Is HYPE Safe? Smart Contract Security Analysis

HYPE HYPE

98sMhv…Mh5g

Solana Not verifiedLast checked 3d ago 1 audit on record

DexScreener ↗

64 / 100

High Risk

Executive SummaryAI Copilot

The HYPE token mint presents a critical security risk due to an unrevoked mint authority, allowing for unlimited new token creation and potential dilution of existing holders. This finding is corroborated by a third-party risk registry. While liquidity is robust and holder concentration is moderate, the fundamental risk of supply manipulation remains. Holder concentration data from chain-native RPC was unavailable.

1 Critical

Volume 24h

$1.40M

Liquidity

$5.64M

Price

$87.3700

Token Age

9mo

Top 10 Holders

36.1%

Security Findings

1 Crit

Critical

Mint Authority Not Revoked

C-01The mint authority is 3X46pk…Pzfi. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.

IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.

FixVerify on-chain that the mint authority is set to null before treating supply as fixed.

StatusUnresolved

Category Ratings

TechnicalMedium4/10

The HYPE token operates under the `spl-token` program (v3). A critical vulnerability exists as the mint authority, held by , remains unrevoked, enabling arbitrary supply inflation. Conversely, the freeze authority has been revoked, preventing any account freezing. The token does not utilize Token-2022 extensions such as permanent delegate, transfer hook, or default frozen account state, and its metadata is immutable.

GovernanceHigh1/10

The HYPE token exhibits strong market activity with $5,807,513 USD in DEX liquidity and a 24-hour trading volume of $13,754,814 USD. The Volume/Liquidity ratio of 2.37 is normal, indicating healthy trading patterns without signs of wash trading. The DEX pair has been active for 297 days, providing a reasonable track record. Holder concentration is moderate, with the top 10 accounts holding 34.35% of the total supply, which does not trigger high concentration warnings.

UpgradesMedium4/10

The primary upgrade-related risk is the unrevoked mint authority, , which retains the power to modify the token's total supply post-launch. In contrast, the freeze authority has been permanently revoked, ensuring that user accounts cannot be frozen. The token's metadata is also immutable, preventing any unauthorized changes to its branding or descriptive information.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$12.56M across 30 pairs

Meteora DLMMUSDCanalysed$5.64M Orca wpSOL$3.16M Meteora DLMMSOL$2.09M Orca wpUSDC$476.6K Meteora DLMMSOL$270.2K Meteora DLMMUSDC$232.8K

Show 4 more pairsShow less

Meteora DLMMUSDC$221.1K Meteora DLMMSOL$168.5K Meteora DLMMUSDC$76.8K Raydium CLMMSOL$55.1K

The 20 remaining pairs hold $165.2K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

6 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 30% (36.1% total → 36.1% effective; 36.1% in EOAs, 0.0% in contracts — moderate)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 Critical finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is HYPE Safe?