On-chain security analysis — is it a scam or legit?
The BRS protocol is a complex, upgradeable token implementation utilizing LayerZero OFT standards and extensive access control.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 26, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0xdcff…60c8No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
The contract includes a 'freeze' mechanism that allows privileged roles to block specific addresses from interacting with the token. This effectively gives the operator the power to censor transactions or lock user funds at will.
Implement a time-lock for administrative actions or move the 'freeze' authority to a decentralized governance contract to prevent unilateral abuse of power.
Unresolved
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a wallet, 0xdcff…60c8 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 94% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The ten largest holders own 91.5% of supply. What remains: 24.8% in wallets, 66.7% in other contracts. 106 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Nora Brazilian Real Stablecoin (BRS), rank #6377. 106 holders.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $33K (DexScreener, all pools). 24h trading volume $54K (CoinGecko, all markets, daily snapshot). 24h trading volume $150K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token designed to hold a fixed value (usually $1). Its safety rests on what backs it and on who can mint, freeze or pause it. Its identity is not independently verified, so it gets none of the allowances an established stablecoin gets: every power its owner holds over supply and transfers is scored in full, because a peg is only as good as whoever can mint. Basis: CoinGecko category: Bridged Stablecoin. Tokenomics — Supply: mintable with no on-chain cap found. Control: a 3-of-5 multisig. Code: upgradeable proxy. Fees: no buy or sell tax. Market: $33K of DEX liquidity across 3 pools. Launch: 16 days of market history.
Check what backs the peg and who controls supply: reserve attestations for an issuer-backed coin, collateral and governance for a protocol coin.
Acknowledged
The token's oldest DEX pool is 16 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The BRS protocol is a complex, upgradeable token implementation utilizing LayerZero OFT standards and extensive access control. The architecture is robust, leveraging established libraries for proxy management and cross-chain messaging. While the protocol includes centralized administrative controls, these are typical for regulated or permissioned token assets requiring compliance features.
The codebase demonstrates high technical maturity, utilizing standard OpenZeppelin and LayerZero libraries for core functionality. 7.1 Architecture is modular, employing UUPS proxy patterns for future-proofing. 7.2 Code Security is maintained through rigorous use of modifiers and state validation. 7.6 External integrations with LayerZero are correctly implemented via OApp interfaces.
7.4 Economic and 7.5 Governance controls are centralized, granting significant power to the owner and designated roles. The protocol relies on a multisig for administrative actions, which mitigates single-point-of-failure risks. However, the ability to freeze accounts and manage minting limits creates a dependency on the operator's integrity.
7.7 Upgrades are handled via the UUPS pattern, which is the current industry standard for gas-efficient and secure proxy management. The implementation is correctly separated from the proxy, ensuring state persistence across upgrades. 7.8 Operations are supported by clear administrative functions for pausing and limit management.
The protocol is well-engineered. We recommend that the multisig signers maintain a transparent policy regarding the use of the 'freeze' and 'mint' functions to ensure community trust.
Additionally, ensure that the private keys for the multisig are managed using hardware security modules (HSMs) or institutional-grade custody solutions. Regularly rotate administrative roles and conduct periodic audits of the 'whitelister' and 'minter' role assignments to ensure that access remains limited to authorized entities only.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
