Is BCGame Coin (BC) Safe? Smart Contract Security Analysis

Security Findings

1 High1 Low

High

Holder Concentration > 70%

H-01Top 10 token accounts hold 84.63% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range. (Fact: `top10_holders_pct: 84.63`)

IssueTop 10 token accounts hold 84.63% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range. (Fact: `top10_holders_pct: 84.63`)

FixAccount for the significant risk of price volatility due to concentrated holdings. Monitor the activity of large holders closely.

StatusUnresolved

Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch. (Fact: `metadata_mutable: True`)

IssueToken name, symbol, or image can be changed post-launch. (Fact: `metadata_mutable: True`)

FixVerify metadata against off-chain expectations before trusting branding.

StatusUnresolved

Category Ratings

TechnicalMedium5/10

The token is implemented using the SPL Token Program (v3). Both the mint authority and freeze authority have been revoked, preventing further token minting or account freezing. However, the token's metadata is mutable, allowing changes to its name, symbol, or image post-launch. Other advanced features like balance mutability, transfer fees, or transfer hooks are not enabled, as indicated by `balance_mutable: False` and `transfer_hook_upgradable: False`.

GovernanceHigh1/10

The token exhibits high holder concentration, with the top 10 accounts holding 84.63% of the total supply, posing a significant risk of price volatility from large sell-offs. Total DEX liquidity is $3,319,957, supporting a 24-hour volume of $3,073,777. The volume/liquidity ratio is 0.93, indicating normal trading activity, and the DEX pair has been active for 614 days, providing a reasonable track record.

UpgradesMedium5/10

The token's core authorities, Mint Authority and Freeze Authority, are both revoked, ensuring no new tokens can be minted and no accounts can be frozen. This provides a degree of stability regarding supply and transferability. However, the token's metadata remains mutable, meaning its branding elements like name or symbol can be altered by the controlling authority, as shown by `metadata_mutable: True`.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$3.38M across 4 pairs

Raydium CLMMSOLanalysed$3.38M PumpswapSOL$5 Meteora DYN2USDC$0

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

7 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 70% (84.5% total → 84.5% effective; 84.5% in EOAs, 0.0% in contracts — extreme)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 High finding(s) from audit
1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is BCGame Coin Safe?