On-chain security analysis — is it a scam or legit?
SolanaThe Bubblemaps (BMT) token maintains an active mint authority, allowing for unlimited supply expansion.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 24, 2026
The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
The ten largest holders that can sell hold 73.23% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
Monitor top holder wallets for large outflows.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
An independent third-party risk registry classifies this token as high-risk based on its own dataset.
Do not interact with this token if you are risk-averse.
Unresolved
The ten largest holders own 74.5% of supply. Of that, 1.3% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 53.4% in wallets, 19.8% in other contracts. 5,937 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Bubblemaps (BMT), market cap $21M, rank #806. 5,937 holders.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $1.1M (DexScreener, all pools). 24h trading volume $57.3M (CoinGecko, all markets, daily snapshot). 24h trading volume $2.2M (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.317 on 2025-03-18; the price is now 91.1272% below it.
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The contract lets its controller — nobody (ownership renounced) — mint new supply; change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.1M of DEX liquidity across 9 pools. Launch: 591 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The Bubblemaps (BMT) token maintains an active mint authority, allowing for unlimited supply expansion. Holder concentration is high, with the top 10 holders controlling 73.23% of the circulating supply. Metadata remains mutable, and third-party registry data indicates potential risks regarding developer control.
The token utilizes the standard spl-token program. 7.1 Architecture is standard for SPL tokens. 7.3 Access Control is currently compromised by an active mint authority (). 7.8 Operations are affected by the ability to modify metadata at any time.
7.4 Economic analysis shows high concentration, with the top 10 holders controlling 73.23% of supply. 7.5 Governance is centralized due to the mint authority. Liquidity is $603,661 with a healthy volume/liquidity ratio of 2.76, though the lock status of this liquidity is unverified.
7.7 Upgrades are not applicable to SPL mints in the EVM sense, but metadata mutability allows for branding changes. The freeze authority is successfully revoked, preventing account freezing. Mint authority remains active, which is the primary upgrade-like risk.
Investors should monitor the mint authority address for potential revocation.
Given the high holder concentration, users should be aware of the risk of significant price volatility from large wallet movements. Verify the current mint authority status using a block explorer to ensure no unexpected supply increases occur. Exercise caution regarding the mutable metadata, as the token's identity could be altered by the current owner.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
