Is Kori The Pom (KORI) Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalLow10/10

The Kori The Pom (KORI) token is implemented using the standard `spl-token` program (v3). Key administrative authorities, including the mint authority and freeze authority, have been permanently revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token does not utilize any Token-2022 extensions such as permanent delegates, transfer hooks, or default frozen account states, as indicated by `balance_mutable: False`, `default_account_state_frozen: False`, and `transfer_hook_upgradable: False`. This configuration provides a high degree of immutability and predictability for token holders.

GovernanceMedium6/10

The economic profile of Kori The Pom (KORI) appears stable. Holder concentration is low, with the top 10 token accounts holding only 23.45% of the total supply, reducing the risk of large-scale sell-offs. The token boasts substantial DEX liquidity of $508,307, supporting efficient trading. The 24-hour volume of $258,948 results in a healthy Volume/Liquidity Ratio of 0.51, indicating organic trading activity rather than wash trading. The pair has been active for 479 days, providing a mature market history, and liquidity is reported as locked.

UpgradesLow7/10

The Kori The Pom (KORI) token mint is configured for immutability regarding its core parameters. The mint authority and freeze authority have both been revoked, meaning no further changes can be made to the token's supply or account freeze status. Furthermore, the token's metadata is immutable (`metadata_mutable: False`), preventing any post-launch alterations to its name, symbol, or image. There are no indications of upgradable features such as transfer fees or transfer hooks, reinforcing its fixed operational parameters.

Security Checklist

3/4 checks passed

Contract VerifiedPass

No Mint Function?

Liquidity LockedPass

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$507.6K across 10 pairs

Raydium CPMMSOLanalysed$503.7K Meteora DLMMSOL$3.2K Meteora DLMMSOL$606 Meteora DYN2PEPE$28 Raydium CLMMUSD1$25 Meteora DYN2CSR$20

Show 1 more pairShow less

Orca wpSOL$2

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Burned100.0% · ≈ permanent lock

LP Locked100.0% · Raydium Lock

What Raised This Score

3 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Top-10 concentration > 20% (23.4% total → 23.4% effective; 23.4% in EOAs, 0.0% in contracts — mild)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is Kori The Pom Safe?