Honeypot, rug-pull and ownership checks
SolanaThe HIMS token exhibits critical centralization risks due to active mint, freeze, and permanent delegate authorities.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Nov 2, 2026
The 19 remaining pairs hold $33.3K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
An independent third-party risk registry classifies this token as high-risk based on developer history and authority control.
Do not interact with this token.
Unresolved
The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
Unresolved
has permanent delegate authority and can transfer any holder's tokens without consent.
Treat this token as fully custodial.
Unresolved
The contract lets its controller — the freeze authority — mint new supply; change any holder's balance (seize or credit tokens); freeze or blacklist individual addresses; change the token's name, symbol and image. Nothing independent vouches for whoever holds them, so each is a live risk to holders.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
GoPlus balance_mutable is set to True, indicating an authority can adjust user balances.
Review the token program configuration to identify the specific authority responsible for balance adjustments.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The ten largest holders own 66.5% of supply. Of that, 33.1% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 11.4% in wallets, 21.9% in other contracts. 16,640 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Hims & Hers Health (Backpack Securities) (HIMS), rank #4105. 16,640 holders.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $435K (DexScreener, all pools). 24h trading volume $1.8M (CoinGecko, all markets, daily snapshot). 24h trading volume $4.6M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token backed by an off-chain asset (a stock, gold, treasury bills, a fund share) held by a named issuer or custodian. Issuance, redemption and transfer restrictions are the issuer's by design. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Tokenized Stocks. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $435K of DEX liquidity across 29 pools. Launch: launched on pump.fun (PumpSwap), 54 days of market history.
Treat the issuer or custodian as the counterparty: check its custody reports and who may hold or redeem the token.
Acknowledged
The HIMS token exhibits critical centralization risks due to active mint, freeze, and permanent delegate authorities. Third-party registries have flagged the token as high-risk due to these control vectors and mutable metadata. All data sources were successfully retrieved.
The token utilizes the Token-2022 program. 7.1 Architecture is standard for SPL, but 7.3 Access Control is highly centralized. The mint authority (AQGfwos...) and freeze authority (2cVYpag...) remain active. 7.2 Code Security is limited by the presence of a permanent delegate (2cVYpag...) capable of moving user funds.
7.4 Economic analysis shows top 10 holders control 33.38% of supply. 7.5 Governance is centralized under the authority holders. Liquidity is $179,009 with a 54-day pair age, indicating moderate market maturity.
7.7 Upgrades are not applicable to SPL mints, but 7.8 Operations are affected by mutable metadata. Metadata can be changed at any time by the owner. The transfer hook is also marked as upgradable.
Investors should exercise extreme caution due to the presence of a permanent delegate and active freeze authority.
Verify the current status of these authorities on-chain before interacting with the token. Monitor the mint and freeze authority addresses for potential revocation. Avoid holding significant positions until the permanent delegate is removed or the token is transitioned to a decentralized governance model.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Paste the contract address into our AI-powered scanner for a deeper real-time report — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
