On-chain security analysis — is it a scam or legit?
The OptimismMintableERC20 contract functions as an ERC-20 token with a specific minting mechanism.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 19, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x3885…edcdOptimismMintableERC20 token contract includes a function called mint(address,uint256) that allows a specific address, designated as the 'bridge', to create new tokens. When the 'bridge' calls this function, it increases the total supply of the token and assigns the newly minted tokens to a specified recipient. This means the 'bridge' has the power to increase the number of tokens in circulation at any time.CP-01The OptimismMintableERC20 token contract includes a function called mint(address,uint256) that allows a specific address, designated as the 'bridge', to create new tokens. When the 'bridge' calls this function, it increases the total supply of the token and assigns the newly minted tokens to a specified recipient. This means the 'bridge' has the power to increase the number of tokens in circulation at any time.
Token holders should be aware that the 'bridge' address has the authority to mint new tokens. It is important to understand the security measures and operational controls in place for the 'bridge' address, as its compromise could lead to an uncontrolled increase in token supply, potentially diluting the value of existing tokens. Users should verify that the 'bridge' is managed securely, ideally through a robust multi-signature wallet or a time-locked contract.
Unresolved
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0x3885…edcd — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 55% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The ten largest holders own 48.3% of supply. What remains: 0.0% in wallets, 48.3% in other contracts. 76,550 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Impossible Cloud Network Token (ICNT), market cap $44M, rank #503. Traded on Coinbase. 76,550 holders. Verified by: CoinGecko, exchange listings.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $146K (DexScreener, all pools). 24h trading volume $29.4M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.4M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $146K of DEX liquidity across 10 pools. Launch: 473 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The OptimismMintableERC20 contract functions as an ERC-20 token with a specific minting mechanism. The primary finding identifies that a designated 'bridge' address has the authority to mint new tokens, which could impact token supply and value. This design is inherent to Optimism's bridge architecture.
The contract implements the standard ERC-20 token interface, providing essential functionalities like transfer, balanceOf, and approve. The architecture (7.1) is straightforward for an ERC-20 token. Code security (7.2) appears robust for standard operations. However, the mint(address,uint256) function, restricted by access control (7.3) to a 'bridge' address, allows for new token creation. This design choice is inherent to Optimism's bridge architecture but introduces a centralized point for supply expansion.
The economic model (7.4) of this token includes a minting capability, which is controlled by a 'bridge' address. This means the total supply of the token can be increased by the entity controlling the bridge, potentially diluting existing token holders. While this is a standard design for Optimism bridge tokens, it represents a significant economic control point. There is no explicit governance (7.5) mechanism within this contract itself, relying on the external governance of the bridge or the Optimism ecosystem.
The contract is not designed as an upgradeable proxy (7.7), meaning its logic cannot be changed post-deployment. This eliminates risks associated with upgrade mechanisms, such as proxy implementation mismatches or insecure upgrade paths. Any changes to the token's core logic would require a new deployment and migration. This design choice simplifies operational risks (7.8) related to upgrades.
It is crucial for token holders to understand that the 'bridge' address has the power to mint new tokens, which can increase the total supply.
Users should be aware of the security and operational procedures governing this 'bridge' address, as its compromise could lead to unauthorized token minting. Ensure the 'bridge' address is secured with robust multi-signature or time-locked controls.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
