On-chain security analysis — is it a scam or legit?
PeerToken is a standard ERC-20 implementation with additional governance (Votes) and permit functionality.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 27, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x8815…288b0x375f…94910x9b05…520a0x1318…4113The mint(address,uint256) function allows a privileged minter address to create new tokens at any time. This increases the total supply and dilutes the value of existing holdings, posing a risk if the minter key is compromised.
Restrict the minting capability to a multi-signature wallet or a decentralized governance contract. Ensure that the minter address is secured with robust key management practices.
Unresolved
Presents itself as Hyperliquid (HYPE), which has no contract of its own on base (CoinGecko), and trades at $77.72 against Hyperliquid's $77.22: a representation of Hyperliquid issued by a third party, whose backing cannot be verified here. 2,820 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Its value holds only while whoever issues it keeps enough HYPE to redeem every token; nothing independent shows that they do.
Treat the issuer as the counterparty: find who holds the HYPE behind it and how redemption works before holding a size you cannot lose.
Acknowledged
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 4 address(es) other than the owner/deployer. One of them — a contract, 0x8815…288b — holds 78.1% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 79% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The ten largest holders own 59.4% of supply. What remains: 20.7% in wallets, 38.7% in other contracts. 2,820 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Liquidity $387K (DexScreener, all pools). 24h trading volume $1.0M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token representing another asset's units 1:1, backed by a wrapping contract, a custodian or a bridge. Nothing independent confirms who holds the underlying coin, so every power over its supply is scored in full: a wrapper is only as good as whoever can mint it, and the unverified backing is scored under identity. Basis: trades at the price of Hyperliquid (HYPE), which has no contract of its own on this chain. Tokenomics — Supply: mintable with no on-chain cap found. Control: a contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $387K of DEX liquidity across 6 pools. Launch: 356 days of market history.
The backing is the risk: check who holds the underlying asset and how redemption works.
Acknowledged
PeerToken is a standard ERC-20 implementation with additional governance (Votes) and permit functionality. The contract is well-structured using OpenZeppelin standards. The primary risk is the centralized minting authority, which allows the designated minter to increase total supply at will. No other critical vulnerabilities were identified in the transfer logic or access control mechanisms.
The architecture follows established OpenZeppelin patterns for ERC-20 and governance. 7.1 Architecture is robust, utilizing standard inheritance for modularity. 7.2 Code Security is high, as the transfer path relies on audited library functions. 7.3 Access Control is correctly implemented using Ownable and custom minter roles.
7.4 Economic risk is centered on the minting capability, which can dilute token holders. 7.5 Governance is currently centralized under an owner-controlled minter address. The lack of a timelock or multi-sig for minting operations is a notable centralization risk.
7.7 Upgrades are not supported as the contract is not a proxy. The code is immutable, which provides security against logic changes but prevents patching. 7.8 Operations are straightforward and rely on standard ERC-20 interactions.
The protocol should consider transitioning the minter role to a multi-signature wallet or a DAO-governed contract to mitigate the risk of unauthorized or malicious minting.
Additionally, implementing a timelock on the setMinter function would provide transparency and prevent sudden changes to the minting authority.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The HYPE contract on Base is 0x15d0e0c55a3e7ee67152ad7e89acf164253ff68d. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for HYPE is 65/100 (High risk) as of Oct 27, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: Mintable; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Liquidity lock: Not locked (as of Oct 27, 2026). Total DEX liquidity: $387.4K.
As of Oct 27, 2026, the 10 largest holders own 59.4% of the supply across 2,820 holders. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
