This audit of the Graphite (GP) SPL token mint identified a medium risk due to significant holder concentration, with the top 10 accounts holding 52.78% of the supply. Additionally, the token's metadata is mutable, allowing for changes to its name, symbol, or image post-launch. While chain-native RPC data on holder distribution was unavailable, other external security signals were considered.

On-chain security analysis — is it a scam or legit?
Is Graphite Safe?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →This audit of the Graphite (GP) SPL token mint identified a medium risk due to significant holder concentration, with the top 10 accounts holding 52.78% of the supply.
Read the full analysis- Top-10 concentration > 50%
- LP lock status UNKNOWN — the pool's LP could not be read
- 1 Medium finding(s) from audit
- 1 Low finding(s) from audit
Exact factors
- Top-10 concentration > 50% (50.5% total → 50.5% effective; 50.5% in EOAs, 0.0% in contracts — heavy)
- LP lock status UNKNOWN — the pool's LP could not be read
- 1 Medium finding(s) from audit
- 1 Low finding(s) from audit
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Sep 22Holders
as of audit · Sep 22, 2026- Top 10 holdersthe ten largest balances50.5%
- Everyone elsethe rest of the supply49.5%
Holder balances as recorded by the audit of Sep 22, 2026
Liquidity
as of audit · Sep 22- Orca wpUSDCAnalysed$522.1K43.5%
- Meteora DLMMUSDC$255.0K21.3%
- Orca wpSOL$172.3K14.4%
- Orca wpUSDC$87.7K7.3%
- Meteora DLMMSOL$60.1K5.0%
- Meteora DLMMUSDC$44.7K3.7%
Show 4 more pairs
The 10 remaining pairs hold $3.8K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
Security Findings
MediumHolder Concentration > 50%
Top 10 token accounts hold 52.78% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.M-01
Issue
Top 10 token accounts hold 52.78% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
Fix
Monitor the holdings of the largest accounts for any significant changes or potential sell-offs.
Status
Unresolved
LowMutable Metadata
Token name, symbol, or image can be changed post-launch.L-01
Issue
Token name, symbol, or image can be changed post-launch.
Fix
Verify metadata against off-chain expectations before trusting branding.
Status
Unresolved
Analysis
AI Copilotas of audit · Sep 22The Graphite (GP) token is a standard SPL Token Program v3 mint. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no existing accounts can be frozen. The token has a fixed supply of 58,648,962.123293915 GP. No Token-2022 extensions like permanent delegate or transfer hooks are active, indicating a basic token implementation. However, the metadata is mutable, allowing for changes to branding details (7.3 Access Control, 7.2 Code Security).
The token exhibits a notable holder concentration, with the top 10 accounts collectively holding 52.78% of the total supply, posing a medium risk for market manipulation (7.4 Economic). Liquidity is healthy at $399,387 USD, and the 24-hour volume of $285,049 USD results in a normal Volume/Liquidity ratio of 0.71. The pair has been active for 491 days, providing a sufficient track record for market behavior analysis (7.6 External).
The mint authority and freeze authority for the Graphite (GP) token have both been revoked, preventing any further changes to the token's supply or the ability to freeze accounts. As a classic SPL Token Program v3, it does not utilize Token-2022 extensions that introduce upgradeability or additional authorities like permanent delegates or transfer hooks. However, the token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch (7.7 Upgrades).
Prospective holders should monitor the top token accounts for any significant movements that could impact market stability.
Before relying on the token's branding, verify its current name, symbol, and image against official project channels, as these can be changed due to mutable metadata. Regularly check on-chain for any changes to the token's metadata to ensure it aligns with expectations.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Sep 22, 202614Low
- Sep 5, 202644Medium
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Frequently Asked Questions
What is the GP contract address?
The Graphite (GP) contract on Solana is 31k88G5Mq7ptbRDf3AM13HAq6wRQHXHikR8hik7wPygk. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Is Graphite a scam?
Quantum Audit's risk score for Graphite is 14/100 (Low risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: No mint; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Who holds GP?
As of Sep 22, 2026, the 10 largest holders own 50.5% of the supply. The Holders section on this page shows who they are by holder type.
Would You Like a More Detailed Audit of Graphite?
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page