Is Jupiter (JUP) Safe? Smart Contract Security Analysis

Jupiter JUP

JUPyiw…DvCN

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked today 2 audits on record

DexScreener ↗

How is this score calculated? →

16 / 100

Low Risk

Executive SummaryAI Copilot

This audit of the Jupiter (JUP) SPL token mint identifies a low-severity risk related to mutable metadata, meaning the token's name, symbol, or image can be altered post-launch. Key authorities like mint and freeze are appropriately revoked, indicating a fixed supply and unfreezable accounts. Holder distribution data was unavailable, preventing an assessment of concentration risk.

1 Low

Volume 24h

$2.47M

Liquidity

$1.99M

Price

$0.2913

Token Age

7mo

Top 10 Holders

66.4%

Security Findings

1 Low

Low

Mutable Metadata

L-01The token's metadata is mutable, meaning its name, symbol, or image can be changed post-launch. This was identified by the `metadata_mutable: True` flag.

IssueThe token's metadata is mutable, meaning its name, symbol, or image can be changed post-launch. This was identified by the `metadata_mutable: True` flag.

FixVerify metadata against off-chain expectations before trusting branding. Monitor for any changes to the token's branding elements.

StatusUnresolved

Category Ratings

TechnicalLow10/10

The Jupiter (JUP) token operates on the standard `spl-token` program (v3). Both the Mint Authority and Freeze Authority are revoked, ensuring no new tokens can be minted and no existing accounts can be frozen. The token does not utilize advanced Token-2022 extensions such as balance mutability, non-transferability, or default frozen account states, indicating standard token behavior. The supply is fixed at 6,862,434,623.845501 JUP with 6 decimals.

GovernanceMedium5/10

The token exhibits strong market health with over $216 million in DEX liquidity and $82 million in 24-hour trading volume. The Volume/Liquidity Ratio of 0.38 is normal, not indicating wash trading. The DEX pair has been active for 258 days, providing a sufficient track record. However, holder concentration data was unavailable, preventing an assessment of potential whale-related risks.

UpgradesLow8/10

The token's core functionalities are immutable, as both the mint and freeze authorities have been revoked. There are no indications of upgradable transfer fees or transfer hooks. The only mutable aspect identified is the token's metadata, which allows for changes to its name, symbol, or image post-launch.

Security Checklist

3/4 checks passed

Contract VerifiedPass

No Mint FunctionPass

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$3.89M across 30 pairs

Meteora DLMMSOLanalysed$1.99M Orca wpSOL$701.5K Meteora DLMMUSDC$264.2K Meteora DLMMSOL$256.8K Meteora DLMMUSDC$89.1K Meteora DLMMSOL$82.3K

Show 4 more pairsShow less

Raydium CLMMSOL$54.4K Meteora DLMMSOL$53.3K Orca wpUSDC$49.9K Meteora DYNSOL$47.1K

The 20 remaining pairs hold $302.1K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

3 factors

Top-10 concentration > 50% (66.4% total → 66.4% effective; 66.4% in EOAs, 0.0% in contracts — heavy)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Frequently Asked Questions

Is Jupiter a scam?

Characterizing Jupiter (JUP) as a "scam" requires direct evidence of malicious intent, which isn't provided by the data alone. However, significant red flags exist, including an unverified contract and high token centralization (top 10 holders owning 68.3% of supply). While ownership is renounced and no mint function exists, these risks contribute to its 58/100 "High Risk" score, indicating serious concerns.

Is Jupiter safe to buy?

Investing in Jupiter (JUP) carries notable risks, making it difficult to deem "safe" based on current data. The primary concerns include the unverified contract, which prevents public code scrutiny, and the lack of locked liquidity, raising potential rug pull scenarios. Furthermore, 68.3% of the supply is held by the top 10 wallets, indicating significant centralization risk. These factors contribute to its "High Risk" classification.

Has Jupiter been audited?

The provided data indicates the Jupiter (JUP) contract is "not verified." This means its code has not been publicly published on the blockchain explorer. Without verification, an independent audit of the contract's logic for security vulnerabilities or unintended functions is extremely difficult, if not impossible, for external parties. This lack of transparency is a significant risk.

Not Signed In

Is Jupiter Safe?