Is Cup Markets (CUP) Safe? Smart Contract Security Analysis

Security Findings

1 High1 Low

High

Very Low Liquidity

H-01Total DEX liquidity is $8,051. Slippage will be severe; large positions cannot be exited without significant loss.

IssueTotal DEX liquidity is $8,051. Slippage will be severe; large positions cannot be exited without significant loss.

FixAccount for the fee in any swap calculation.

StatusUnresolved

Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch.

IssueToken name, symbol, or image can be changed post-launch.

FixVerify metadata against off-chain expectations before trusting branding.

StatusUnresolved

Category Ratings

TechnicalMedium4/10

The Cup Markets (CUP) token operates on the standard `spl-token` program. Both the Mint Authority and Freeze Authority are revoked, indicating that no new tokens can be minted and no existing accounts can be frozen. The token has 6 decimals and a supply of 999,559,647.574729. While the token does not utilize advanced Token-2022 extensions like permanent delegates or transfer hooks, its metadata is mutable, as noted in the findings.

GovernanceHigh1/10

The economic profile of the Cup Markets (CUP) token presents a high risk due to its very low DEX liquidity, currently at $8,051. This level of liquidity makes large trades highly susceptible to significant slippage. The 24-hour trading volume is $17, with a normal Volume/Liquidity Ratio of 0.00. The DEX pair has been active for 48 days, providing some track record. Information regarding holder concentration was not available from chain-native RPC.

UpgradesMedium4/10

The Cup Markets (CUP) token has a fixed supply model as its Mint Authority is revoked, preventing further token issuance. Similarly, the Freeze Authority is also revoked, meaning no accounts can be frozen. The token does not implement Token-2022 specific upgradeable features like transfer fee or transfer hook upgradability. However, the token's metadata is mutable, allowing for changes to its descriptive information post-launch, as detailed in the findings.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$9.9K

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

9 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 70% (94.5% total → 94.5% effective; 94.5% in EOAs, 0.0% in contracts — extreme)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Liquidity < $10k ($9,922 across 1 pairs — easily drained)
Token age < 30 days (still settling)
1 High finding(s) from audit
1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Frequently Asked Questions

Is Cup Markets a scam?

The provided data points for Cup Markets (CUP) indicate several high-risk factors that are commonly associated with potential scams, though it does not definitively label it as such. Key concerns include an unverified contract, unrenounced ownership, and unlocked liquidity. However, the absence of a mint function is a positive signal. Investors should be aware of these fundamental risks when evaluating CUP and conduct thorough due diligence.

Is Cup Markets safe to buy?

Investing in Cup Markets (CUP) carries significant risks, highlighted by its high-risk score of 65/100. Key safety concerns include the contract not being verified, making its underlying code opaque. Furthermore, ownership of the contract has not been renounced, leaving significant control with the deployer. The liquidity also remains unlocked, posing a risk of removal. These factors suggest a high-risk environment that investors should carefully consider.

Has Cup Markets been audited?

The provided information indicates that the Cup Markets (CUP) contract has not been verified. Contract verification is a foundational step, making the code publicly visible and available for review by security analysts and the community. Without verification, a formal audit by a reputable third-party security firm is highly unlikely, as the auditor would first require access to the verifiable source code.

Is Cup Markets Safe?