On-chain security analysis — is it a scam or legit?
SolanaThe Coinbase Wrapped BTC (cbBTC) SPL token mint presents critical security risks due to unrevoked Mint and Freeze authorities, which allow the respective key holders to mint unlimited tokens or freeze any holder's funds.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The 20 remaining pairs hold $78.0K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
Unresolved
Top 10 token accounts hold 64.98% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
Account for the risk of significant price volatility due to concentrated holdings.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The Coinbase Wrapped BTC (cbBTC) SPL token mint presents critical security risks due to unrevoked Mint and Freeze authorities, which allow the respective key holders to mint unlimited tokens or freeze any holder's funds. Additionally, the top 10 holders control 64.98% of the supply, posing a concentration risk. While third-party registry data was available, specific holder distribution details beyond the top 10 were not.
The cbBTC token operates on the standard spl-token program with a total supply of 335,920,214,592 units and 8 decimals. Both the Mint Authority () and Freeze Authority () remain active, posing significant control risks (7.3 Access Control). The token is not balance-mutable, non-transferable, or default-frozen, indicating standard transfer behavior for existing accounts.
The token exhibits a significant holder concentration (7.4 Economic), with the top 10 accounts holding 64.98% of the total supply, which could lead to price volatility from large sell-offs. Liquidity is robust at $6,984,966 USD, and the 24-hour volume of $4,044,613 USD results in a normal Volume/Liquidity Ratio of 0.58, not indicating wash trading. The DEX pair has been active for 662 days, providing a reasonable track record (7.6 External).
The token's metadata is mutable (7.7 Upgrades), meaning its name, symbol, or image can be altered post-launch. Crucially, the Mint Authority and Freeze Authority are still enabled, allowing for potential future changes to supply and account states, which represents a critical upgrade risk. The token does not utilize Token-2022 extensions like transfer hooks or permanent delegates, simplifying its core functionality.
Before interacting with this token, verify on-chain that the Mint Authority has been set to null to prevent arbitrary supply inflation.
Confirm that the Freeze Authority has also been revoked to ensure funds cannot be unilaterally frozen. Monitor the token's metadata for any unexpected changes to its branding or identity.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
