Early-stage security check — honeypot & rug-pull analysis
BNB ChainHujiToken is a standard ERC-20 implementation deployed on the BNB Smart Chain.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 2, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The contract performs a redundant write operation to storage, which is inefficient but does not compromise the integrity of user balances or token transfers.
Refactor the logic to check if the new value is identical to the current value before performing a storage write to save gas.
Unresolved
The ten largest holders own 73.7% of supply. Of that, 10.2% burned, 44.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 5.0% in wallets, 13.6% in other contracts. 621 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
621 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $13K (DexScreener, all pools). 24h trading volume $110K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: 2% on buy, 2% on sell. Market: $13K of DEX liquidity across 1 pools. Launch: 1 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token's oldest DEX pool is 1 day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
HujiToken is a standard ERC-20 implementation deployed on the BNB Smart Chain. The contract follows the OpenZeppelin standard library, ensuring robust token mechanics. No privileged roles or administrative backdoors were identified in the codebase, making it a trustless asset. The audit identified one minor technical finding related to storage patterns that does not impact user funds.
The architecture follows standard ERC-20 patterns (7.1 Architecture). Code security is high due to the use of audited OpenZeppelin libraries (7.2 Code Security). Access control is non-existent as there are no privileged functions (7.3 Access Control). The contract is self-contained and does not rely on external oracles or complex external calls (7.6 External).
There are no governance mechanisms or economic parameters to manipulate (7.4 Economic, 7.5 Governance). The token supply is fixed or managed by standard mint/burn logic if applicable. Operations are standard and predictable (7.8 Operations).
The contract is not upgradeable (7.7 Upgrades). This eliminates risks associated with proxy patterns or logic changes. The code is immutable.
The HujiToken contract is secure for standard ERC-20 operations.
No immediate action is required for the token to function as intended. For future iterations, ensure that any added logic follows the Checks-Effects-Interactions pattern to maintain the current high security posture.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Add your links and get it Verified
