Is fih Safe? Smart Contract Security Analysis

fih FIH

8SkfuQ…bonk

Solana Not verifiedLast checked 2d ago 1 audit on record

DexScreener ↗

52 / 100

High Risk

Executive SummaryAI Copilot

The fih SPL token mint has revoked mint and freeze authorities, indicating a fixed supply and unfreezable accounts. However, a significant concentration of 68.77% of the supply is held by the top 10 accounts, posing a risk of price volatility. Third-party risk registries report no adverse flags, but detailed holder distribution data from chain-native RPC was unavailable.

1 Medium

Volume 24h

$654.8K

Liquidity

$81.9K

Price

$0.00007431

Token Age

9mo

Top 10 Holders

68.8%

Security Findings

1 Med

Medium

Holder Concentration > 50%

M-01Top 10 token accounts hold 68.77% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.

IssueTop 10 token accounts hold 68.77% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.

FixAccount for the risk of significant price volatility due to concentrated holdings. Monitor the distribution of tokens among top holders.

StatusUnresolved

Category Ratings

TechnicalLow8/10

The fih token is implemented using the classic Solana SPL Token Program (spl-token). Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no existing accounts can be frozen. The token has a fixed supply of 999,985,908.912345 tokens with 6 decimals. No Token-2022 specific extensions like permanent delegate, transfer hook, or default frozen state are active, nor is balance mutability enabled.

GovernanceHigh1/10

The token exhibits a medium level of holder concentration, with the top 10 accounts holding 68.77% of the total supply. This concentration could lead to significant price volatility from coordinated or single-whale sell-offs. The token has a liquidity of $81,848 USD and a 24-hour trading volume of $647,501 USD. The volume/liquidity ratio is 7.91, which is not indicative of wash trading (ratio < 20). The DEX pair has been active for 275 days, providing a reasonable track record.

UpgradesMedium5/10

The token's core parameters are immutable due to the revocation of both mint and freeze authorities. Additionally, the token's metadata (name, symbol, or image) is not mutable, as indicated by `metadata_mutable: False`. There are no active upgrade mechanisms or configurable extensions that could alter the token's fundamental behavior post-launch.

Security Checklist

2/4 checks passed

Contract VerifiedPass

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$83.0K across 6 pairs

Raydium CPMMUSD1analysed$81.9K Meteora DLMMSOL$982 Meteora DLMMUSD1$170 Meteora DYN2CSR$1 Orca wpUSD1$1 Meteora DYN2PEPE$0

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

5 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Top-10 concentration > 50% (68.8% total → 68.8% effective; 68.8% in EOAs, 0.0% in contracts — heavy)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 Medium finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is fih Safe?