Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is ChatApex AI Safe?

CAAIPolygon
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 22, 2026 · 1 audit on record
Chart
High RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical6/10Governance6/10Upgrades6/10Checks passed6 of 7Findings1 Medium · 1 Low · 5 Info7
SummaryAI Copilot

The ChatApexAI contract is a standard ERC-20 token with additional administrative controls for minting, tax management, and transaction limits.

Read the full analysis
What raised the score
  • Hidden owner — control survives an apparent renounce
  • A privileged address can change transfer or wallet limits
  • Mintable supply — no cap found, dilution unbounded
  • Top-10 concentration > 30%
Exact factors
  • Hidden owner — control survives an apparent renounce
  • A privileged address can change transfer or wallet limits
  • Mintable supply — no cap found, dilution unbounded
  • Top-10 concentration > 30% (99.5% total → 37.0% effective; 0.2% in EOAs, 92.0% in contracts; 7.4% burned, locked or in pools excluded)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 226 of 7 checks passed
Contract verifiedVerified
OwnershipRenounced
MintMintable
Liquidity lockLocked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 22, 20262,371 holders
92.0%Contracts7.4%
92.0%Contracts7.4%
ContractsWalletsDEX poolsEveryone elseBubble area = share of supply
99.5%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking92.0%
  • Walletsanonymous holders, free to sell0.2%
  • DEX poolsthe pools' own liquidity7.4%
  • Everyone else2,361 holders0.5%
Effective concentrationwhat the score reads37.0%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 22, 2026

Liquidity

as of audit · Oct 22$1.05M

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$1.05MShare of depth100.0%
LP Burned99.9% · ≈ permanent lock
LP Locked99.9% · Null Address
Unlocked LP held by
0xc6ae…f70a

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

1 Medium1 Low5 Info
Medium

Centralized Minting Capability

The 'mint' function allows the address designated as the 'treasery' to create new tokens at any time, which can dilute the holdings of existing token holders.CP-01

Issue

The 'mint' function allows the address designated as the 'treasery' to create new tokens at any time, which can dilute the holdings of existing token holders.

Fix

Consider implementing a hard cap on the total supply or transitioning to a decentralized governance model for minting events.

Status

Unresolved

Low

Administrative Control Over Transaction Limits

The 'admin' role can modify the 'Min_Buy_Limit' via the 'setMinBuyLimit' function, allowing them to restrict or enable buying activity at their discretion.CP-08

Issue

The 'admin' role can modify the 'Min_Buy_Limit' via the 'setMinBuyLimit' function, allowing them to restrict or enable buying activity at their discretion.

Fix

Document the intended use of these limits and ensure the admin address is secured with multi-signature requirements.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 99.5% of supply. Of that, 7.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.2% in wallets, 92.0% in other contracts. 2,371 holders in total.QA-HOLDERS

Issue

The ten largest holders own 99.5% of supply. Of that, 7.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.2% in wallets, 92.0% in other contracts. 2,371 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

2,371 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

2,371 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

Liquidity burned — cannot be withdrawn

99.9% of the pool's LP is burned or time-locked. 99.9% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 0.1% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool.QA-LIQUIDITY

Issue

99.9% of the pool's LP is burned or time-locked. 99.9% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 0.1% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

The market for this token

Liquidity $1.1M (DexScreener, all pools). 24h trading volume $33K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $1.1M (DexScreener, all pools). 24h trading volume $33K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.1M of DEX liquidity across 1 pools. Launch: 70 days of market history.QA-PROFILE

Issue

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.1M of DEX liquidity across 1 pools. Launch: 70 days of market history.

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 22
Executive SummaryWhat the contract is and what the review found

The ChatApexAI contract is a standard ERC-20 token with additional administrative controls for minting, tax management, and transaction limits. While ownership has been renounced, the contract maintains separate administrative roles for the treasury and tax management, which retain significant influence over the token's economic parameters. The architecture is straightforward, but the presence of centralized minting and parameter adjustment capabilities introduces inherent risks for token holders.

Technical6/10Medium risk

The contract implements standard ERC-20 functionality with secure arithmetic operations. 7.1 Architecture follows a centralized control pattern for administrative tasks. 7.2 Code Security is maintained through standard library usage, though 7.3 Access Control relies on specific addresses for minting and tax configuration. The code is clean and adheres to expected token standards.

Governance6/10Medium risk

Economic parameters are highly centralized, allowing the treasury and admin roles to modify supply and transaction constraints. 7.4 Economic risks include potential dilution via the mint function and 7.5 Governance risks arise from the ability of the admin to alter buy limits and sell taxes. These mechanisms allow for significant control over the token's market behavior.

Upgrades6/10Medium risk

The contract is not upgradeable, which eliminates 7.7 Upgrades risks related to proxy patterns. 7.8 Operations are fixed by the immutable bytecode. No further changes to the contract logic are possible.

Final RecommendationWhat to do about this score

Token holders should monitor the addresses assigned to the 'treasery' and 'admin' roles, as these entities possess the power to alter the token's economic landscape.

Since the contract is immutable, no further security patches can be applied; users should exercise caution regarding the potential for supply inflation or sudden changes to transaction limits.

Contract & Record

1 audit on record
TypeToken
NetworkPolygon
Token age2mo
Contract0xca51…d0a6
Deployer0x669e…c512
Badge for your website
ChatApex AI security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Oct 22, 202673High

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the CAAI contract address?

The ChatApex AI (CAAI) contract on Polygon is 0xca518ba0ef1fff5cfe8845e347afdfa3519dd0a6. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is ChatApex AI a scam?

Quantum Audit's risk score for ChatApex AI is 73/100 (High risk) as of Oct 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Renounced; Mint: Mintable; Liquidity lock: Locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Is CAAI liquidity locked?

Liquidity lock: Locked (as of Oct 22, 2026). Total DEX liquidity: $1.05M.

Who holds CAAI?

As of Oct 22, 2026, the 10 largest holders own 99.5% of the supply across 2,371 holders. The Holders section on this page shows who they are by holder type.

Related Audits

6 more on the recordAll audits
ROUTINE COINROU · Polygon74HighMEBTPolygon77HighFortaFORT · Polygon68HighRISE TokenRISE · Polygon84HighteleBTCPolygon84HighWhaleBitCES · Polygon60Medium

Would You Like a More Detailed Audit of ChatApex AI?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page