Solana · Smart Contract Security · Updated Jul 24, 2026

Is Bull Safe? BULL

On-chain security analysis — is it a scam or legit?

Contract 3TYgKw…pump DexScreener ↗

53 / 100

High Risk How is this score calculated? →

Volume 24h

$10.2K

Liquidity

$67.0K

Price

$0.0001769

Token Age

1mo

Top 10 Holders

42.2%

Security Checklist

1/5 checks passed

Contract VerifiedFail

Ownership RenouncedUnknown

No Mint FunctionUnknown

Liquidity LockedFail

Not a ProxyPass

Audit History

2 audits on record

Jul 2353

Every audit run adds a dated snapshot — history is append-only and cannot be edited.

Audit Summary

This audit of the Bull SPL token mint found no critical or high-risk vulnerabilities based on the provided on-chain facts and third-party security registry data. Both mint and freeze authorities are revoked, indicating a fixed supply and immutable account states. Holder distribution data was unavailable, preventing a full assessment of market concentration risks.

Final Recommendation: Holders should confirm on-chain that the mint and freeze authorities remain revoked to ensure supply and account immutability. Monitor for any future changes in holder distribution once data becomes available, as high concentration could introduce market volatility. No further immediate actions are required based on current findings.

Category Ratings

TechnicalMedium

6/10

The Bull token operates under the `spl-token` program. Both the mint authority and freeze authority have been revoked (None), ensuring a fixed supply and immutability of account states. The token does not utilize advanced Token-2022 extensions such as permanent delegates, transfer hooks, or default

GovernanceHigh

2/10

The token exhibits healthy liquidity at $69,308 USD and a normal 24-hour volume to liquidity ratio of 1.47, suggesting organic trading activity. The pair has been active for 109 days, providing a reasonable track record. Holder concentration data was unavailable, preventing a full assessment of pote

UpgradesMedium

5/10

The mint authority and freeze authority are both revoked (None), meaning the token's supply and account freeze capabilities are immutable. Metadata is also not mutable (`metadata_mutable: False`), ensuring the token's name, symbol, and image cannot be changed post-launch. No upgradable tra

What Raised This Score

5 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 30% (42.2% total → 42.2% effective; 42.2% in EOAs, 0.0% in contracts — moderate)
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed