On-chain security analysis — is it a scam or legit?
SolanaThe IO token mint has revoked both mint and freeze authorities, indicating a fixed supply and non-freezable accounts.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The 3 remaining pairs hold $71 between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
metadata_mutable flag is set to True. This means the token's name, symbol, or image can be changed by an authorized party after launch, as indicated by the fact metadata_mutable: True.L-01The metadata_mutable flag is set to True. This means the token's name, symbol, or image can be changed by an authorized party after launch, as indicated by the fact metadata_mutable: True.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The IO token mint has revoked both mint and freeze authorities, indicating a fixed supply and non-freezable accounts. However, its metadata is mutable, allowing for changes to branding post-launch. While chain-native holder concentration data was unavailable, a third-party risk registry flagged signals of single holder ownership and high holder concentration.
The IO token is an SPL token operating under the classic spl-token program. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token is initialized with a supply of 79,879,931.874527234 IO tokens (8 decimals). No advanced Token-2022 extensions like permanent delegates or transfer hooks are active.
The token exhibits moderate liquidity at $66,764 USD, with a healthy 24-hour volume of $229,644 USD, resulting in a normal Volume/Liquidity Ratio of 3.44. The DEX pair has been active for 285 days, providing a reasonable track record. While chain-native RPC data on holder concentration was unavailable, a third-party risk registry flagged signals of single holder ownership and high holder concentration.
The token's mint and freeze authorities are revoked, preventing changes to supply or account freeze capabilities. However, the metadata_mutable flag is set to True, meaning the token's name, symbol, or image can be altered post-launch. There are no upgradable transfer fees or transfer hooks as this is a classic SPL token.
Before engaging with the IO token, verify its current metadata (name, symbol, image) on-chain to ensure it aligns with expectations, as these attributes can be changed.
Monitor for any future changes to the token's metadata that could impact its branding or perceived identity. While mint and freeze authorities are revoked, be aware of the third-party signals regarding holder concentration, and consider the potential impact of large holder movements on market stability.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The io.net (IO) contract on Solana is BZLbGTNCSFfoth2GYDtwr7e4imWzpR5jqcUuGEwr646K. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for io.net is 21/100 (Low risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: No mint; Upgradeability: Fixed code. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
As of Sep 22, 2026, the 10 largest holders own 58.3% of the supply. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
