Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is Gains Network Safe?

GNSPolygon
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 20, 2026 · 1 audit on record
Chart
Medium RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical8/10Governance1/10Upgrades2/10Checks passed4 of 7Findings3 Medium · 4 Info7
SummaryAI Copilot

The GainsNetworkToken is a standard ERC-20 implementation with additional minting and role-based access control capabilities.

Read the full analysis
What raised the score
  • Mintable supply — no cap found, dilution unbounded
  • Ownership status UNKNOWN
  • Liquidity not locked
  • Top-10 concentration > 50%
  • Code: ETH Trapped in Contract
Exact factors
  • Mintable supply — no cap found, dilution unbounded
  • Ownership status UNKNOWN (owner could not be resolved)
  • Liquidity NOT locked (100% of the pool; this pool is 44% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 50% (74.2% total → 65.9% effective; 61.7% in EOAs, 10.3% in contracts; 2.1% burned, locked or in pools excluded)
  • Code: ETH Trapped in Contract (Medium, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 204 of 7 checks passed
Contract verifiedVerified
OwnershipUnknown
MintMintable
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 20, 202620,670 holders
10.3%Contracts61.7%Wallets25.8%Everyone else
10.3%61.7%Wallets25.8%Everyone else
ContractsWalletsDEX poolsEveryone elseBubble area = share of supply
74.2%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking10.3%
  • Walletsanonymous holders, free to sell61.7%
  • DEX poolsthe pools' own liquidity2.1%
  • Everyone else20,660 holders25.8%
Effective concentrationwhat the score reads65.9%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 20, 2026

Liquidity

as of audit · Oct 20$104.5K across 30 pairs
Show 4 more pairs

The 20 remaining pairs hold $2.7K between them and are not listed. The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$46.3KShare of depth44.4%
Top-1 Unlocked Holder85.5%
Top-3 Unlocked91.0%
Unlocked LP held by
0x3302…4e430xf05c…8f690x4628…84a80xeb96…58d40x24a1…cd720xf674…3b520x533f…24ce0x022e…e6ce0x3fb3…c37c0xa280…44fe

Security Findings

3 Medium4 Info
Medium

ETH Trapped in Contract

The contract can receive ETH through meta-transactions or direct transfers, but it lacks any function to withdraw or transfer these funds out. Any ETH sent to the contract address will be permanently locked.CD-01

Issue

The contract can receive ETH through meta-transactions or direct transfers, but it lacks any function to withdraw or transfer these funds out. Any ETH sent to the contract address will be permanently locked.

Fix

Add a function that allows the contract owner to withdraw any ETH balance held by the contract.

Status

Unresolved

Medium

Centralized Minting Authority

The functions mint, deposit, and withdraw allow privileged addresses to increase the total token supply at will. This creates a risk where a compromised admin key could dilute the value of all existing tokens.CP-01

Issue

The functions mint, deposit, and withdraw allow privileged addresses to increase the total token supply at will. This creates a risk where a compromised admin key could dilute the value of all existing tokens.

Fix

Restrict the minting authority to a multi-signature wallet or a time-locked governance contract to prevent unauthorized supply inflation.

Status

Unresolved

Medium

Liquidity not locked

0.0% of the pool's LP is burned or time-locked. 98.5% is held, unlocked, by 10 address(es) other than the owner/deployer. One of them — a contract, 0x3302…4e43 — holds 85.5% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 44% of the token's DEX liquidity; the other pools were not assessed.QA-LIQUIDITY

Issue

0.0% of the pool's LP is burned or time-locked. 98.5% is held, unlocked, by 10 address(es) other than the owner/deployer. One of them — a contract, 0x3302…4e43 — holds 85.5% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 44% of the token's DEX liquidity; the other pools were not assessed.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

Who holds the supply

The ten largest holders own 74.2% of supply. Of that, 2.1% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 61.7% in wallets, 10.3% in other contracts. 20,670 holders in total.QA-HOLDERS

Issue

The ten largest holders own 74.2% of supply. Of that, 2.1% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 61.7% in wallets, 10.3% in other contracts. 20,670 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Identity verified by independent sources

Listed on CoinGecko as Gains (GAINS), market cap $10M, rank #1241. Traded on Binance. 20,670 holders. Verified by: exchange listings.QA-IDENTITY

Issue

Listed on CoinGecko as Gains (GAINS), market cap $10M, rank #1241. Traded on Binance. 20,670 holders. Verified by: exchange listings.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $104K (DexScreener, all pools). 24h trading volume $1.1M (CoinGecko, all markets, daily snapshot). 24h trading volume $134K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $12.48 on 2023-02-16; the price is now 96.8138% below it.QA-MARKET

Issue

Liquidity $104K (DexScreener, all pools). 24h trading volume $1.1M (CoinGecko, all markets, daily snapshot). 24h trading volume $134K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $12.48 on 2023-02-16; the price is now 96.8138% below it.

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $104K of DEX liquidity across 30 pools. Launch: 1819 days of market history.QA-PROFILE

Issue

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $104K of DEX liquidity across 30 pools. Launch: 1819 days of market history.

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 20
Executive SummaryWhat the contract is and what the review found

The GainsNetworkToken is a standard ERC-20 implementation with additional minting and role-based access control capabilities. The architecture relies on OpenZeppelin's AccessControl for administrative operations. While the core token logic is standard, the contract contains a design flaw regarding trapped ETH and centralized minting authority. 7.1 Architecture: Standard ERC-20 with role-based minting. 7.2 Code Security: Standard library usage. 7.3 Access Control: Robust role-based system. 7.4 Economic: Centralized minting risk. 7.5 Governance: Admin-controlled grant requests. 7.6 External: Standard meta-transaction support. 7.7 Upgrades: Not applicable. 7.8 Operations: ETH stuck in contract.

Technical8/10Low risk

The contract utilizes well-audited OpenZeppelin libraries for ERC-20 and AccessControl functionality. The code is clean and follows standard patterns for meta-transactions. However, the contract lacks a mechanism to recover accidentally sent ETH, which is a common operational oversight.

Governance1/10High risk

The protocol grants significant power to the MINTER_ROLE, allowing for arbitrary supply expansion. While this is intended for cross-chain bridging via the DEPOSITOR_ROLE, it presents a centralization risk to token holders. The grant request system provides a transparent, time-locked mechanism for assigning administrative roles.

Upgrades2/10High risk

The contract is not upgradeable and does not utilize proxy patterns. This ensures immutability of the logic, though it prevents patching of the identified ETH recovery issue. The current state is fixed and transparent to all users.

Final RecommendationWhat to do about this score

Implement a recovery function restricted to the owner to withdraw any ETH accidentally sent to the contract address.

Ensure that the addresses holding the MINTER_ROLE and DEPOSITOR_ROLE are secured via multi-signature wallets to mitigate the impact of a single compromised key.

Contract & Record

1 audit on record
TypeGainsNetworkToken
NetworkPolygon
Token age4y
Contract0xe541…7896
Deployer0xc66f…e00f
Badge for your website
Gains Network security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Oct 20, 202651Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Related Audits

6 more on the recordAll audits
FelysyumFELY · Polygon53MediumAS TokenAS · Polygon54MediumAuralithAURA · Polygon42MediumWhaleBitCES · Polygon60MediumSUPER TRUSTSUT · Polygon41MediumQuickSwapQUICK · Polygon36Medium

Would You Like a More Detailed Audit of Gains Network?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page