Is lmeow Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The lmeow token is an SPL Token-2022 mint. Key security authorities, including the Mint Authority and Freeze Authority, are permanently revoked, preventing further token issuance or freezing of holder accounts. No Transfer Hook is active, and the Default Account State is not frozen, ensuring standard token transfer behavior. The token is not balance_mutable, closable, freezable, or non_transferable, indicating a standard and immutable token configuration.

GovernanceHigh1/10

The token has a moderate liquidity of $50,253 USD, supporting small to medium trades. The 24-hour volume is $339,660, resulting in a Volume/Liquidity Ratio of 6.76, which is not indicative of wash trading. The pair age is 7 days, providing a minimal track record. Holder concentration shows the top 10 accounts hold 30.26% of the supply, which is not considered highly concentrated.

UpgradesMedium5/10

The lmeow token mint has no upgradeability concerns related to its core authorities, as both Mint and Freeze Authorities are revoked. It utilizes the spl-token-2022 program but does not implement extensions like Transfer Hook or Default Account State Frozen. Metadata mutability is set to False, ensuring that the token's name, symbol, and image cannot be changed post-launch. The transfer_fee_upgradable and transfer_hook_upgradable flags are also false.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$30.6K

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

7 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 50% (50.3% total → 50.3% effective; 50.3% in EOAs, 0.0% in contracts — heavy)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Liquidity < $50k ($30,616 across 1 pairs — thin market)
Token age < 30 days (still settling)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is lmeow Safe?