On-chain security analysis — is it a scam or legit?
EthereumThe CoW Protocol Token is an ERC-20 standard token with an inflationary mechanism.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Sep 4, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x616d…0669No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
cowDao Address Leads to Permanent Loss of Minting CapabilitycowDao address, which is the sole entity authorized to call the mint function, is declared as immutable. This means its value is set during construction and cannot be changed thereafter. If the cowDao address is ever compromised, becomes inactive, or its controlling entity (e.g., a DAO or multi-sig) ceases to function or loses its keys, the ability to mint new tokens will be permanently lost. This directly impacts the token's intended inflationary model and long-term economic viability (7.3 Access Control, 7.8 Operations).C-01The cowDao address, which is the sole entity authorized to call the mint function, is declared as immutable. This means its value is set during construction and cannot be changed thereafter. If the cowDao address is ever compromised, becomes inactive, or its controlling entity (e.g., a DAO or multi-sig) ceases to function or loses its keys, the ability to mint new tokens will be permanently lost. This directly impacts the token's intended inflationary model and long-term economic viability (7.3 Access Control, 7.8 Operations).
Implement a mechanism to allow the cowDao address to be updated by a secure governance process (e.g., a time-locked multi-sig or a DAO vote). This would provide a recovery path in case of compromise or inactivity of the current cowDao controller.
Unresolved
mint function, which controls the yearly inflation of the token supply, is exclusively callable by the cowDao address. While the MAX_YEARLY_INFLATION and TIME_BETWEEN_MINTINGS constants provide some programmatic limits, the decision to mint, the target recipient, and the exact amount (up to the cap) rests entirely with cowDao. This introduces a significant centralization point where a single entity has full control over the token's supply expansion (7.3 Access Control, 7.5 Governance).M-01The mint function, which controls the yearly inflation of the token supply, is exclusively callable by the cowDao address. While the MAX_YEARLY_INFLATION and TIME_BETWEEN_MINTINGS constants provide some programmatic limits, the decision to mint, the target recipient, and the exact amount (up to the cap) rests entirely with cowDao. This introduces a significant centralization point where a single entity has full control over the token's supply expansion (7.3 Access Control, 7.5 Governance).
Consider decentralizing the minting authority further, perhaps by integrating with a more robust on-chain governance system or by requiring multiple independent parties to approve minting operations. Clearly document the operational procedures and security measures for the cowDao address.
Unresolved
StorageAccessible MixinCowProtocolToken contract inherits StorageAccessible. While the full code for StorageAccessible is not provided, such mixins often relate to proxy patterns or advanced storage layouts. The provided metadata indicates is_proxy: false. If StorageAccessible is intended for upgradeability or specific storage management in a proxy context, its inclusion in a non-proxy contract might be misleading or indicate an incomplete design, or it might simply be an unused utility (7.1 Architecture, 7.7 Upgrades).L-01The CowProtocolToken contract inherits StorageAccessible. While the full code for StorageAccessible is not provided, such mixins often relate to proxy patterns or advanced storage layouts. The provided metadata indicates is_proxy: false. If StorageAccessible is intended for upgradeability or specific storage management in a proxy context, its inclusion in a non-proxy contract might be misleading or indicate an incomplete design, or it might simply be an unused utility (7.1 Architecture, 7.7 Upgrades).
Clarify the purpose of the StorageAccessible mixin. If the contract is not intended to be a proxy or upgradeable, and StorageAccessible is not providing any active functionality, consider removing it to reduce contract complexity and potential for confusion. If it is for future upgradeability, ensure the deployment strategy aligns with a proxy pattern.
Unresolved
mint function allows cowDao to mint up to MAX_YEARLY_INFLATION (3%) of the current total supply once per TIME_BETWEEN_MINTINGS (365 days). If cowDao chooses to mint less than the maximum allowed amount in a given year, the remaining "allowance" for that year is not carried over to subsequent years. This means any unused inflation capacity is permanently forfeited (7.4 Economic).I-01The mint function allows cowDao to mint up to MAX_YEARLY_INFLATION (3%) of the current total supply once per TIME_BETWEEN_MINTINGS (365 days). If cowDao chooses to mint less than the maximum allowed amount in a given year, the remaining "allowance" for that year is not carried over to subsequent years. This means any unused inflation capacity is permanently forfeited (7.4 Economic).
This is a design choice and not a vulnerability. Ensure this behavior is clearly documented and understood by token holders and the cowDao operators. If a "banking" mechanism for unused inflation is desired, the contract logic would need to be modified.
Unresolved
The CoW Protocol Token is an ERC-20 standard token with an inflationary mechanism. The contract implements a yearly minting cap of 3% of the total supply, controlled by a designated cowDao address. While the core ERC-20 functionality and inflation logic appear sound, a critical vulnerability exists due to the immutability of the cowDao address, posing a long-term risk to the token's economic model and operational continuity.
The technical implementation of the CoW Protocol Token is generally robust, leveraging standard OpenZeppelin patterns for ERC-20 and ERC-20 Permit functionalities. Solidity 0.8.10 is used, mitigating common integer overflow/underflow issues. The mint function correctly implements its access control and inflation cap logic (7.2 Code Security). However, the presence of the StorageAccessible mixin in a non-proxy contract could indicate an architectural ambiguity (7.1 Architecture).
The token's economic model includes a controlled annual inflation of up to 3% of the total supply, managed by the cowDao address (7.4 Economic). This centralized control over minting is a significant governance consideration (7.5 Governance). Critically, the cowDao address is immutable, meaning if it becomes compromised or inactive, the ability to mint new tokens will be permanently lost, severely impacting the token's long-term economic design (7.3 Access Control, 7.8 Operations).
The contract is not explicitly designed for upgradeability, as indicated by is_proxy: false. The cowDao address is immutable, preventing changes to the minting authority post-deployment (7.7 Upgrades). While the StorageAccessible mixin is included, its specific role in a non-proxy context is unclear, but it does not inherently introduce upgradeability risks in this configuration.
It is strongly recommended to address the critical issue of the immutable cowDao address.
Implement a secure, multi-party, or time-locked governance mechanism to allow for the update of the cowDao address, ensuring the long-term operational continuity of the token's inflationary model. Additionally, clearly document the purpose of the StorageAccessible mixin and the operational procedures for the cowDao to enhance transparency and reduce potential risks associated with centralized control.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
