Early-stage security check — honeypot & rug-pull analysis
EthereumThe ElGato token is a standard ERC-20 implementation with ownership renounced.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 20, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The contract uses tx.origin to determine authorization or logic within the balanceOf function. This is a security risk because an attacker can create a malicious contract that calls the token contract, tricking the logic into identifying the original transaction initiator rather than the immediate caller.
Replace all instances of tx.origin with msg.sender to ensure that authorization and logic are tied to the immediate caller, which is the standard and secure practice for smart contract interactions.
Unresolved
The ten largest holders own 12.1% of supply. Of that, 7.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 3.9% in wallets, 0.8% in other contracts. 697 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
697 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $112K (DexScreener, all pools). 24h trading volume $2.4M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $112K of DEX liquidity across 1 pools. Launch: 2 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token's oldest DEX pool is 2 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The ElGato token is a standard ERC-20 implementation with ownership renounced. The contract logic is straightforward, and the renouncement of ownership effectively disables all administrative functions, mitigating risks associated with centralized control. A minor vulnerability regarding tx.origin usage was identified, though its impact is limited in the current state.
The contract follows standard ERC-20 patterns with 7.1 Architecture and 7.2 Code Security being well-implemented. 7.3 Access Control is currently inert due to ownership renouncement, ensuring no further administrative changes can occur. 7.6 External dependencies are minimal, relying on standard OpenZeppelin-like libraries for arithmetic and ownership.
7.4 Economic and 7.5 Governance risks are effectively nullified by the renouncement of ownership. There are no active governance mechanisms or inflationary parameters that can be adjusted by any party. The token economy is fixed, providing stability for holders.
7.7 Upgrades are not supported as the contract is not a proxy. 7.8 Operations are static, meaning the contract behavior is immutable. No upgrade risk exists for this implementation.
The protocol is currently in a secure, immutable state due to the renouncement of ownership.
No further action is required for the current deployment as administrative functions are permanently disabled. For future deployments, ensure that any use of tx.origin is replaced with msg.sender to prevent potential phishing or contract-based authorization bypasses, even if the current impact is negligible.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page
