Quantum Audit Logo
Launch App

Is Darkex Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Darkex DARKEX
0x0d0b…03b9
BNB Chain
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

The Darkex contract is an ERC-20 token with significant owner privileges. The owner can control critical aspects such as token transfer enablement, transaction fees, and fund withdrawals. While the contract implements standard ERC-20 functionality, these centralized controls introduce medium-level risks related to economic manipulation and operational decisions. Three medium-severity findings were identified.

3 Medium6 Informational
Volume 24h
$45.0K
Liquidity
$51.9K
Price
$0.01434
Token Age
16d
Top 10 Holders
92.1%

Security Findings

Medium

Unchecked Low-Level Call in `manualSwap()`

CD-01The `manualSwap()` function, callable by the owner, executes a `swapTokensForEth()` function which might contain an unchecked low-level call. If `swapTokensForEth()` fails for any reason (e.g., insufficient liquidity, reentrancy guard), the transaction might still proceed without reverting, potentially leading to unexpected state inconsistencies or loss of funds.
IssueThe `manualSwap()` function, callable by the owner, executes a `swapTokensForEth()` function which might contain an unchecked low-level call. If `swapTokensForEth()` fails for any reason (e.g., insufficient liquidity, reentrancy guard), the transaction might still proceed without reverting, potentially leading to unexpected state inconsistencies or loss of funds.
FixThe `swapTokensForEth()` function, especially if it involves external calls, should ensure that all return values from low-level calls are properly checked and handled. This prevents unexpected behavior and potential loss of assets if the external call fails.
StatusUnresolved
Medium

Owner Can Pause or Block Token Transfers

CP-05The contract owner has the ability to enable or disable token swaps and manual swaps using the `toggleSwap()` and `manualSwap()` functions. This means the owner can effectively pause or block the ability for users to transfer or sell their tokens, which could disrupt trading or liquidity.
IssueThe contract owner has the ability to enable or disable token swaps and manual swaps using the `toggleSwap()` and `manualSwap()` functions. This means the owner can effectively pause or block the ability for users to transfer or sell their tokens, which could disrupt trading or liquidity.
FixToken holders should be aware that the owner can control the ability to transfer tokens. It is recommended that the project clearly communicates the conditions under which these controls might be exercised and consider implementing a multi-signature wallet for such critical functions to reduce single-point-of-failure risk.
StatusUnresolved
Medium

Owner Can Change Token Transfer Fees

CP-07The contract owner can modify the `reflectionTax` and `treasuryTax` applied to token transfers using the `setFee()` function. This allows the owner to increase or decrease the fees taken from every token transaction, potentially impacting the value and liquidity of the token without prior notice.
IssueThe contract owner can modify the `reflectionTax` and `treasuryTax` applied to token transfers using the `setFee()` function. This allows the owner to increase or decrease the fees taken from every token transaction, potentially impacting the value and liquidity of the token without prior notice.
FixToken holders should understand that the owner can unilaterally change transfer fees. Transparency regarding fee changes is crucial. Consider decentralizing this control or implementing a time-locked mechanism for fee changes to provide users with advance notice.
StatusUnresolved
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 92.1% of supply. Of that, 84.7% locked, 1.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 5.6% in wallets, 0.0% in other contracts. 331 holders in total.
IssueThe ten largest holders own 92.1% of supply. Of that, 84.7% locked, 1.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 5.6% in wallets, 0.0% in other contracts. 331 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Listed, but not independently verified

QA-IDENTITYListed on CoinGecko as Darkex (DARKEX), rank #4348. 331 holders.
IssueListed on CoinGecko as Darkex (DARKEX), rank #4348. 331 holders.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Liquidity time-locked

QA-LIQUIDITY100.0% of the pool's LP is burned or time-locked. 100.0% is locked in PinkLock02 until 05 Dec 2026 (56 days). Until then nobody — the project included — can withdraw it unless the locker contract itself is flawed; after that date the lock's owner can.
Issue100.0% of the pool's LP is burned or time-locked. 100.0% is locked in PinkLock02 until 05 Dec 2026 (56 days). Until then nobody — the project included — can withdraw it unless the locker contract itself is flawed; after that date the lock's owner can.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $52K (DexScreener, all pools). 24h trading volume $56K (CoinGecko, all markets, daily snapshot). 24h trading volume $45K (DexScreener, all pools).
IssueLiquidity $52K (DexScreener, all pools). 24h trading volume $56K (CoinGecko, all markets, daily snapshot). 24h trading volume $45K (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: 4.5% on buy, 4.5% on sell. Market: $52K of DEX liquidity across 1 pools. Launch: 16 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: 4.5% on buy, 4.5% on sell. Market: $52K of DEX liquidity across 1 pools. Launch: 16 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged
Info

Recently launched — 16 days of market history

QA-RECENTThe token's oldest DEX pool is 16 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
IssueThe token's oldest DEX pool is 16 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
FixRe-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
StatusAcknowledged

Category Ratings

TechnicalLow8/10

The Darkex contract implements standard ERC-20 token functionalities, including `transfer` and `transferFrom`. The contract owner retains significant control, allowing them to withdraw ETH and tokens via `withdrawETH()` and `withdrawTokens()`, and to manage fee exclusions. A medium-severity issue was identified where the `manualSwap()` function, which calls `swapTokensForEth()`, may contain an unchecked low-level call (7.2 Code Security). This could lead to unexpected behavior if the swap operation fails.

GovernanceMedium4/10

The contract's economic parameters are highly centralized under owner control. The owner can set the `treasuryAddress` and exclude accounts from fees using `setTreasuryAddress()` and `excludeMultipleAccountsFromFees()`. Critically, the owner can also adjust the `reflectionTax` and `treasuryTax` via `setFee()`, directly impacting token economics (7.4 Economic). Furthermore, the owner can toggle the `swapEnabled` state and trigger `manualSwap()` which affects transfer rules, posing a medium risk to token liquidity and market stability (7.5 Governance).

UpgradesLow7/10

The Darkex contract is not designed as an upgradeable proxy contract (7.7 Upgrades). This means its logic cannot be modified after deployment, providing immutability but also preventing future bug fixes or feature enhancements without a full redeployment and migration.

Security Checklist

Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionPass
Liquidity LockedPass
Not a ProxyPass
HoneypotNoneBuy Tax4.5%Sell Tax4.5%

Holder Composition

5.6% in wallets0.0% in contracts
Effective Concentration5.6%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Locked100.0% · Null Address, PinkLock02

Key Addresses

Deployer
0x9fb4…599f

What Raised This Score

  • A privileged address controls a switch that decides whether transfers go through
  • Owner can change the buy/sell tax
  • Code: Unchecked Low-Level Call in `manualSwap()` (Medium, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

Unibase (UB)Medium RiskCapMedium RiskVELOMedium RiskGriotMedium RiskAEGIS X (AGX)Medium RiskSTABLEMedium Risk

Would You Like a More Detailed Audit of Darkex?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit