Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is FIGHT Safe?

BNB Chain
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 31, 2026 · 1 audit on record
Chart
Medium RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical8/10Governance1/10Upgrades3/10Checks passed4 of 7Findings2 Medium · 4 Info6
SummaryAI Copilot

The FightOFTSecondary contract is an Omnichain Fungible Token implementation on BSC.

Read the full analysis
What raised the score
  • Mintable supply — no cap found, dilution unbounded; held by endpoint: Other-Contract
  • Liquidity not locked
  • Top-10 concentration > 50%
Exact factors
  • Mintable supply — no cap found, dilution unbounded; held by endpoint: Other-Contract
  • Liquidity NOT locked (100% of the pool; this pool is 90% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 50% (89.0% total → 57.0% effective; 35.7% in EOAs, 53.3% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 314 of 7 checks passed
Contract verifiedVerified
OwnershipRetained
MintMintable
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 31, 202624,081 holders
53.3%Contracts35.7%Wallets11.0%Everyone else
53.3%Contracts35.7%Wallets11.0%
ContractsWalletsEveryone elseBubble area = share of supply
89.0%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking53.3%
  • Walletsanonymous holders, free to sell35.7%
  • Everyone else24,071 holders11.0%
Effective concentrationwhat the score reads57.0%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 31, 2026

Liquidity

as of audit · Oct 31$655.4K across 20 pairs
  • Pancakeswap Infinity (CLMM)USDTAnalysed$591.1K90.2%
  • Uniswap V4 (BSC)USDT$50.3K7.7%
  • Uniswap V4 (BSC)USDT$2.1K0.3%
  • Uniswap V4 (BSC)USDT$1.8K0.3%
  • Uniswap V4 (BSC)USDT$1.7K0.3%
  • Uniswap V4 (BSC)USDT$1.6K0.2%
Show 4 more pairs
  • Uniswap V4 (BSC)USDT$1.6K0.2%
  • Pancakeswap Infinity (CLMM)BNB$9780.1%
  • Uniswap V4 (BSC)USDT$8390.1%
  • Uniswap V4 (BSC)USDT$5500.1%

The 10 remaining pairs hold $2.9K between them and are not listed. The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$591.1KShare of depth90.2%
Top-1 Unlocked Holder99.9%
Top-3 Unlocked100.0%
Unlocked LP held by
0x43f3…85a30xbee3…1e9c0x6458…2df5

Security Findings

2 Medium4 Info
Medium

Privileged Cross-Chain Minting Capability

The functions send, lzReceiveSimulate, and lzReceive allow the contract to mint new tokens based on cross-chain messages. This increases the total supply and can dilute existing token holders if the cross-chain bridge or the LayerZero endpoint is compromised.CP-01

Issue

The functions send, lzReceiveSimulate, and lzReceive allow the contract to mint new tokens based on cross-chain messages. This increases the total supply and can dilute existing token holders if the cross-chain bridge or the LayerZero endpoint is compromised.

Fix

Implement a maximum minting cap per transaction or a time-based velocity limit to restrict the amount of tokens that can be minted via cross-chain operations.

Status

Unresolved

Medium

Liquidity not locked

0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0x43f3…85a3 — holds 99.9% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 90% of the token's DEX liquidity; the other pools were not assessed.QA-LIQUIDITY

Issue

0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0x43f3…85a3 — holds 99.9% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 90% of the token's DEX liquidity; the other pools were not assessed.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

Who holds the supply

The ten largest holders own 89.0% of supply. What remains: 35.7% in wallets, 53.3% in other contracts. 24,081 holders in total.QA-HOLDERS

Issue

The ten largest holders own 89.0% of supply. What remains: 35.7% in wallets, 53.3% in other contracts. 24,081 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Listed, but not independently verified

Listed on CoinGecko as FIGHT (FIGHT), market cap $9M, rank #1357. 24,081 holders.QA-IDENTITY

Issue

Listed on CoinGecko as FIGHT (FIGHT), market cap $9M, rank #1357. 24,081 holders.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $655K (GeckoTerminal, all pools). 24h trading volume $1.1M (CoinGecko, all markets, daily snapshot). 24h trading volume $453K (GeckoTerminal, all pools).QA-MARKET

Issue

Liquidity $655K (GeckoTerminal, all pools). 24h trading volume $1.1M (CoinGecko, all markets, daily snapshot). 24h trading volume $453K (GeckoTerminal, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Wrapped or bridged asset

A token representing another asset's units 1:1, backed by a wrapping contract, a custodian or a bridge. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Governance; a copy of the coin from its home chain (solana), minted here by LayerZero (lzReceive). Tokenomics — Supply: minted here by LayerZero (lzReceive) against tokens locked or burned on other chains. Control: a 3-of-4 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $655K of DEX liquidity across 20 pools. Launch: 282 days of market history.QA-PROFILE

Issue

A token representing another asset's units 1:1, backed by a wrapping contract, a custodian or a bridge. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Governance; a copy of the coin from its home chain (solana), minted here by LayerZero (lzReceive). Tokenomics — Supply: minted here by LayerZero (lzReceive) against tokens locked or burned on other chains. Control: a 3-of-4 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $655K of DEX liquidity across 20 pools. Launch: 282 days of market history.

Fix

The backing is the risk: check who holds the underlying asset and how redemption works.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 31
Executive SummaryWhat the contract is and what the review found

The FightOFTSecondary contract is an Omnichain Fungible Token implementation on BSC. The architecture relies on LayerZero for cross-chain messaging. While the core ERC-20 logic is standard, the contract includes minting capabilities triggered by cross-chain messages, which introduces inherent risks regarding supply inflation and cross-chain security. 7.1 Architecture: Standard OFT implementation. 7.2 Code Security: Follows established patterns. 7.3 Access Control: Owner-restricted functions are protected. 7.4 Economic: Inflationary risk via cross-chain minting. 7.5 Governance: Centralized ownership. 7.6 External: Dependency on LayerZero endpoint. 7.7 Upgrades: Not upgradeable. 7.8 Operations: Standard.

Technical8/10Low risk

The contract utilizes a well-audited LayerZero OFT framework. Code quality is high, adhering to modern Solidity standards and gas-efficient patterns. The implementation correctly separates cross-chain logic from standard ERC-20 functionality, minimizing surface area for logic errors.

Governance1/10High risk

The protocol is governed by a 3-of-4 multisig, providing a reasonable balance of security and operational agility. The primary economic risk is the ability to mint tokens via cross-chain messages, which could lead to supply dilution if the cross-chain bridge is compromised. No automated circuit breakers are present to limit minting velocity.

Upgrades3/10High risk

The contract is not upgradeable, which eliminates risks associated with proxy logic or malicious implementation swaps. This immutability ensures that the current logic remains consistent throughout the contract's lifecycle. Future changes would require a full migration to a new contract address.

Final RecommendationWhat to do about this score

Implement a rate-limiting mechanism or a daily minting cap for cross-chain transfers to mitigate the impact of a potential LayerZero endpoint compromise.

Ensure the multisig signers are geographically and organizationally distributed to maintain the integrity of the administrative functions.

Contract & Record

1 audit on record
TypeToken
NetworkBNB Chain
Token age9mo
Contract0xb2d9…f3ab
Deployer0xd05e…4072
Badge for your website
FIGHT security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Oct 31, 202661Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Related Audits

6 more on the recordAll audits
0GBNB Chain61MediumBTCB TokenBTCB · BNB Chain60MediumStarpower NetworkSTAR · BNB Chain62MediumQuack AI TokenQ · BNB Chain59MediumZypher TokenPOP · BNB Chain63MediumArciumARX · BNB Chain58Medium

Would You Like a More Detailed Audit of FIGHT?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Add your links and get it Verified