Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is DeAgentAI Safe?

AIABNB Chain
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Sep 4, 2026 · 1 audit on record
Chart
Medium RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical8/10Governance1/10Upgrades6/10Checks passed5 of 7Findings1 Low · 1 Info2
SummaryAI Copilot

The AIA token contract is a standard ERC20 implementation leveraging OpenZeppelin's audited libraries.

Read the full analysis
What raised the score
  • Ownership not renounced — owner is an EOA
  • Top-10 concentration > 70%
  • Liquidity not locked, but no owner/deployer address holds LP — market-depth risk, not rug risk
  • LP top1 unlocked holder = 100.0%
  • LP top3 unlocked holders = 100.0%
  • 1 Low finding(s) from audit
Exact factors
  • Ownership NOT renounced — owner is an EOA (single private key)
  • Top-10 concentration > 70% (95.3% total → 80.0% effective; 69.8% in EOAs, 25.5% in contracts — extreme)
  • Liquidity not locked, but no owner/deployer address holds LP — market-depth risk, not rug risk
  • LP top1 unlocked holder = 100.0% (independent LP — depth risk, pool = 99% of DEX liquidity)
  • LP top3 unlocked holders = 100.0% (independent LP — depth risk, pool = 99% of DEX liquidity)
  • 1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Sep 45 of 7 checks passed
Contract verifiedVerified
OwnershipRetained
MintNo mint
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Sep 4, 2026
25.5%Contracts69.8%Wallets4.7%
25.5%Contracts69.8%Wallets4.7%
ContractsWalletsEveryone elseBubble area = share of supply
95.3%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking25.5%
  • Walletsanonymous holders, free to sell69.8%
  • Everyone elsethe rest of the supply4.7%
Effective concentrationwhat the score reads80.0%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Sep 4, 2026

Liquidity

as of audit · Sep 4$749.6K across 5 pairs

The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$740.6KShare of depth98.8%
Top-1 Unlocked Holder100.0%
Top-3 Unlocked100.0%
Unlocked LP held by
0xd70a…b0e00x6ce1…24e20xa3b0…5aa2

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

1 Low1 Info
Low

Centralized Ownership

The AIA contract inherits from OpenZeppelin's Ownable contract, granting the deployer (owner) exclusive control over critical administrative functions such as transferOwnership and renounceOwnership. This centralization introduces a single point of failure; if the owner's private key is compromised, a malicious actor could gain control over the contract's ownership, potentially leading to unauthorized actions or loss of control.L-01

Issue

The AIA contract inherits from OpenZeppelin's Ownable contract, granting the deployer (owner) exclusive control over critical administrative functions such as transferOwnership and renounceOwnership. This centralization introduces a single point of failure; if the owner's private key is compromised, a malicious actor could gain control over the contract's ownership, potentially leading to unauthorized actions or loss of control.

Fix

For enhanced security and decentralization, consider transferring ownership to a multi-signature wallet (e.g., Gnosis Safe) or a time-locked contract. This would require multiple approvals or a waiting period for ownership changes, significantly reducing the risk associated with a single compromised key. If decentralization is not a primary goal, ensure the owner's private key is stored with the highest security standards.

Status

Unresolved

Info

Custom Decimals Value

The AIA token contract explicitly overrides the default ERC20 decimals() function, setting its value to 9 instead of the common 18. While this is a valid design choice, it deviates from the widely adopted standard for many ERC20 tokens. This non-standard decimal value can lead to misinterpretation of token amounts, display errors in wallets or exchanges, and incorrect calculations in integrated DeFi protocols if they implicitly assume 18 decimals.I-01

Issue

The AIA token contract explicitly overrides the default ERC20 decimals() function, setting its value to 9 instead of the common 18. While this is a valid design choice, it deviates from the widely adopted standard for many ERC20 tokens. This non-standard decimal value can lead to misinterpretation of token amounts, display errors in wallets or exchanges, and incorrect calculations in integrated DeFi protocols if they implicitly assume 18 decimals.

Fix

Ensure that all users, exchanges, wallets, and any integrated platforms are explicitly aware of and correctly configured for the token's 9-decimal value. Clear documentation and communication are essential to prevent user confusion and potential financial discrepancies. Thoroughly test all integrations to confirm correct handling of the token's decimal precision.

Status

Unresolved

Analysis

AI Copilotas of audit · Sep 4
Executive SummaryWhat the contract is and what the review found

The AIA token contract is a standard ERC20 implementation leveraging OpenZeppelin's audited libraries. It features a custom decimals value of 9 and mints a fixed total supply to the deployer during construction. The contract is simple, well-structured, and primarily relies on battle-tested components, resulting in a low overall risk profile. Key considerations include the centralized ownership and the non-standard decimal configuration.

Technical8/10Low risk

The technical architecture (7.1) is robust, implementing a basic ERC20 token by inheriting from OpenZeppelin's ERC20 and Ownable contracts. Code security (7.2) is high due to the extensive use of battle-tested OpenZeppelin libraries, which mitigate common vulnerabilities like reentrancy and integer overflows. The contract correctly overrides the decimals function to 9 (7.2), a deliberate design choice. No complex external interactions (7.6) or novel logic introduce significant technical risks.

Governance1/10High risk

The economic model (7.4) is straightforward: a fixed supply of 200,000,000 tokens (with 9 decimals) is minted entirely to the deployer at contract creation, with no further minting or burning mechanisms. Governance (7.5) is centralized, with the deployer acting as the Ownable owner. This owner can transfer or renounce ownership, representing a single point of control. While standard for simple tokens, this centralization requires careful management of the owner's private key.

Upgrades6/10Medium risk

The contract is not designed with an upgradeability mechanism (7.7), meaning its logic is immutable once deployed. This eliminates the risks associated with proxy patterns, implementation changes, or upgradeability misconfigurations. However, it also implies that any future feature enhancements or critical bug fixes would necessitate a new contract deployment and a token migration process.

Final RecommendationWhat to do about this score

It is crucial to securely manage the private key associated with the owner address, given its centralized control over token ownership.

Consider transferring ownership to a multi-signature wallet or a time-locked contract to enhance security and decentralization. Additionally, ensure all external systems and users are explicitly aware of the token's 9-decimal configuration to prevent potential display errors or miscalculations.

Contract & Record

1 audit on record
TypeToken
NetworkBNB Chain
Token age8mo
Contract0x53ec…55cc
Deployer0x4fd2…f1e9
Badge for your website
DeAgentAI security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Sep 2, 202659Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the AIA contract address?

The DeAgentAI (AIA) contract on BNB Chain is 0x53ec33cd4fa46b9eced9ca3f6db626c5ffcd55cc. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is DeAgentAI a scam?

Quantum Audit's risk score for DeAgentAI is 59/100 (Medium risk) as of Sep 4, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: No mint; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Is AIA liquidity locked?

Liquidity lock: Not locked (as of Sep 4, 2026). Total DEX liquidity: $749.6K.

Who holds AIA?

As of Sep 4, 2026, the 10 largest holders own 95.3% of the supply. The Holders section on this page shows who they are by holder type.

Related Audits

6 more on the recordAll audits
Slap CatSLAP · BNB Chain59MediumUnitasUP · BNB Chain59MediumniulaiBNB Chain59MediumRICE AIRICE · BNB Chain59MediumPrometeusPROM · BNB Chain59MediumDAPPOSDOS · BNB Chain59Medium

Would You Like a More Detailed Audit of DeAgentAI?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page