Quantum Audit Logo

Is Jito Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Jito JTO
jtojto…9mCL
Solana Not verifiedLast checked 3d ago 1 audit on record
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

The JITO (JTO) SPL token mint has its mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts. However, the token's metadata is mutable, allowing changes to its name, symbol, or image post-launch. Holder concentration data was unavailable from chain-native RPC, preventing a full assessment of distribution risks.

1 Low
Volume 24h
$240.4K
Liquidity
$1.27M
Price
$0.4353
Token Age
2y
Top 10 Holders
47.5%

Security Findings

Low

Mutable Metadata

L-01The `metadata_mutable: True` flag indicates that the token's name, symbol, or image can be changed post-launch. This allows the issuer to alter the token's branding without holder consent.
IssueThe `metadata_mutable: True` flag indicates that the token's name, symbol, or image can be changed post-launch. This allows the issuer to alter the token's branding without holder consent.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalMedium6/10

The JITO (JTO) token is implemented using the classic `spl-token` program. Both the mint authority and freeze authority have been revoked, ensuring that no new tokens can be minted and no existing token accounts can be frozen. The token has 9 decimals and an initialized supply of 986,522,993.378826880 raw units. Core token behaviors like `balance_mutable`, `closable`, `freezable`, `default_account_state_frozen`, `non_transferable`, `transfer_fee_upgradable`, and `transfer_hook_upgradable` are all set to False, indicating standard token functionality without these advanced Token-2022 extensions.

GovernanceHigh2/10

The token exhibits healthy liquidity with $1,455,394 USD and a 24-hour trading volume of $913,572 USD, resulting in a normal Volume/Liquidity Ratio of 0.63. The DEX pair has been active for 950 days, providing a substantial track record. Information regarding holder concentration was unavailable, preventing an assessment of potential whale risks, though a third-party risk registry flagged "Single holder ownership" as a signal.

UpgradesMedium5/10

The JITO (JTO) token mint has its mint and freeze authorities revoked, meaning its core parameters related to supply and account freezing cannot be changed. As a classic SPL token, it does not utilize Token-2022 extensions like permanent delegates or transfer hooks. However, the token's metadata is mutable, allowing for changes to its name, symbol, or image after launch, as indicated by the `metadata_mutable: True` fact and a third-party risk registry signal.

Security Checklist

Contract VerifiedFail
No Mint Function?
Liquidity LockedFail
Not a ProxyPass

Liquidity Depth

Show 4 more pairsShow less

The 15 remaining pairs hold $2.5K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

  • Ownership status UNKNOWN (owner could not be resolved)
  • Mint capability UNKNOWN (implementation ABI unreadable)
  • Contract source NOT verified
  • Top-10 concentration > 30% (47.5% total → 47.5% effective; 47.5% in EOAs, 0.0% in contracts — moderate)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • 1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

Pudgy Penguins (PENGU)Medium RiskCatecoin (CATE)Medium RiskLive Action Roleplay (LARP)Medium RiskLMAO!Medium RiskRECON RACCOON (RCON)Medium RiskBonkMedium Risk

Would You Like a More Detailed Audit of Jito?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit