On-chain security analysis — is it a scam or legit?
BNB ChainThe Kite contract is an Omnichain Fungible Token (OFT) implementation on BSC.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 2, 2026
The 10 remaining pairs hold $2.6K between them and are not listed. The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x7713…981f0x25fa…d87fNo privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
send, lzReceiveSimulate, and lzReceive functions. This mechanism is necessary for cross-chain functionality but effectively allows the protocol to increase the total supply, which can dilute the value of existing holdings.CP-01The contract allows for the creation of new tokens through the send, lzReceiveSimulate, and lzReceive functions. This mechanism is necessary for cross-chain functionality but effectively allows the protocol to increase the total supply, which can dilute the value of existing holdings.
Maintain strict transparency regarding the total supply and ensure that cross-chain minting parameters are audited and monitored for anomalies.
Unresolved
pause and unpause, which halts all token transfers. This centralized control acts as a kill-switch that can prevent users from moving their assets during an emergency or if the owner's keys are compromised.CP-04The owner has the authority to call pause and unpause, which halts all token transfers. This centralized control acts as a kill-switch that can prevent users from moving their assets during an emergency or if the owner's keys are compromised.
Consider implementing a time-lock on the pause functionality or transitioning to a decentralized governance model to reduce reliance on the multisig owner.
Unresolved
The ten largest holders own 87.5% of supply. What remains: 51.0% in wallets, 36.5% in other contracts. 9,770 holders in total. For a verified reference asset the largest holders are custodians, exchanges and bridges; concentration is reported, not scored.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Kite (KITE), market cap $290M, rank #138. Traded on Coinbase. 9,770 holders. Verified by: CoinGecko.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $1.6M (GeckoTerminal, all pools). 24h trading volume $13.3M (CoinGecko, all markets, daily snapshot). 24h trading volume $839K (GeckoTerminal, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token representing another asset's units 1:1, backed by a wrapping contract, a custodian or a bridge. Scored as an established reference asset: its identity is verified, so the issuer's or protocol's controls (listed as findings) are real and are priced once as counterparty risk, and LP locks and holder concentration are not scored — its pools belong to market makers and its largest holders are exchanges, bridges and custody. Basis: a copy of the coin from its home chain (ethereum), minted here by LayerZero (lzReceive). Tokenomics — Supply: minted here by LayerZero (lzReceive) against tokens locked or burned on other chains. Control: a 4-of-6 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.6M of DEX liquidity across 20 pools. Launch: 365 days of market history.
The backing is the risk: check who holds the underlying asset and how redemption works.
Acknowledged
The Kite contract is an Omnichain Fungible Token (OFT) implementation on BSC. It utilizes standard LayerZero integration for cross-chain transfers and includes administrative controls for pausing and cross-chain configuration. The protocol relies on a multisig owner, which mitigates single-point-of-failure risks, though the ability to mint tokens via cross-chain operations requires careful monitoring.
The architecture follows the standard LayerZero OFT pattern, ensuring robust cross-chain interoperability. 7.1 Architecture and 7.2 Code Security are well-implemented, utilizing established libraries like ERC20Pausable. 7.3 Access Control is enforced via OpenZeppelin's Ownable, though the owner retains significant power over supply and state. 7.6 External dependencies are limited to the LayerZero endpoint, which is standard for this asset class.
7.4 Economic and 7.5 Governance risks are centered on the owner's ability to influence token supply and transferability. The multisig requirement (4-of-6) provides a strong governance layer against malicious single-actor actions. However, the minting capability inherent in the OFT standard represents a permanent economic risk to token holders if the endpoint or owner is compromised.
7.7 Upgrades and 7.8 Operations are currently static as the contract is not a proxy. The protocol does not support self-upgradability, which eliminates risks associated with implementation swaps. Operational security is maintained through the multisig wallet, ensuring that administrative changes require consensus.
The protocol should establish a clear, public policy regarding the minting of new tokens to maintain holder trust.
Given the multisig setup, ensure that the signers are geographically and organizationally distributed to maximize the security of the administrative functions.
Regularly monitor the LayerZero endpoint configuration and the enforcedOptions state to ensure that cross-chain fees and gas limits remain aligned with network conditions. No immediate code changes are required, but active oversight of the owner-restricted functions is recommended.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
