Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is GameStop Safe?

GMEEthereum
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 29, 2026 · 1 audit on record
SummaryAI Copilot

The GME token is a standard ERC-20 implementation with added transfer taxes, transaction limits, and bot-blocking capabilities.

Read the full analysis
What raised the score
  • A privileged address controls a switch that decides whether transfers go through
  • Owner can change the buy/sell tax
Exact factors
  • A privileged address controls a switch that decides whether transfers go through
  • Owner can change the buy/sell tax

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 297 of 7 checks passed
Contract verifiedVerified
OwnershipRenounced
MintNo mint
Liquidity lockLocked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 29, 202611,452 holders
12.2%Contracts11.4%Wallets2.2%12.0%DEX pools62.2%Everyone else
12.2%11.4%12.0%62.2%Everyone else
ContractsWalletsBurnedDEX poolsEveryone elseBubble area = share of supply
37.8%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking12.2%
  • Walletsanonymous holders, free to sell11.4%
  • Burnedout of circulation2.2%
  • DEX poolsthe pools' own liquidity12.0%
  • Everyone else11,442 holders62.2%
Effective concentrationwhat the score reads16.2%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 29, 2026

Liquidity

as of audit · Oct 29$777.0K across 2 pairs

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$776.9KShare of depth100.0%
LP Burned100.0% · ≈ permanent lock
LP Locked100.0% · Null Address
Unlocked LP held by
0x8dc8…f52c0xb3ac…68a00x826f…1e650x0000…8a900x1f2f…f3870xad01…fce5

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

2 Medium7 Info
Medium

Centralized Control Over Swap Mechanism

The taxWallet can trigger the manualSwap function, which executes token sales and ETH distribution. This allows the controller to influence the token's liquidity and fee distribution process.CP-05

Issue

The taxWallet can trigger the manualSwap function, which executes token sales and ETH distribution. This allows the controller to influence the token's liquidity and fee distribution process.

Fix

Consider automating the swap process based on contract balance thresholds rather than relying on manual triggers.

Status

Unresolved

Medium

Adjustable Transfer Fees

The taxWallet can call reduceFee to modify the buy and sell tax percentages. This allows the controller to change the economic cost of trading the token at any time.CP-07

Issue

The taxWallet can call reduceFee to modify the buy and sell tax percentages. This allows the controller to change the economic cost of trading the token at any time.

Fix

Implement a timelock or a maximum fee cap to prevent sudden, drastic changes to the tax structure.

Status

Unresolved

Info

Bot List Functionality (Dormant)

The contract contains functions to add or remove addresses from a bot list. Since ownership is renounced, these functions are effectively disabled and cannot be called by anyone.CP-06

Issue

The contract contains functions to add or remove addresses from a bot list. Since ownership is renounced, these functions are effectively disabled and cannot be called by anyone.

Fix

No action required as the functions are unreachable.

Status

Unresolved

Info

Transaction and Wallet Limits (Dormant)

The removeLimits function allows for the removal of transaction and wallet size restrictions. Since ownership is renounced, this function is effectively disabled.CP-08

Issue

The removeLimits function allows for the removal of transaction and wallet size restrictions. Since ownership is renounced, this function is effectively disabled.

Fix

No action required as the function is unreachable.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 37.8% of supply. Of that, 2.2% burned, 12.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 11.4% in wallets, 12.2% in other contracts. 11,452 holders in total.QA-HOLDERS

Issue

The ten largest holders own 37.8% of supply. Of that, 2.2% burned, 12.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 11.4% in wallets, 12.2% in other contracts. 11,452 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Listed, but not independently verified

Listed on CoinGecko as GME (Ethereum) (GME), market cap $2M, rank #2329. 11,452 holders.QA-IDENTITY

Issue

Listed on CoinGecko as GME (Ethereum) (GME), market cap $2M, rank #2329. 11,452 holders.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

Liquidity burned — cannot be withdrawn

100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY

Issue

100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

The market for this token

Liquidity $777K (DexScreener, all pools). 24h trading volume $10K (CoinGecko, all markets, daily snapshot). 24h trading volume $42K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.000413 on 2024-12-12; the price is now 98.6792% below it.QA-MARKET

Issue

Liquidity $777K (DexScreener, all pools). 24h trading volume $10K (CoinGecko, all markets, daily snapshot). 24h trading volume $42K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.000413 on 2024-12-12; the price is now 98.6792% below it.

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Meme token

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $777K of DEX liquidity across 2 pools. Launch: 899 days of market history.QA-PROFILE

Issue

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $777K of DEX liquidity across 2 pools. Launch: 899 days of market history.

Fix

Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 29
Executive SummaryWhat the contract is and what the review found

The GME token is a standard ERC-20 implementation with added transfer taxes, transaction limits, and bot-blocking capabilities. While ownership has been renounced, effectively locking the owner-restricted functions, the taxWallet remains a privileged role capable of modifying fees and executing token swaps. The contract architecture is straightforward, but the presence of centralized control over economic parameters via the taxWallet introduces moderate risk.

Technical10/10Low risk

The contract follows standard ERC-20 patterns with 7.1 Architecture and 7.2 Code Security adhering to common practices. 7.3 Access Control is split between renounced ownership and an active taxWallet role. 7.6 External interactions are limited to standard DEX swaps, which are handled via the manualSwap function.

Governance10/10Low risk

7.4 Economic parameters such as transfer taxes are adjustable by the taxWallet. 7.5 Governance is non-existent as ownership is renounced, preventing further changes to limits or bot lists. The taxWallet maintains significant influence over the token's economic flow through fee adjustments.

Upgrades10/10Low risk

7.7 Upgrades are not supported as the contract is not a proxy. 7.8 Operations are limited to the taxWallet's ability to trigger swaps and rescue tokens. The lack of upgradeability ensures the logic remains constant over time.

Final RecommendationWhat to do about this score

Investors should be aware that the taxWallet retains the ability to adjust fees and trigger liquidity swaps, which directly impacts the token's economic utility.

Since ownership is renounced, the current configuration of limits and bot lists is permanent and cannot be modified by the original deployer. We recommend that the taxWallet role be transferred to a multi-signature wallet or a time-locked contract to mitigate the risk of a single point of failure. Users should monitor the taxWallet address for any unexpected changes to fee structures.

Contract & Record

1 audit on record
TypeToken
NetworkEthereum
Token age2y
Contract0xc56c…12b8
Deployer0xe2cd…224f
Badge for your website
GameStop security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Oct 29, 202633Low

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the GME contract address?

The GameStop (GME) contract on Ethereum is 0xc56c7a0eaa804f854b536a5f3d5f49d2ec4b12b8. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is GameStop a scam?

Quantum Audit's risk score for GameStop is 33/100 (Low risk) as of Oct 29, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Renounced; Mint: No mint; Liquidity lock: Locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Is GME liquidity locked?

Liquidity lock: Locked (as of Oct 29, 2026). Total DEX liquidity: $777.0K.

Who holds GME?

As of Oct 29, 2026, the 10 largest holders own 37.8% of the supply across 11,452 holders. The Holders section on this page shows who they are by holder type.

Would You Like a More Detailed Audit of GameStop?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Add your links and get it Verified