Early-stage security check — honeypot & rug-pull analysis

Is 第一个回购销毁模式 a Scam?

GANGBALL

BNB Chain

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked Oct 29, 2026 · 1 audit on recordNew Launch · 7h old

Chart

65/ 100

High RiskHow is this score calculated?

How the score breaks downratings: 10 is safest

Technical6/10 Governance1/10 Upgrades2/10 Checks passed4 of 7 Findings2 Medium · 5 Info7

SummaryAI Copilot

GangToken is a standard ERC-20 token with additional administrative functions allowing a 'launchpad' address to manage liquidity pairs and perform token transfers on behalf of users.

Read the full analysis

What raised the score

Owner can change any holder's balance
Hidden owner — control survives an apparent renounce; held by launchpad: Multisig
Owner can pause all transfers; held by launchpad: Multisig
Mintable supply — no cap found, dilution unbounded; held by launchpad: Multisig
Ownership status UNKNOWN
Liquidity not locked
Liquidity < $50k
Volume/Liquidity > 15×
Top-10 concentration > 20%

Exact factors

Owner can change any holder's balance (seize or credit tokens); held by launchpad: Multisig
Hidden owner — control survives an apparent renounce; held by launchpad: Multisig
Owner can pause all transfers; held by launchpad: Multisig
Mintable supply — no cap found, dilution unbounded; held by launchpad: Multisig
Ownership status UNKNOWN (owner could not be resolved)
Liquidity NOT locked (100% of the pool) — who holds it cannot be verified
Liquidity < $50k ($11,926 across 1 pairs — thin market)
Volume/Liquidity > 15× (43.2× — wash-trading signal)
Top-10 concentration > 20% (50.1% total → 20.9% effective; 6.9% in EOAs, 35.0% in contracts; 8.2% burned, locked or in pools excluded)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (7h old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Oct 294 of 7 checks passed

Contract verifiedVerified

OwnershipUnknown

MintMintable

Liquidity lockNot locked

UpgradeabilityFixed code

HoneypotNone found

Buy / sell tax0% / 0%

Holders

as of audit · Oct 29, 2026514 holders

ContractsWalletsBurnedEveryone elseBubble area = share of supply

50.1%of supply sits with the top 10 holders

Contractstreasury, vesting, bridge, staking35.0%
Walletsanonymous holders, free to sell6.9%
Burnedout of circulation8.2%
Everyone else504 holders49.9%

Effective concentrationwhat the score reads20.9%

How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 29, 2026

Liquidity

as of audit · Oct 29$11.9K

The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$11.9KShare of depth100.0%

Top-1 Unlocked Holder100.0%

Top-3 Unlocked100.0%

Unlocked LP held by

0x0eb6…5e43

Security Findings

2 Medium5 Info

Medium

Centralized Control Over Token Balances

The 'launchpad' address has the authority to call reclaim and pullFor functions, which can move tokens from user wallets to the launchpad address. This centralized control allows the administrator to unilaterally affect user balances and potentially drain liquidity.CP-01

Issue

Fix

Restrict the scope of the launchpad's authority or implement a decentralized governance mechanism to oversee these privileged actions. Ensure that the launchpad address is secured by a multi-signature wallet.

Status

Unresolved

Medium

Liquidity not locked

0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0x0eb6…5e43 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY

Issue

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

Who holds the supply

The ten largest holders own 50.1% of supply. Of that, 8.2% burned — not holders that can sell, so excluded from the concentration score. What remains: 6.9% in wallets, 35.0% in other contracts. The deployer/owner wallet itself holds 1.0%. 514 holders in total.QA-HOLDERS

Issue

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

514 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

514 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $12K (DexScreener, all pools). 24h trading volume $515K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $12K (DexScreener, all pools). 24h trading volume $515K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $12K of DEX liquidity across 1 pools. Launch: under a day of market history.QA-PROFILE

Issue

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Info

Recently launched — less than a day of market history

The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT

Issue

Fix

Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 29

Executive SummaryWhat the contract is and what the review found

GangToken is a standard ERC-20 token with additional administrative functions allowing a 'launchpad' address to manage liquidity pairs and perform token transfers on behalf of users. The architecture relies on centralized control for critical operations, which introduces significant trust requirements. 7.1 Architecture: Centralized. 7.2 Code Security: Standard. 7.3 Access Control: Restricted. 7.4 Economic: High risk due to minting/pulling capabilities. 7.5 Governance: Centralized. 7.6 External: Standard. 7.7 Upgrades: N/A. 7.8 Operations: High dependency on launchpad.

Technical6/10Medium risk

The contract implements standard ERC-20 functionality with clean logic for transfers and allowances. The use of OpenZeppelin-style patterns ensures compatibility with standard wallets and DEXs. However, the reliance on a single 'launchpad' address for critical state changes creates a single point of failure. The code is well-structured and follows modern Solidity practices.

Governance1/10High risk

The economic model is heavily centralized, granting the launchpad address the ability to move user funds and modify pair settings. This creates a trust-based environment where holders are vulnerable to administrative actions. The reclaim and pullFor functions allow for significant manipulation of token balances and supply dynamics. Transparency regarding the launchpad's identity is essential for users.

Upgrades2/10High risk

The contract is not upgradeable and does not utilize proxy patterns. Logic is immutable once deployed, providing certainty to users regarding the contract's behavior. No upgrade-related risks are present.

Final RecommendationWhat to do about this score

We recommend transitioning the 'launchpad' role to a multi-signature wallet or a decentralized governance contract to mitigate the risk of a single compromised key.

Additionally, consider implementing a timelock for sensitive administrative functions like setPair to provide users with notice before changes to the token's economic rules take effect.

Contract & Record

1 audit on record

TypeGangToken

NetworkBNB Chain

Token age7h

Contract0xb1f2…99a3

Deployer0xf00f…3d0c

Badge for your website

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History

Oct 29, 202665High

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the GANGBALL contract address?

The 第一个回购销毁模式 (GANGBALL) contract on BNB Chain is 0xb1f21c4509aebd494ee58c80da3e07d979d499a3. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.