Quantum Audit Logo

Is Circle xStock Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Circle xStock CRCLX
XsueG8…3bd1
Solana Not verifiedLast checked 3d ago 1 audit on record
DexScreener ↗
How is this score calculated? → Critical Risk
Executive SummaryAI Copilot

This audit identifies critical centralization risks for the Circle xStock (CRCLx) token due to active mint, freeze, and permanent delegate authorities, which allow for unlimited new token creation, account freezing, and unauthorized fund transfers. Additionally, a balance-mutating authority is present, and metadata can be changed. Holder concentration is moderate, with the top 10 accounts holding 64.54% of the supply. Third-party registry data indicates multiple high-risk flags, including enabled mint and freeze authorities and permanent control. Holder distribution data from chain-native RPC was unavailable.

3 Critical2 Medium1 Low
Volume 24h
$4.50M
Liquidity
$2.31M
Price
$101.9100
Token Age
1y
Top 10 Holders
65.5%

Security Findings

3 Crit2 Med1 Low
Critical

Mint Authority Not Revoked

C-01The mint authority is 7pt9tk…taCj. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
FixVerify on-chain that the mint authority is set to null before treating supply as fixed.
StatusUnresolved
Critical

Freeze Authority Not Revoked

C-02The freeze authority is JDq14B…xJNs. The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
IssueThe freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
FixAvoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
StatusUnresolved
Critical

Permanent Delegate Configured

C-035aMNNL…FvEq has permanent delegate authority and can transfer any holder's tokens without consent.
Issue has permanent delegate authority and can transfer any holder's tokens without consent.
FixTreat this token as fully custodial.
StatusUnresolved
Medium

Holder Concentration > 50%

M-01Top 10 token accounts hold 64.54% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
IssueTop 10 token accounts hold 64.54% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
FixAccount for the potential impact of large holder movements on market price.
StatusUnresolved
Medium

Balance Mutability Authority

M-02A balance-mutating authority can adjust user balances.
IssueA balance-mutating authority can adjust user balances.
FixUnderstand the implications of a balance-mutating authority on token supply and individual holdings.
StatusUnresolved
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch.
IssueToken name, symbol, or image can be changed post-launch.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalHigh1/10

The Circle xStock (CRCLx) token operates on the spl-token-2022 program, indicating modern SPL token standards and extensions. However, significant centralized control exists. The mint authority () can create unlimited new tokens, and the freeze authority () can block transfers for any account. Furthermore, a permanent delegate () is configured, allowing unauthorized transfers of user funds. The token also has a balance-mutating authority, enabling adjustments to user balances.

GovernanceHigh1/10

The token exhibits a medium level of holder concentration, with the top 10 accounts holding 64.54% of the total supply. This concentration poses a risk of price volatility due to potential large-scale sell-offs. Liquidity is robust at $2,468,609, and the 24-hour volume of $2,307,739 results in a normal Volume/Liquidity Ratio of 0.93, suggesting genuine trading activity rather than wash trading. The DEX pair has been active for 409 days, providing a reasonable track record.

UpgradesHigh1/10

The token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. While the transfer hook is not currently active, its upgradability is enabled. The mint authority and freeze authority are both active, allowing for changes to the token's supply and transferability. The permanent delegate authority is also active, granting significant control over token movements.

Security Checklist

1/4 checks passed
Contract VerifiedFail
No Mint Function?
Liquidity LockedFail
Not a ProxyPass

Liquidity Depth

$4.82M across 16 pairs
Raydium CLMMUSDCanalysed$2.31M48.0%Raydium CLMMUSDC$2.13M44.3%Raydium CLMMSOL$207.7K4.3%Orca wpSOL$106.9K2.2%Orca wpUSDC$29.2K0.6%Raydium CLMMHYPE$14.5K0.3%
Show 4 more pairsShow less
Orca wpUSDC$8.4K0.2%Meteora DLMMUSDC$3.0K0.1%Raydium CLMMSOL$2.2K0.0%Raydium CLMMUSDC$9840.0%

The 6 remaining pairs hold $1.7K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

9 factors
  • Ownership status UNKNOWN (owner could not be resolved)
  • Mint capability UNKNOWN (implementation ABI unreadable)
  • Contract source NOT verified
  • Top-10 concentration > 50% (65.5% total → 65.5% effective; 65.5% in EOAs, 0.0% in contracts — heavy)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • 3 Critical finding(s) from audit
  • 2 Medium finding(s) from audit
  • 1 Low finding(s) from audit
  • Permanent Delegate set (any holder's tokens can be burned)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
Backpack (BP)Critical RiskCash Cat (CASHCAT)Critical RiskNO ONE CARES (KIM)Critical RiskMoon Doge Coin (MOONDOGECOIN)Critical RiskNVIDIA xStock (NVDAX)Critical RiskZazuCritical Risk

Would You Like a More Detailed Audit of Circle xStock?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit