Quantum Audit Logo

Is Dogelon a Scam?

Honeypot, rug-pull and ownership checks

Is this your token? Publish your own audit on this page →

Dogelon ELON
0x761d…60f3
Ethereum
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked 1d ago 1 audit on record
DexScreener ↗
How is this score calculated? → Low Risk
Executive SummaryAI Copilot

The Dogelon contract implements a standard ERC20 token using OpenZeppelin's SafeMath library. The primary economic risk identified is the complete centralization of the initial token supply to the deployer address. Technically, the contract is robust, utilizing established patterns and mitigating common vulnerabilities like integer overflows.

1 High3 Informational
i Our automated scanner reviewed Dogelon (ELON) on Ethereum. 4 of 5 security checks passed — see the full breakdown below.
Volume 24h
$36.5K
Liquidity
$5.79M
Price
$0.0000000335
Age
5y
Top 10 Holders
57.9%

Security Findings

1 High3 Info
High

Centralized Initial Token Supply

H-01The `Dogelon` contract's constructor mints the entire initial supply of 10e32 tokens to the deployer's address (`msg.sender`). This results in 100% of the token supply being held by a single entity, creating a significant centralization risk. This concentration of power could lead to market manipulation, such as large-scale selling (rug pull), or give the deployer undue influence over the token's ecosystem.
IssueThe `Dogelon` contract's constructor mints the entire initial supply of 10e32 tokens to the deployer's address (`msg.sender`). This results in 100% of the token supply being held by a single entity, creating a significant centralization risk. This concentration of power could lead to market manipulation, such as large-scale selling (rug pull), or give the deployer undue influence over the token's ecosystem.
FixImplement a more decentralized distribution strategy for the initial token supply. This could involve distributing tokens to multiple addresses, locking a portion in a liquidity pool, or vesting tokens over time. For future projects, consider using a multi-signature wallet for initial token distribution or critical administrative functions.
StatusUnresolved
Info

No Pause or Blacklist Functionality

I-01The ERC20 token implementation does not include any pause or blacklist functionality. While this enhances decentralization by preventing arbitrary freezing of transfers or accounts, it also means there is no mechanism to stop token transfers in case of a critical vulnerability, exploit, or regulatory requirement.
IssueThe ERC20 token implementation does not include any pause or blacklist functionality. While this enhances decentralization by preventing arbitrary freezing of transfers or accounts, it also means there is no mechanism to stop token transfers in case of a critical vulnerability, exploit, or regulatory requirement.
FixThis is a design choice. If the project requires the ability to halt operations or restrict certain addresses in emergencies, consider implementing `Pausable` or `Blacklist` patterns. However, be aware that such features introduce centralization and potential attack vectors.
StatusUnresolved
Info

Fixed Decimals

I-02The `_decimals` variable is set to 18 in the `ERC20` constructor and can only be set once via `_setupDecimals` (which is called in the constructor). This means the token's decimal precision is fixed at 18 and cannot be changed after deployment. While 18 is a common standard for ERC20 tokens, it's worth noting its immutability.
IssueThe `_decimals` variable is set to 18 in the `ERC20` constructor and can only be set once via `_setupDecimals` (which is called in the constructor). This means the token's decimal precision is fixed at 18 and cannot be changed after deployment. While 18 is a common standard for ERC20 tokens, it's worth noting its immutability.
FixThis is standard behavior for most ERC20 tokens and generally not an issue. Ensure that all integrations and front-end applications correctly handle the 18 decimal places.
StatusUnresolved
Info

Older Solidity Compiler Version

I-03The contract uses Solidity compiler version `^0.7.1`. While this version is functional, it is not the latest stable release. Newer compiler versions often include bug fixes, security enhancements, and gas optimizations.
IssueThe contract uses Solidity compiler version `^0.7.1`. While this version is functional, it is not the latest stable release. Newer compiler versions often include bug fixes, security enhancements, and gas optimizations.
FixConsider upgrading to the latest stable Solidity compiler version (e.g., `^0.8.x`) for new deployments to benefit from recent improvements and security patches, such as default checked arithmetic. Thoroughly test the contract after any compiler version upgrade.
StatusUnresolved

Category Ratings

TechnicalLow9/10

The technical architecture (7.1) is a straightforward ERC20 token, inheriting from well-audited OpenZeppelin contracts. Code security (7.2) is strong, with SafeMath used throughout to prevent integer overflow/underflow vulnerabilities. Access control (7.3) is standard for an ERC20, with no additional privileged roles beyond the token holder's ability to transfer or approve. There are no complex external interactions (7.6) or reentrancy vectors.

GovernanceMedium4/10

The economic model (7.4) of the Dogelon token presents a significant centralization risk. The entire initial supply of 10e32 tokens is minted to the contract deployer (msg.sender) in the constructor, as seen in `_mint(msg.sender, 10e32)`. This means the deployer holds 100% of the token supply, enabling potential market manipulation or a 'rug pull'. There are no governance mechanisms (7.5) implemented to decentralize control or manage the token supply post-deployment.

UpgradesLow7/10

The contract is not designed to be upgradeable (7.7), meaning its logic cannot be modified after deployment. This eliminates upgrade-related risks such as proxy misconfigurations or malicious upgrade paths. However, it also means any discovered vulnerabilities or desired feature changes would require a new contract deployment and migration.

Security Checklist

4/5 checks passed
Contract VerifiedPass
Ownership Renounced?
No Mint FunctionPass
Liquidity LockedPass
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

57.9% in top 10
35.6% in wallets22.3% in contracts
Effective Concentration44.5%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$5.88M across 5 pairs
Uniswap v2WETHanalysed$5.79M98.6%ShibaswapWETH$70.2K1.2%Uniswap v3WETH$12.7K0.2%ShibaswapSHIB$1.8K0.0%Uniswap v2USDC$2950.0%

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Burned99.8% · ≈ permanent lock
LP Locked99.8%

Key Addresses

10 addresses
Deployer
0xaa91…23f4
Unlocked LP Held By
0xe71c…ca5e0x4018…cc940x47a2…a6770x820c…d5380xadd6…70150x9251…075c0x4d39…4e9e0x1a0c…e48f0xd8af…6aee

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

3 factors
  • Ownership status UNKNOWN (owner could not be resolved)
  • Top-10 concentration > 30% (57.9% total → 44.5% effective; 35.6% in EOAs, 22.3% in contracts — moderate)
  • 1 High finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
4CHANLow RiskMOO DENG (MOODENG)Low RiskAsteroidLow RiskAmerica Pac (PAC)Low RiskJerry The Turtle By Matt Furie (JYAI)Low RiskNon-Playable Coin (NPC)Low Risk

Would You Like a More Detailed Audit of Dogelon?

Paste the contract address into our AI-powered scanner for a deeper real-time report — free, with every scoring factor shown.

Get Detailed Audit