 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged
Info

Recently launched — 3 days of market history

QA-RECENTThe token's oldest DEX pool is 3 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
IssueThe token's oldest DEX pool is 3 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
FixRe-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
StatusAcknowledged

Category Ratings

TechnicalLow10/10

The BagsPay token operates on the standard spl-token program. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token has a fixed supply of approximately 1 billion units with 9 decimals. No Token-2022 specific extensions like permanent delegate or transfer hooks are active, indicating a standard SPL v3 token implementation.

GovernanceLow10/10

The token has a total DEX liquidity of $113,420, with 95.5% of this liquidity locked for good in the pool program, enhancing stability. The remaining 4.4% is held by three other addresses. The 24-hour volume to liquidity ratio is 4.33, which is considered normal and does not suggest wash trading. Holder concentration data was unavailable from chain-native RPC, preventing an assessment of whale risk.

UpgradesLow10/10

The mint and freeze authorities are permanently revoked, preventing any future changes to supply or account freezing capabilities. However, the token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. No Token-2022 specific upgradeable features like transfer fee or transfer hook upgradability are present, as this is a classic SPL v3 token.

Security Checklist

Contract VerifiedPass
No Mint FunctionPass
Liquidity LockedPass
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

Show 4 more pairsShow less

One more pair holds $2 and is not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

Key Addresses

Unlocked LP Held By
E4mxjK…FzMfFe1uxW…X99RFTDsCw…yQjq

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Related Audits

Purple Bitcoin (PBTC)Low Risk🦎 (LIZARD)Low RiskALTSEASON (ALTSZN)Low RiskButtcoinLow RiskFartcoinLow RiskTROLLLow Risk

Would You Like a More Detailed Audit of BagsPay?

This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.

Get Detailed Audit