Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is Circle xStock Safe?

CRCLXSolana
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Sep 22, 2026 · 1 audit on record
Chart
Critical RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical1/10Governance1/10Upgrades1/10Checks passed2 of 4Findings3 Critical · 2 Medium · 1 Low6
SummaryAI Copilot

This audit identifies critical centralization risks for the Circle xStock (CRCLx) token due to active mint, freeze, and permanent delegate authorities, which allow for unlimited new token creation, account freezing, and unauthorized fund transfers.

Read the full analysis
What raised the score
  • Freeze authority not revoked — any holder's account can be frozen
  • Mintable supply — no cap found, dilution unbounded
  • Top-10 concentration > 50%
  • LP lock status UNKNOWN — the pool's LP could not be read
  • 3 Critical finding(s) from audit
  • 2 Medium finding(s) from audit
  • 1 Low finding(s) from audit
  • Permanent Delegate set
Exact factors
  • Freeze authority NOT revoked — any holder's account can be frozen
  • Mintable supply — no cap found, dilution unbounded
  • Top-10 concentration > 50% (67.6% total → 67.6% effective; 67.6% in EOAs, 0.0% in contracts — heavy)
  • LP lock status UNKNOWN — the pool's LP could not be read
  • 3 Critical finding(s) from audit
  • 2 Medium finding(s) from audit
  • 1 Low finding(s) from audit
  • Permanent Delegate set (any holder's tokens can be burned)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Sep 222 of 4 checks passed
Contract verifiedVerified
MintMintable
Liquidity lockUnknown
UpgradeabilityFixed code

Holders

as of audit · Sep 22, 2026
67.6%Top 10 holders32.4%Everyone else
67.6%Top 10 holders32.4%Everyone else
Top 10 holdersEveryone elseBubble area = share of supply
67.6%of supply sits with the top 10 holders
  • Top 10 holdersthe ten largest balances67.6%
  • Everyone elsethe rest of the supply32.4%

Holder balances as recorded by the audit of Sep 22, 2026

Liquidity

as of audit · Sep 22$4.55M across 16 pairs
Show 4 more pairs

The 6 remaining pairs hold $2.4K between them and are not listed. The risk score reads depth across every pair.

LP tokensUnknown

Whether the LP tokens are locked could not be determined.

Analysed pool$2.75MShare of depth60.4%

Security Findings

3 Critical2 Medium1 Low
Critical

Mint Authority Not Revoked

The mint authority is 7pt9tk…taCj. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.C-01

Issue

The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.

Fix

Verify on-chain that the mint authority is set to null before treating supply as fixed.

Status

Unresolved

Critical

Freeze Authority Not Revoked

The freeze authority is JDq14B…xJNs. The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.C-02

Issue

The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.

Fix

Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.

Status

Unresolved

Critical

Permanent Delegate Configured

5aMNNL…FvEq has permanent delegate authority and can transfer any holder's tokens without consent.C-03

Issue

has permanent delegate authority and can transfer any holder's tokens without consent.

Fix

Treat this token as fully custodial.

Status

Unresolved

Medium

Holder Concentration > 50%

Top 10 token accounts hold 64.54% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.M-01

Issue

Top 10 token accounts hold 64.54% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.

Fix

Account for the potential impact of large holder movements on market price.

Status

Unresolved

Medium

Balance Mutability Authority

A balance-mutating authority can adjust user balances.M-02

Issue

A balance-mutating authority can adjust user balances.

Fix

Understand the implications of a balance-mutating authority on token supply and individual holdings.

Status

Unresolved

Low

Mutable Metadata

Token name, symbol, or image can be changed post-launch.L-01

Issue

Token name, symbol, or image can be changed post-launch.

Fix

Verify metadata against off-chain expectations before trusting branding.

Status

Unresolved

Analysis

AI Copilotas of audit · Sep 22
Executive SummaryWhat the contract is and what the review found

This audit identifies critical centralization risks for the Circle xStock (CRCLx) token due to active mint, freeze, and permanent delegate authorities, which allow for unlimited new token creation, account freezing, and unauthorized fund transfers. Additionally, a balance-mutating authority is present, and metadata can be changed. Holder concentration is moderate, with the top 10 accounts holding 64.54% of the supply. Third-party registry data indicates multiple high-risk flags, including enabled mint and freeze authorities and permanent control. Holder distribution data from chain-native RPC was unavailable.

Technical1/10High risk

The Circle xStock (CRCLx) token operates on the spl-token-2022 program, indicating modern SPL token standards and extensions. However, significant centralized control exists. The mint authority () can create unlimited new tokens, and the freeze authority () can block transfers for any account. Furthermore, a permanent delegate () is configured, allowing unauthorized transfers of user funds. The token also has a balance-mutating authority, enabling adjustments to user balances.

Governance1/10High risk

The token exhibits a medium level of holder concentration, with the top 10 accounts holding 64.54% of the total supply. This concentration poses a risk of price volatility due to potential large-scale sell-offs. Liquidity is robust at $2,468,609, and the 24-hour volume of $2,307,739 results in a normal Volume/Liquidity Ratio of 0.93, suggesting genuine trading activity rather than wash trading. The DEX pair has been active for 409 days, providing a reasonable track record.

Upgrades1/10High risk

The token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. While the transfer hook is not currently active, its upgradability is enabled. The mint authority and freeze authority are both active, allowing for changes to the token's supply and transferability. The permanent delegate authority is also active, granting significant control over token movements.

Final RecommendationWhat to do about this score

Before interacting with this token, verify on-chain that the mint authority and freeze authority have been revoked to prevent supply dilution and account freezing.

Confirm that the permanent delegate authority has been removed to ensure funds cannot be moved without consent. Monitor the token's metadata for any unexpected changes. Regularly check the holder distribution to assess changes in concentration and potential market manipulation risks.

Contract & Record

1 audit on record
TypeSPL Token-2022
NetworkSolana
Token age1y
ContractXsueG8…3bd1
Token-2022 Extensions
Permanent DelegateSet (any holder can be force-burned)
Badge for your website
Circle xStock security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Aug 14, 2026100Critical

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the CRCLX contract address?

The Circle xStock (CRCLX) contract on Solana is XsueG8BtpquVJX9LVLLEGuViXUungE6WmK5YZ3p3bd1. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is Circle xStock a scam?

Quantum Audit's risk score for Circle xStock is 100/100 (Critical risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: Mintable; Upgradeability: Fixed code. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Who holds CRCLX?

As of Sep 22, 2026, the 10 largest holders own 67.6% of the supply. The Holders section on this page shows who they are by holder type.

Related Audits

6 more on the recordAll audits
NVIDIA xStockNVDAX · Solana100CriticalDominion SilverSILV · Solana100CriticalVida Global xStockVIDAX · Solana100CriticalSP500 xStockSPYX · Solana100CriticalGold xStockGLDX · Solana100CriticalOpenAI PreStocksOPENAI · Solana100Critical

Would You Like a More Detailed Audit of Circle xStock?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page