On-chain security analysis — is it a scam or legit?
SolanaThe CyberLeek (CYBERLEEK) SPL token mint audit identified a low risk due to mutable metadata, which allows for changes to the token's name, symbol, or image post-launch.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
metadata_mutable: True. This means the token name, symbol, or image can be changed post-launch.L-01The token's metadata is mutable, as indicated by the fact metadata_mutable: True. This means the token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The CyberLeek (CYBERLEEK) SPL token mint audit identified a low risk due to mutable metadata, which allows for changes to the token's name, symbol, or image post-launch. Critical authorities, including mint and freeze, are revoked, ensuring a fixed supply and unfreezable accounts. Holder distribution data was unavailable from chain-native RPC.
The CyberLeek token operates on the spl-token program. Its mint authority and freeze authority are both revoked, ensuring that no new tokens can be minted and no existing accounts can be frozen. The token supply is fixed at 729,946,339.929827077 tokens with 9 decimals. The token is not a Token-2022 extension, as indicated by the spl-token program and the absence of Token-2022 specific extensions like permanent delegate, transfer hook, or default account state frozen.
The token exhibits moderate holder concentration, with the top 10 accounts holding 27.36% of the supply, which does not indicate extreme centralization. Liquidity is robust at $528,076, and the 24-hour volume of $1,599,292 results in a normal Volume/Liquidity Ratio of 3.03, suggesting genuine trading activity rather than wash trading. The pair has been active for 14 days, providing some track record.
The mint authority and freeze authority for the CyberLeek token are both revoked, meaning these critical administrative powers cannot be used to alter the token's supply or freeze accounts. The token's metadata is mutable, allowing for potential changes to its name, symbol, or image after launch. No Token-2022 specific upgradeability features like transfer_fee_upgradable or transfer_hook_upgradable are present or applicable, as this is an spl-token program token.
Holders should monitor the token's metadata on-chain to verify that its name, symbol, and image align with their expectations, as these attributes can be changed.
While mint and freeze authorities are revoked, the mutable metadata introduces a branding risk. Before making significant investments, consider the implications of potential metadata changes on the token's perceived identity and market value.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
