Is HeavyPulp Safe? Smart Contract Security Analysis

HeavyPulp HEAVYPULP

8G5ayE…pump

Solana Not verifiedLast checked 3d ago 1 audit on record

DexScreener ↗

50 / 100

High Risk

Executive SummaryAI Copilot

The HeavyPulp SPL Token Mint exhibits a robust security posture with both mint and freeze authorities permanently revoked, preventing further supply dilution or account freezing. Economic indicators show moderate liquidity and a low holder concentration, suggesting a healthy distribution and trading environment. Third-party registry data was available and reported no adverse flags, while chain-native RPC data for holder distribution was unavailable.

1 Informational

Volume 24h

$432.0K

Liquidity

$192.1K

Price

$0.0009735

Token Age

5mo

Top 10 Holders

31.9%

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

This token is implemented using the spl-token-2022 program. Both the mint authority and freeze authority are revoked (None), ensuring no new tokens can be minted and no holder accounts can be frozen. No advanced Token-2022 extensions such as transfer hooks or default account state frozen are active. The token's supply is fixed at 999,746,437.104886 with 6 decimals, and its balance mutability is disabled.

GovernanceHigh2/10

Holder concentration is low, with the top 10 token accounts holding 27.96% of the supply, indicating a relatively distributed ownership. The token has a healthy liquidity of $247,549 and a normal 24-hour volume/liquidity ratio of 4.24, suggesting organic trading activity. The DEX pair has been active for 176 days, providing a reasonable track record.

UpgradesMedium5/10

The mint authority and freeze authority are both revoked, which means the token's supply and account freeze status cannot be altered. Metadata mutability is set to False, preventing any post-launch changes to the token's name, symbol, or image. Furthermore, transfer hook and transfer fee upgradability are disabled, ensuring the token's core transfer mechanics remain fixed.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$208.0K across 5 pairs

PumpswapSOLanalysed$192.1K Meteora DLMMSOL$15.2K Meteora DLMMSOL$748 Meteora DYN2CSR$24

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

5 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 30% (31.9% total → 31.9% effective; 31.9% in EOAs, 0.0% in contracts — moderate)
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is HeavyPulp Safe?