On-chain security analysis — is it a scam or legit?
SolanaThe Federal Oil Trust Fund (FOTF) token demonstrates a secure configuration with both mint and freeze authorities permanently revoked.
Read the full analysisSolana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Nov 5, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The token metadata (name, symbol, image) is currently mutable, allowing the creator to change these details post-launch.
Verify the token metadata on-chain via a block explorer before interacting with the asset to ensure it matches the expected branding.
Unresolved
The ten largest holders own 13.7% of supply. What remains: 13.7% in wallets, 0.0% in other contracts. 978 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
978 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the pool's liquidity is locked for good in the pool program — only its trading fees can be collected; no one can withdraw the liquidity.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $58K (DexScreener, all pools). 24h trading volume $157K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $58K of DEX liquidity across 1 pools. Launch: 15 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token's oldest DEX pool is 15 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The Federal Oil Trust Fund (FOTF) token demonstrates a secure configuration with both mint and freeze authorities permanently revoked. Liquidity is fully locked, and holder concentration is low, indicating a stable economic structure. The only identified risk is the mutability of token metadata, which is common for SPL tokens.
The token utilizes the standard SPL Token program (v3). 7.1 Architecture and 7.2 Code Security are consistent with standard, audited SPL mints. 7.3 Access Control is robust as both mint and freeze authorities are revoked. 7.8 Operations are standard with no custom extensions or hooks present.
7.4 Economic and 7.5 Governance metrics are healthy with top 10 holders controlling only 13.71% of supply. 7.6 External liquidity is $58,345 and is 100% locked, preventing rug-pull scenarios via liquidity withdrawal. Trading volume is stable with a 2.73 ratio, suggesting organic activity over a 15-day period.
7.7 Upgrades are not applicable as SPL mints are immutable once initialized. The only mutable aspect is the token metadata, which allows for potential branding changes. This is a standard configuration and does not impact the underlying token logic or security.
The token is in a secure state with no critical or high-risk vulnerabilities.
Users should verify the current metadata on-chain before trading to ensure it matches expected branding, as the metadata remains mutable. Monitor the project's official communication channels for any announcements regarding metadata updates. No further technical action is required as the core authorities are permanently revoked.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
