Early-stage security check — honeypot & rug-pull analysis
BNB ChainThe CheeseTaxTokenV2 contract is an ERC-20 token implementation with a specific role, 'taxprocessor', capable of pausing transfers.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 18, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x9496…6f90No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
receive function, allowing it to accept Ether (ETH). However, there are no corresponding functions to withdraw any received ETH, meaning any Ether sent to this contract will be permanently locked and inaccessible.CD-01The contract includes a receive function, allowing it to accept Ether (ETH). However, there are no corresponding functions to withdraw any received ETH, meaning any Ether sent to this contract will be permanently locked and inaccessible.
If the contract is not intended to hold ETH, consider removing the receive function to prevent accidental deposits. If ETH is intended to be held, implement a secure withdrawal mechanism, preferably controlled by a multi-signature wallet.
Unresolved
taxprocessor address has the ability to call the setSwapping function, which controls a switch (_swapping) that determines if token transfers are allowed. If _swapping is set to false, all transfers of CheeseTaxTokenV2 may be prevented, potentially impacting liquidity and trading.CP-05The taxprocessor address has the ability to call the setSwapping function, which controls a switch (_swapping) that determines if token transfers are allowed. If _swapping is set to false, all transfers of CheeseTaxTokenV2 may be prevented, potentially impacting liquidity and trading.
Token holders should be aware that the taxprocessor can unilaterally stop all token transfers. Consider implementing a multi-signature wallet for the taxprocessor role or a time-lock mechanism for such critical functions to add a layer of security and transparency.
Unresolved
82.3% of the pool's LP is burned or time-locked. 82.3% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 17.7% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The ten largest holders own 22.9% of supply. Of that, 16.7% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 6.3% in wallets, 0.0% in other contracts. 967 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
967 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $42K (DexScreener, all pools). 24h trading volume $400K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: meme vocabulary in name/ticker (shib). Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: 3% on buy, 3% on sell. Market: $42K of DEX liquidity across 1 pools. Launch: 1 days of market history.
Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
Acknowledged
The token's oldest DEX pool is 1 day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The CheeseTaxTokenV2 contract is an ERC-20 token implementation with a specific role, 'taxprocessor', capable of pausing transfers. The contract also has a mechanism to receive Ether (ETH) but lacks a function to withdraw it, leading to potential loss of funds. Ownership of the contract has been renounced, making owner-restricted functions dormant.
The CheeseTaxTokenV2 contract implements the ERC-20 standard, providing essential token functionalities (7.1 Architecture). The code includes a setSwapping function, controlled by the taxprocessor address, which can pause or resume all token transfers (7.2 Code Security). Additionally, the contract can receive ETH via its receive function, but lacks any mechanism to withdraw these funds, meaning any ETH sent to it will be permanently locked (7.2 Code Security).
The contract's ownership has been renounced on-chain, meaning functions restricted to the owner (e.g., transferOwnership) are no longer callable (7.3 Access Control). However, a specific taxprocessor address retains significant control over token transfers through the setSwapping function, which can halt all trading (7.4 Economic). This centralized control by the taxprocessor introduces a single point of failure for transfer operations (7.5 Governance).
The CheeseTaxTokenV2 contract is not implemented as an upgradeable proxy, meaning its logic cannot be changed after deployment (7.7 Upgrades). This eliminates upgrade-related risks but also prevents future bug fixes or feature enhancements without a new deployment.
It is recommended to review the necessity and control mechanism of the taxprocessor role, especially its ability to pause transfers.
Consider implementing a multi-signature wallet or a time-lock for critical functions like setSwapping to enhance security and decentralization. Additionally, address the issue of unwithdrawable ETH by either removing the receive function if ETH is not intended to be held, or by implementing a secure withdrawal mechanism.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page
