This audit of the Credible Finance (CRED) SPL token mint reveals a critical risk: the mint authority is still active, allowing for unlimited token creation and potential dilution of all holders. Additionally, the DEX trading pair is very new, lacking sufficient track record, and the token's metadata is mutable. Holder distribution data was unavailable from chain-native RPC.

Early-stage security check — honeypot & rug-pull analysis
Is Credible Finance a Scam?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →This audit of the Credible Finance (CRED) SPL token mint reveals a critical risk: the mint authority is still active, allowing for unlimited token creation and potential dilution of all holders.
Read the full analysis- Mintable supply — no cap found, dilution unbounded
- Top-10 concentration > 70%
- LP lock status UNKNOWN — the pool's LP could not be read
- Token age < 7 days
- 1 Critical finding(s) from audit
- 1 Medium finding(s) from audit
- 1 Low finding(s) from audit
Exact factors
- Mintable supply — no cap found, dilution unbounded
- Top-10 concentration > 70% (71.6% total → 71.6% effective; 71.6% in EOAs, 0.0% in contracts — extreme)
- LP lock status UNKNOWN — the pool's LP could not be read
- Token age < 7 days (early, volatile)
- 1 Critical finding(s) from audit
- 1 Medium finding(s) from audit
- 1 Low finding(s) from audit
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Sep 22Holders
as of audit · Sep 22, 2026- Top 10 holdersthe ten largest balances71.6%
- Everyone elsethe rest of the supply28.4%
Holder balances as recorded by the audit of Sep 22, 2026
Liquidity
as of audit · Sep 22- MetadaoUSDCAnalysed$1.94M77.6%
- Meteora DYN2USDC$516.5K20.7%
- Meteora DLMMUSDC$42.2K1.7%
- Meteora DLMMUSDC$1.1K0.0%
The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
Security Findings
CriticalMint Authority Not Revoked
The mint authority is ATESfx…2er4. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.C-01
Issue
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Fix
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Status
Unresolved
MediumVery New Pair
DEX pair was created 1 days ago. Insufficient track record to assess team or holder behaviour.M-01
Issue
DEX pair was created 1 days ago. Insufficient track record to assess team or holder behaviour.
Fix
Monitor the token's activity and team communications closely for an extended period before making significant investments.
Status
Unresolved
LowMutable Metadata
Token name, symbol, or image can be changed post-launch.L-01
Issue
Token name, symbol, or image can be changed post-launch.
Fix
Verify metadata against off-chain expectations before trusting branding.
Status
Unresolved
Analysis
AI Copilotas of audit · Sep 22The Credible Finance (CRED) token is implemented using the standard spl-token program (v3). A critical finding is that the mint authority, , remains active, enabling the creation of new tokens. The freeze authority, however, has been revoked, preventing the freezing of holder accounts. The token does not have balance mutability or default frozen account states.
The token's DEX pair is very new, having been created only 1 day ago, which means there is insufficient track record for market behavior. Total DEX liquidity stands at $2,031,814, with a 24-hour volume of $1,180,571, resulting in a normal Volume/Liquidity Ratio of 0.58. Holder concentration data was unavailable from chain-native RPC, preventing a full assessment of distribution risk.
The mint authority for the token is still active, allowing for potential changes to the total supply. The freeze authority has been revoked, which is a positive security measure. The token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. There are no active transfer hook or transfer fee extensions that are upgradable.
Before engaging with this token, verify on-chain that the mint authority () has been permanently revoked to ensure a fixed supply.
Monitor the token's metadata for any unexpected changes that could affect its branding or perceived legitimacy. Due to the very recent launch of the DEX pair, exercise caution and observe market dynamics and team activity over a longer period to assess stability and community trust.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Sep 22, 202669High
- Sep 4, 202684High
- Jul 23, 202691Critical
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Would You Like a More Detailed Audit of Credible Finance?
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page