On-chain security analysis — is it a scam or legit?
BNB ChainThe Beat Token contract is a standard ERC20 implementation with an owner-controlled minting function.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Sep 4, 2026
The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
Beat token contract does not expose a public function to allow token holders or the contract owner to burn tokens. While an internal _burn function exists in the inherited ERC20 contract, it is not callable externally. This limits the flexibility of supply management, as tokens can only be minted (up to MAX_SUPPLY before ownership renunciation) and transferred, but never permanently removed from circulation.L-01The Beat token contract does not expose a public function to allow token holders or the contract owner to burn tokens. While an internal _burn function exists in the inherited ERC20 contract, it is not callable externally. This limits the flexibility of supply management, as tokens can only be minted (up to MAX_SUPPLY before ownership renunciation) and transferred, but never permanently removed from circulation.
Consider adding an onlyOwner or public burn function if future supply reduction mechanisms are desired. Document the current fixed supply policy clearly.
Unresolved
Beat.sol contract imports and uses the SafeMath library. However, the contract is compiled with Solidity ^0.8.0, which includes built-in overflow and underflow checks for all arithmetic operations by default. Explicitly using SafeMath for uint256 operations is redundant and adds unnecessary code complexity without providing additional security benefits in this Solidity version.I-01The Beat.sol contract imports and uses the SafeMath library. However, the contract is compiled with Solidity ^0.8.0, which includes built-in overflow and underflow checks for all arithmetic operations by default. Explicitly using SafeMath for uint256 operations is redundant and adds unnecessary code complexity without providing additional security benefits in this Solidity version.
Remove the SafeMath.sol import and the using SafeMath for uint256; statement. Rely on Solidity 0.8.0's native overflow/underflow protection.
Unresolved
Beat token contract includes an onlyOwner mint function, allowing the deployer to mint tokens up to a MAX_SUPPLY of 1 billion tokens. While the provided information indicates that ownership has been renounced, implying the mint function is no longer callable, the initial distribution of tokens (if any occurred before renunciation) was entirely at the discretion of the contract owner. This represents a centralized point of control for the initial token supply.I-02The Beat token contract includes an onlyOwner mint function, allowing the deployer to mint tokens up to a MAX_SUPPLY of 1 billion tokens. While the provided information indicates that ownership has been renounced, implying the mint function is no longer callable, the initial distribution of tokens (if any occurred before renunciation) was entirely at the discretion of the contract owner. This represents a centralized point of control for the initial token supply.
For future projects, consider implementing decentralized distribution mechanisms or transparent vesting schedules to reduce reliance on a single entity for initial token allocation.
Unresolved
ERC20.sol contract utilizes unchecked blocks in the transferFrom, decreaseAllowance, and _burn functions. While these unchecked blocks are preceded by require statements that ensure the safety of the arithmetic operations (e.g., currentAllowance >= amount), their explicit use can be confusing. In Solidity 0.8.0+, arithmetic operations revert on overflow/underflow by default, making unchecked blocks only necessary when intentionally allowing such behavior.I-03The ERC20.sol contract utilizes unchecked blocks in the transferFrom, decreaseAllowance, and _burn functions. While these unchecked blocks are preceded by require statements that ensure the safety of the arithmetic operations (e.g., currentAllowance >= amount), their explicit use can be confusing. In Solidity 0.8.0+, arithmetic operations revert on overflow/underflow by default, making unchecked blocks only necessary when intentionally allowing such behavior.
Review the necessity of unchecked blocks. If the preceding require statements guarantee safety, the unchecked blocks can be removed, relying on the default 0.8.0 behavior for clarity, or retained if the intent is to explicitly optimize gas by skipping redundant checks. Ensure thorough documentation of the rationale if retained.
Unresolved
The Beat Token contract is a standard ERC20 implementation with an owner-controlled minting function. Based on the provided deployment information, the contract's ownership has been renounced, effectively disabling the minting capability and fixing the total supply at its current level. The contract utilizes Solidity 0.8.0+, benefiting from native overflow/underflow protection.
The technical architecture is straightforward, implementing a standard ERC20 token with an Ownable pattern (7.1 Architecture). The code benefits from Solidity 0.8.0's built-in arithmetic safety checks. However, the explicit use of the SafeMath library is redundant given the compiler version (7.2 Code Security). Additionally, some unchecked blocks are used in ERC20.sol, though they are appropriately guarded by require statements (7.2 Code Security).
The economic model is based on a fixed maximum supply of 1 billion tokens, with an owner-controlled minting function (7.4 Economic). Crucially, the provided deployment information indicates that ownership has been renounced, which effectively disables further minting and fixes the total supply (7.5 Governance). The absence of a public burn function means the token supply cannot be reduced post-renunciation (7.4 Economic).
The contract is not designed with an upgradeability pattern (7.7 Upgrades). This means its logic is immutable once deployed, providing certainty but preventing future modifications or bug fixes without a new deployment and migration. This design choice inherently carries a low risk for upgrade-related issues.
It is recommended to remove the redundant SafeMath library usage to streamline the codebase and align with Solidity 0.8.0+ best practices.
Thoroughly document the implications of renounced ownership, particularly regarding the fixed token supply and the inability to mint or burn tokens. Ensure all operational procedures related to the token's lifecycle are clearly defined and communicated.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The Beat Token (BEAT) contract on BNB Chain is 0xcf3232b85b43bca90e51d38cc06cc8bb8c8a3e36. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for Beat Token is 32/100 (Low risk) as of Sep 4, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Renounced; Mint: Mintable; Upgradeability: Fixed code. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
As of Sep 4, 2026, the 10 largest holders own 57.4% of the supply. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
