Quantum Audit Logo

Is Just a Backpack Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Just a Backpack 🎒
ZesMGY…STNK
Solana
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 2 audits on record
DexScreener ↗
How is this score calculated? → Low Risk
Executive SummaryAI Copilot

This SPL Token-2022 mint has revoked mint and freeze authorities, ensuring a fixed supply and preventing account freezing. A 1.00% transfer fee is active, and the token's metadata is mutable, allowing for potential changes to its branding. Holder distribution data from chain-native RPC was unavailable, but a third-party registry indicates moderate concentration.

1 Low
Volume 24h
$502.9K
Liquidity
$274.7K
Price
$0.003347
Token Age
11d
Top 10 Holders
24.1%

Security Findings

1 Low
Low

Mutable Metadata

L-01The token's metadata_mutable flag is True. This means the token name, symbol, or image can be changed post-launch.
IssueThe token's metadata_mutable flag is True. This means the token name, symbol, or image can be changed post-launch.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalLow10/10

The token is implemented using the spl-token-2022 program. Both the mint and freeze authorities are revoked, ensuring a fixed supply and preventing arbitrary freezing of holder accounts. A 1.00% transfer fee is active, and new accounts are not created frozen. However, the token's metadata is mutable, allowing for changes to its name, symbol, or image.

GovernanceLow7/10

Holder concentration is moderate, with the top 10 accounts holding 25.18% of the supply, which does not indicate extreme centralization. The token has $185,913 in DEX liquidity, and its pair has been active for 11 days. The 24-hour volume to liquidity ratio is normal at 2.60, suggesting no immediate wash trading signals.

UpgradesMedium6/10

The mint and freeze authorities are permanently revoked, meaning the token's supply cannot be increased and no accounts can be frozen. While the transfer hook is not upgradable, the transfer fee is. The token's metadata, including its name and symbol, can be changed post-launch.

Security Checklist

3/4 checks passed
Contract VerifiedPass
No Mint FunctionPass
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$558.2K across 11 pairs
Meteora DLMMSOLanalysed$274.7K49.2%Raydium CPMMBP$271.5K48.6%Meteora DLMMUSDC$4.9K0.9%Meteora DLMMSOL$4.5K0.8%Meteora DLMMUSDC$2.5K0.4%Raydium CLMMBP$270.0%
Show 4 more pairsShow less
Meteora DYN2SOL$80.0%Raydium CPMMSOL$20.0%Meteora DYN2SOL$00.0%Meteora DYN2SOL$00.0%

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

5 factors
  • Top-10 concentration > 20% (24.1% total → 24.1% effective; 24.1% in EOAs, 0.0% in contracts — mild)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • Token age < 30 days (still settling)
  • 1 Low finding(s) from audit
  • Transfer Fee 1.0% but upgradeable (can be raised)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
Make Aliens Great Again (MAGA)Low RiskOTCLow RiskMPP32 (M32)Low RiskMosaic (MOS)Low RiskArqen (ARQ)Low RiskPurpsLow Risk

Would You Like a More Detailed Audit of Just a Backpack?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit