On-chain security analysis — is it a scam or legit?
SolanaThe Grass (GRASS) SPL token mint presents a critical risk due to an active mint authority, which allows for unlimited token creation and potential dilution of holders.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The 16 remaining pairs hold $1.4K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value. This fact is also flagged by a third-party risk registry.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
metadata_mutable: True. This fact is also noted by a third-party risk registry.L-01Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True. This fact is also noted by a third-party risk registry.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The Grass (GRASS) SPL token mint presents a critical risk due to an active mint authority, which allows for unlimited token creation and potential dilution of holders. Additionally, the token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. Holder distribution data was unavailable from chain-native RPC, preventing an assessment of supply concentration risk.
The token is implemented using the classic SPL Token Program (spl-token). A critical finding is the active mint authority, held by , which enables the creation of new tokens. Conversely, the freeze authority has been revoked, preventing the freezing of holder accounts. No Token-2022 extensions such as permanent delegate, transfer hook, or default account state frozen are active, indicating a simpler token configuration.
The token exhibits moderate liquidity at $320,381 USD, with a healthy 24-hour volume of $7,110 USD. The Volume/Liquidity Ratio is 0.02, which does not indicate wash trading. The DEX pair has been active for 620 days, suggesting a relatively established market presence. Holder concentration data was unavailable, precluding an assessment of whale risk.
The mint authority remains active, allowing for potential changes to the token's total supply. The freeze authority has been revoked, which is a positive for the immutability of account states. However, the token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. No Token-2022 specific upgradeable features like transfer fee or transfer hook are present or upgradable.
Before holding GRASS tokens, verify on-chain that the mint authority () has been set to null to ensure a fixed supply.
Continuously monitor the token's metadata for any changes to its branding, as it is mutable. If holder distribution data becomes available, assess the concentration of tokens among the top accounts to understand potential market manipulation risks.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Based on the available data, Grass (GRASS) exhibits several characteristics typically associated with high-risk tokens. While ownership is renounced and no mint function exists, the absence of contract verification and unlocked liquidity are significant red flags. Furthermore, the concentration of 55.6% of the supply among the top 10 holders indicates a centralized distribution. These factors contribute to its high-risk score of 54/100, suggesting caution rather than definitively labeling it a scam.
Given its high-risk score of 54/100, Grass (GRASS) is not considered safe to buy without significant caution. Key risk factors include the unverified contract, which prevents independent code review, and the unlocked liquidity, exposing it to potential rug pulls. The substantial concentration of tokens among the top 10 holders also poses a risk of market manipulation or sudden sell-offs. Investors should be aware of these fundamental vulnerabilities.
The provided information indicates that the Grass (GRASS) contract has not been verified. Contract verification is a foundational step for transparency, allowing public review of the code. Without verification, it's impossible to confirm if the contract has undergone a formal security audit by a reputable third party. Investors should assume no audit has occurred unless public verification and audit reports are explicitly available.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
