Is Leafy Safe? Smart Contract Security Analysis

Leafy LEAFY

DD3AC2…pump

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked today 2 audits on record

DexScreener ↗

How is this score calculated? →

14 / 100

Low Risk

Executive SummaryAI Copilot

This audit of the Leafy SPL Token Mint found no critical or high-severity issues based on the available on-chain data and third-party security signals. The mint and freeze authorities are revoked, and no problematic Token-2022 extensions like transfer hooks or default frozen accounts are active. Holder concentration data was partially unavailable from chain-native RPC, but external signals indicate a moderate distribution. Third-party risk registry data reported no adverse flags.

1 Informational

Volume 24h

$49.6K

Liquidity

$88.6K

Price

$0.0007993

Token Age

15d

Top 10 Holders

32.9%

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalLow10/10

The Leafy token is an SPL Token-2022 mint with its mint and freeze authorities both revoked, ensuring no new tokens can be created and no accounts can be frozen. It does not utilize the Transfer Hook extension, nor is the Default Account State Frozen. The token's balance and metadata are immutable, preventing unauthorized changes to supply or branding. These configurations indicate a robust technical setup for a fixed-supply token.

GovernanceMedium6/10

Holder concentration is moderate, with the top 10 accounts holding 30.48% of the supply, which is below thresholds for high concentration risk. The token exhibits healthy liquidity at $109,986 USD, and its 24-hour volume of $507,341 USD results in a normal Volume/Liquidity Ratio of 4.61, not indicating wash trading. The DEX pair has been active for 15 days, providing a reasonable initial track record.

UpgradesLow8/10

The mint and freeze authorities are permanently revoked, meaning no further changes can be made to the token's supply or account freeze status. The token does not have upgradable transfer fees or transfer hooks. Metadata is immutable, ensuring the token's name, symbol, and image cannot be altered post-launch. This configuration provides a high degree of immutability and predictability for holders.

Security Checklist

3/4 checks passed

Contract VerifiedPass

No Mint FunctionPass

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$89.4K across 2 pairs

PumpswapSOLanalysed$88.6K Meteora DLMMSOL$786

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

3 factors

Top-10 concentration > 30% (32.9% total → 32.9% effective; 32.9% in EOAs, 0.0% in contracts — moderate)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Token age < 30 days (still settling)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Not Signed In

Is Leafy Safe?