On-chain security analysis — is it a scam or legit?
SolanaThe DexFun (DEX) SPL Token Mint exhibits a robust security posture with both mint and freeze authorities revoked, indicating a fixed supply and immutable account states.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, holder concentration, which are read directly from chain state and from third-party risk registries.
Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.
Acknowledged
The DexFun (DEX) SPL Token Mint exhibits a robust security posture with both mint and freeze authorities revoked, indicating a fixed supply and immutable account states. No critical vulnerabilities were identified based on the provided on-chain metadata and market data. Third-party registry data indicates a 'Copycat token' signal, which warrants further investigation. Holder distribution data was unavailable from chain-native RPC.
The DexFun (DEX) token is implemented using the spl-token-2022 program. Key administrative authorities, including the Mint Authority and Freeze Authority, are both revoked, ensuring that no new tokens can be minted and no existing accounts can be frozen. The token does not utilize a Transfer Hook, nor does it have a high Transfer Fee (3.00%). Furthermore, the balance_mutable and metadata_mutable flags are set to False, preventing unauthorized balance adjustments or changes to token metadata.
The token's economic profile shows a healthy liquidity of $510,683 USD with a 24-hour volume of $417,209 USD, resulting in a normal Volume/Liquidity Ratio of 0.82. The DEX pair has been active for 22 days, providing some track record. Holder concentration data from external signals indicates the top 10 holders account for 45.12% of the supply, which is below thresholds for high concentration risk. However, chain-native RPC holder distribution data was unavailable.
The DexFun (DEX) token mint has a strong immutability profile. Both the Mint Authority and Freeze Authority have been revoked, preventing any future changes to the token supply or the ability to freeze accounts. The metadata_mutable flag is False, ensuring that the token's name, symbol, and image cannot be altered post-launch. Additionally, the transfer_fee_upgradable and transfer_hook_upgradable flags are False, confirming that these Token-2022 extensions cannot be modified.
Before interacting with this token, holders should independently verify the revocation status of the mint and freeze authorities directly on-chain to confirm supply immutability and account security.
Investigate the 'Copycat token' signal from the third-party risk registry to understand its implications for the project's legitimacy and potential risks. Monitor liquidity and trading volume for any significant changes that could impact price stability and exit opportunities.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The DexFun (DEX) contract on Solana is FFT4bgyrvzyB5TKAziLkAzBj8mboduzJeDdZ27TU4FHm. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for DexFun is 17/100 (Low risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: No mint; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
As of Sep 22, 2026, the 10 largest holders own 63.3% of the supply. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
