Quantum Audit Logo
Launch App

Is Kishu Inu a Scam?

Honeypot, rug-pull and ownership checks

Is this your token? Publish your own audit on this page →

Kishu Inu KISHU
0xa2b4…817d
Ethereum
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

The KishuInu contract is an ERC-20 compatible token with custom transfer mechanisms and significant owner-controlled features. The audit identified a high-severity centralization risk where the owner can directly manipulate user balances, alongside other low-severity issues related to owner control over transfer limits and a minor rounding error. The contract is not upgradeable, ensuring immutability but preventing on-chain fixes.

1 High2 Medium2 Low3 Informational
i Our automated scanner reviewed Kishu Inu (KISHU) on Ethereum. 3 of 5 security checks passed — see the full breakdown below.
Volume 24h
$43.2K
Liquidity
$783.7K
Price
$0.0000000001
Age
5y
Top 10 Holders
29.1%

Security Findings

1 High2 Med2 Low3 Info
High

Owner Can Manipulate Token Holders' Balances

CP-02The contract owner has the ability to directly change the token balances of any holder. This means the owner can move tokens out of a user's wallet or effectively burn them without the user's consent, by calling functions like `excludeAccount(address)` and `includeAccount(address)`. This poses a significant risk to token holder funds.
IssueThe contract owner has the ability to directly change the token balances of any holder. This means the owner can move tokens out of a user's wallet or effectively burn them without the user's consent, by calling functions like `excludeAccount(address)` and `includeAccount(address)`. This poses a significant risk to token holder funds.
FixToken holders should be aware that the contract owner possesses the power to modify their token balances. To mitigate this, the project should consider renouncing ownership or transferring it to a secure, multi-signature wallet with a high threshold, and ideally, remove the ability to directly manipulate balances.
StatusUnresolved
Medium

Liquidity only partly locked or burned

QA-LIQUIDITY89.8% of the pool's LP is burned or time-locked. 89.8% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 9.8% is held, unlocked, by 2 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Issue89.8% of the pool's LP is burned or time-locked. 89.8% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 9.8% is held, unlocked, by 2 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Medium

The market for this token

QA-MARKETLiquidity $785K (DexScreener, all pools). 24h trading volume $112K (CoinGecko, all markets, daily snapshot). 24h trading volume $43K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $1.75e-08 on 2021-05-14; the price is now 99.6022% below it.
IssueLiquidity $785K (DexScreener, all pools). 24h trading volume $112K (CoinGecko, all markets, daily snapshot). 24h trading volume $43K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $1.75e-08 on 2021-05-14; the price is now 99.6022% below it.
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Low

Potential Rounding Loss in Calculations

CD-01A calculation within the `_getTValues` function performs division before multiplication. In Solidity, integer division truncates any decimal part, which can lead to a small loss of precision or 'rounding loss' if the numbers are not perfectly divisible. While often minor, this could accumulate over many transactions or affect very small amounts.
IssueA calculation within the `_getTValues` function performs division before multiplication. In Solidity, integer division truncates any decimal part, which can lead to a small loss of precision or 'rounding loss' if the numbers are not perfectly divisible. While often minor, this could accumulate over many transactions or affect very small amounts.
FixWhile this issue is generally minor, it's best practice to perform multiplication before division to maintain precision in Solidity. The project should review the `_getTValues` function and reorder operations to `(amount.mul(numerator)).div(denominator)` where possible.
StatusUnresolved
Low

Owner Can Change Transfer Limits

CP-08The contract owner can modify rules that govern how many tokens can be transferred in a single transaction. The `setMaxTxPercent` function allows the owner to set a maximum percentage of the total supply that can be transferred, which could impact the liquidity and tradability of the token.
IssueThe contract owner can modify rules that govern how many tokens can be transferred in a single transaction. The `setMaxTxPercent` function allows the owner to set a maximum percentage of the total supply that can be transferred, which could impact the liquidity and tradability of the token.
FixToken holders should be aware that the owner can change transaction limits. To reduce this centralized control, the project could consider implementing a time-lock for changes to these parameters or transferring ownership to a community-controlled governance mechanism.
StatusUnresolved
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 29.1% of supply. Of that, 3.5% burned, 5.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 18.1% in wallets, 1.6% in other contracts. 281,829 holders in total.
IssueThe ten largest holders own 29.1% of supply. Of that, 3.5% burned, 5.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 18.1% in wallets, 1.6% in other contracts. 281,829 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Listed, but not independently verified

QA-IDENTITYListed on CoinGecko as Kishu Inu (KISHU), market cap $7M, rank #1498. 281,829 holders.
IssueListed on CoinGecko as Kishu Inu (KISHU), market cap $7M, rank #1498. 281,829 holders.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Asset class: Meme token

QA-PROFILEA community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: a 2-of-3 multisig. Code: not upgradeable (no proxy). Fees: 2% on buy, 1.76% on sell. Market: $785K of DEX liquidity across 8 pools. Launch: 2002 days of market history.
IssueA community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: a 2-of-3 multisig. Code: not upgradeable (no proxy). Fees: 2% on buy, 1.76% on sell. Market: $785K of DEX liquidity across 8 pools. Launch: 2002 days of market history.
FixExpect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
StatusAcknowledged

Category Ratings

TechnicalLow8/10

The KishuInu contract implements standard ERC-20 functionality, including `transfer` and `transferFrom` functions, which are well-defined (7.2 Code Security). It incorporates custom logic for managing excluded accounts and transaction limits. A minor technical issue was identified in the `_getTValues` function, where division before multiplication could lead to rounding losses (CD-01). The overall architecture (7.1 Architecture) is straightforward for a token contract.

GovernanceMedium5/10

The contract exhibits significant centralization, with the owner retaining extensive control over critical token mechanics (7.3 Access Control). The owner can directly manipulate token holders' balances by moving or burning tokens via `excludeAccount` and `includeAccount` functions (CP-02). Additionally, the owner can unilaterally change transfer limits using `setMaxTxPercent` (CP-08), impacting the economic behavior of the token (7.4 Economic). This level of owner privilege introduces substantial governance and economic risk (7.5 Governance).

UpgradesLow7/10

The KishuInu contract is not designed as an upgradeable proxy (7.7 Upgrades). This means its logic is immutable once deployed, providing certainty regarding its long-term behavior and eliminating upgrade-related risks. However, any discovered vulnerabilities would require a new contract deployment and token migration, as the existing contract cannot be modified.

Security Checklist

3/5 checks passed
Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionPass
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax2.0%Sell Tax1.8%

Holder Composition

29.1% in top 10
18.1% in wallets1.6% in contracts
Effective Concentration18.7%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$785.3K across 8 pairs
Uniswap v2WETHanalysed$783.7K99.8%ShibaswapWETH$1.3K0.2%ShibaswapSHIB$1340.0%Uniswap v2SHIB$500.0%ShibaswapAKITA$440.0%SushiswapWETH$220.0%
Show 2 more pairsShow less
Uniswap v4USDC$110.0%ShibaswapKLEE$80.0%

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Burned89.8%
LP Locked89.8%

Key Addresses

10 addresses
Deployer
0x90ea…9802
Unlocked LP Held By
0x79b1…82140x6e4a…dcc80xff88…6b950xc0ec…53170xb4c3…e6b20x0a29…02770xc9c4…98b80x896a…81f90x854f…17eb

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

4 factors
  • Owner can change any holder's balance (seize or credit tokens)
  • A privileged address can change transfer or wallet limits
  • Liquidity NOT locked (10% of the pool; this pool is 100% of DEX liquidity) — held by independent providers — market-depth risk
  • Code: Potential Rounding Loss in Calculations (Low, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
sendMedium RiskSuperior Intelligence (SI)Medium RiskApex Gold Ledger (AGL)Medium RiskSatellite Doge-1 (DOGE-1)Medium RiskNeiroMedium RiskCurve.Fi USD Stablecoin (CRVUSD)Medium Risk

Would You Like a More Detailed Audit of Kishu Inu?

Paste the contract address into our AI-powered scanner for a deeper real-time report — free, with every scoring factor shown.

Get Detailed Audit