On-chain security analysis — is it a scam or legit?
EthereumHoloToken is an ERC-20 compliant token with centralized minting and administrative controls.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 3, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x3496…d5430x7768…28d80x9ddb…1b220x47e8…25570xf3ae…d97b0x3d86…213f0x2462…6352No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
The 'mint' function allows a privileged minter address to create an unlimited amount of new tokens, which directly dilutes the value of existing holdings.
Consider implementing a hard cap on the total supply or transitioning the minter role to a decentralized governance contract.
Unresolved
The 'finishMinting' function acts as a global switch that enables token transfers. Until this is called, the minter effectively controls the liquidity of the token.
Ensure the minting process is transparent and that the 'finishMinting' function is called as soon as the initial distribution phase is complete.
Unresolved
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 7 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 59% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The ten largest holders own 49.0% of supply. What remains: 49.0% in wallets, 0.0% in other contracts. 113,126 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Holo (HOT), market cap $70M, rank #353. Traded on Binance. 113,126 holders. Verified by: CoinGecko, exchange listings.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $69K (DexScreener, all pools). 24h trading volume $24.4M (CoinGecko, all markets, daily snapshot). 24h trading volume $171K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.0313 on 2021-04-05; the price is now 98.7402% below it.
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $69K of DEX liquidity across 11 pools. Launch: 2358 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
HoloToken is an ERC-20 compliant token with centralized minting and administrative controls. The contract utilizes SafeMath to prevent arithmetic overflows and implements standard ownership patterns. Key risks involve the centralized authority of the minter role, which can dilute token supply and restrict transferability.
The contract implements standard ERC-20 functionality with robust overflow protection via SafeMath. 7.1 Architecture is straightforward, utilizing a single-contract design. 7.2 Code Security is maintained through explicit require checks, though 7.3 Access Control relies heavily on centralized roles. 7.6 External dependencies are minimal, ensuring predictable behavior during standard token operations.
7.4 Economic risk is elevated due to the minter's ability to arbitrarily increase the total supply. 7.5 Governance is entirely centralized under the owner and minter roles, providing no protection for token holders against supply dilution. 7.8 Operations are dependent on the minter's willingness to finalize the minting process to enable full transferability.
7.7 Upgrades are not supported as the contract is not a proxy. The logic is immutable, which provides security against hidden logic changes but prevents patching vulnerabilities post-deployment. The lack of upgradeability is a design choice that favors transparency over flexibility.
Token holders should be aware that the minter role possesses significant power to dilute the supply and control transferability.
It is recommended that the project team considers renouncing the minter role or transitioning to a multi-signature wallet to mitigate the risk of a single point of failure. Furthermore, the team should ensure that the 'finishMinting' function is called promptly to finalize the token supply and provide certainty to the market regarding the total circulating supply.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The HoloToken (HOT) contract on Ethereum is 0x6c6ee5e31d828de241282b9606c8e98ea48526e2. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for HoloToken is 49/100 (Medium risk) as of Nov 3, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: Mintable; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Liquidity lock: Not locked (as of Nov 3, 2026). Total DEX liquidity: $69.1K.
As of Nov 3, 2026, the 10 largest holders own 49.0% of the supply across 113,126 holders. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
