Quantum Audit Logo

Is KGST Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

KGST KGST
0x94be…f828
BNB Chain
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
Executive SummaryAI Copilot

This audit covers a Stablecoin contract deployed as an upgradeable proxy. The contract implements standard ERC-20 functionality with additional features like pausing transfers, freezing individual accounts, and minting new tokens. All these critical functions are restricted to a multisig owner, which enhances security. However, the existence of these powerful owner-controlled functions introduces centralized risks that token holders should be aware of.

3 Medium4 Informational
Volume 24h
$1.17M
Liquidity
$170.1K
Price
$0.01145
Token Age
9mo
Top 10 Holders
100.0%

Security Findings

Medium

The project's controller can create new tokens.

CP-01The `mint` function allows the contract owner to create an unlimited number of new tokens at any time. This means the total supply of tokens can be increased, which could dilute the value of existing tokens held by you and other users.
IssueThe `mint` function allows the contract owner to create an unlimited number of new tokens at any time. This means the total supply of tokens can be increased, which could dilute the value of existing tokens held by you and other users.
FixToken holders should be aware that the project's controller, a multisig wallet, has the power to increase the token supply. This power should be exercised transparently and with clear communication to the community to avoid unexpected dilution.
StatusUnresolved
Medium

The project's controller can stop all token transfers.

CP-04The `pause` and `unpause` functions allow the contract owner to completely stop all token transfers on the network. If transfers are paused, you would be unable to move or sell your tokens until the owner decides to unpause them.
IssueThe `pause` and `unpause` functions allow the contract owner to completely stop all token transfers on the network. If transfers are paused, you would be unable to move or sell your tokens until the owner decides to unpause them.
FixToken holders should understand that the project's controller, a multisig wallet, can temporarily halt all token activity. This feature is often used in emergencies but could also restrict your access to your funds.
StatusUnresolved
Medium

The project's controller can block specific token holders.

CP-06The `freeze` and `unfreeze` functions allow the contract owner to prevent specific addresses from transferring their tokens. If your address is frozen, you would be unable to move or sell your tokens, even if general transfers are not paused.
IssueThe `freeze` and `unfreeze` functions allow the contract owner to prevent specific addresses from transferring their tokens. If your address is frozen, you would be unable to move or sell your tokens, even if general transfers are not paused.
FixToken holders should be aware that the project's controller, a multisig wallet, has the ability to selectively block individual accounts from transacting. This power should be used with extreme caution and only for legitimate security or regulatory reasons.
StatusUnresolved
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 100.0% of supply. What remains: 100.0% in wallets, 0.0% in other contracts. 1 holders in total.
IssueThe ten largest holders own 100.0% of supply. What remains: 100.0% in wallets, 0.0% in other contracts. 1 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Listed, but not independently verified

QA-IDENTITYListed on CoinGecko as Kyrgyz Som Stablecoin (KGST), market cap $9M, rank #1391. 1 holders.
IssueListed on CoinGecko as Kyrgyz Som Stablecoin (KGST), market cap $9M, rank #1391. 1 holders.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $182K (DexScreener, all pools). 24h trading volume $1.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.2M (DexScreener, all pools).
IssueLiquidity $182K (DexScreener, all pools). 24h trading volume $1.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.2M (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Stablecoin — issuer-backed (fiat reserves)

QA-PROFILEA token designed to hold a fixed value (usually $1). Its safety rests on what backs it and on who can mint, freeze or pause it. Its identity is not independently verified, so it gets none of the allowances an established stablecoin gets: every power its owner holds over supply and transfers is scored in full, because a peg is only as good as whoever can mint. Basis: CoinGecko category: Fiat-backed Stablecoin. Tokenomics — Supply: mintable with no on-chain cap found. Control: a 2-of-5 multisig. Code: upgradeable proxy. Fees: no buy or sell tax. Market: $182K of DEX liquidity across 30 pools. Launch: 284 days of market history.
IssueA token designed to hold a fixed value (usually $1). Its safety rests on what backs it and on who can mint, freeze or pause it. Its identity is not independently verified, so it gets none of the allowances an established stablecoin gets: every power its owner holds over supply and transfers is scored in full, because a peg is only as good as whoever can mint. Basis: CoinGecko category: Fiat-backed Stablecoin. Tokenomics — Supply: mintable with no on-chain cap found. Control: a 2-of-5 multisig. Code: upgradeable proxy. Fees: no buy or sell tax. Market: $182K of DEX liquidity across 30 pools. Launch: 284 days of market history.
FixCheck what backs the peg and who controls supply: reserve attestations for an issuer-backed coin, collateral and governance for a protocol coin.
StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The Stablecoin contract is built on established OpenZeppelin standards, inheriting `ERC20Upgradeable`, `PausableUpgradeable`, and `Ownable2StepUpgradeable`, ensuring a robust architectural foundation (7.1 Architecture). The code implements standard ERC-20 functions and includes mechanisms for pausing transfers, freezing accounts, and minting new tokens. While these functions are restricted to the owner (7.3 Access Control), their presence means a single entity can significantly impact token functionality and supply (7.2 Code Security). For example, the `mint` function allows the owner to increase `_totalSupply`.

GovernanceHigh1/10

The economic stability of the token is directly influenced by the owner's ability to `mint` new tokens, which can dilute existing holders (7.4 Economic). Furthermore, the owner can `pause` all transfers or `freeze` specific accounts, effectively controlling the flow of tokens and potentially impacting market liquidity (7.5 Governance). The owner is a 2-of-5 multisig, which mitigates single-point-of-failure risks, but the power remains centralized.

UpgradesHigh1/10

The contract is deployed as an EIP-1967 Transparent Proxy, managed by an OpenZeppelin `ProxyAdmin` contract (7.7 Upgrades). The `ProxyAdmin` itself is owned by a 2-of-5 multisig wallet, providing a secure and controlled upgrade path. This setup allows for future bug fixes or feature enhancements while requiring multiple approvals for any changes, significantly reducing the risk of unauthorized upgrades.

Security Checklist

Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionFail
Liquidity LockedFail
Not a ProxyFail
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Proxy Upgrade Controls

Proxy TypeEip1967 Transparent
AdminOZ ProxyAdmin → Multisig 2-of-5
ImplementationVerified source

Holder Composition

100.0% in wallets0.0% in contracts
Effective Concentration100.0%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

Key Addresses

Deployer
0x280d…6cbd

What Raised This Score

  • Owner can pause all transfers
  • Owner can blacklist or freeze individual holders
  • Mintable supply — no cap found, dilution unbounded
  • Upgradeable proxy — the admin can replace the logic; admin: ProxyAdmin -> Multisig
  • Liquidity NOT locked (100% of the pool; this pool is 94% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 70% (100.0% total → 100.0% effective; 100.0% in EOAs, 0.0% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

Anoma (XAN)High RiskPlasma (XPL)High RiskMirex (MRX)High RiskCoinMarketCap 20 Index DTF (CMC20)High RiskPancakeSwap Token (CAKE)High RiskSubsquid (SQD)High Risk

Would You Like a More Detailed Audit of KGST?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit