Is Bobo Safe? Smart Contract Security Analysis

Bobo BOBO

4nV5gN…pump

Solana Not verifiedLast checked 3d ago 1 audit on record

DexScreener ↗

64 / 100

High Risk

Executive SummaryAI Copilot

The Bobo (BOBO) SPL token mint has revoked mint and freeze authorities, indicating a fixed supply and unfreezable accounts. However, a significant concentration of tokens is observed, with the top 10 holders controlling 51.01% of the supply, and a third-party registry flags "Single holder ownership". Liquidity is healthy, and the pair is established. Third-party registry data on specific high-risk flags was unavailable.

1 Medium

Volume 24h

$128.6K

Liquidity

$333.0K

Price

$0.006155

Token Age

4mo

Top 10 Holders

51.0%

Security Findings

1 Med

Medium

Holder Concentration > 50%

M-01Top 10 token accounts hold 51.01% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range. This is further supported by a third-party risk registry signal indicating "Single holder ownership".

IssueTop 10 token accounts hold 51.01% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range. This is further supported by a third-party risk registry signal indicating "Single holder ownership".

FixMonitor holder distribution for significant changes that could impact market stability.

StatusUnresolved

Category Ratings

TechnicalMedium6/10

The Bobo (BOBO) token is implemented using the standard `spl-token` program (v3). Both the Mint Authority and Freeze Authority are revoked, indicating that no new tokens can be minted and no accounts can be frozen by an external party. The token exhibits no active advanced Token-2022 extensions such as permanent delegates, transfer hooks, or default frozen states, and its balance mutability is disabled (`balance_mutable: False`). Metadata is also immutable (`metadata_mutable: False`).

GovernanceHigh1/10

The token exhibits a medium level of holder concentration, with the top 10 token accounts holding 51.01% of the total supply. This is further highlighted by a third-party risk registry signal indicating "Single holder ownership". DEX liquidity is robust at $338,303, and the 24-hour volume of $152,518 results in a healthy Volume/Liquidity Ratio of 0.45. The DEX pair has been active for 120 days, providing a reasonable track record.

UpgradesMedium5/10

The token's core parameters are fixed due to the revocation of both Mint Authority and Freeze Authority. This ensures that the supply cannot be arbitrarily increased and existing accounts cannot be frozen. Furthermore, the token's metadata, including its name and symbol, is immutable (`metadata_mutable: False`), preventing post-launch changes. No upgradeable Token-2022 extensions are active.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$354.8K across 5 pairs

PumpswapSOLanalysed$333.0K Meteora DLMMUSDC$12.1K Meteora DLMMSOL$9.6K Meteora DYN2RNLD$39 Meteora DYN2PEPE$22

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

6 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 50% (51.0% total → 51.0% effective; 51.0% in EOAs, 0.0% in contracts — heavy)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 Medium finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is Bobo Safe?