Is loom Safe? Smart Contract Security Analysis

loom LOOM

CB1YQf…NUBV

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked today 2 audits on record

DexScreener ↗

How is this score calculated? →

6 / 100

Low Risk

Executive SummaryAI Copilot

This audit of the loom (LOOM) SPL Token Mint found no critical or high-severity issues. Both the mint and freeze authorities are revoked, ensuring a fixed supply and preventing account freezing. The token utilizes the Token-2022 program with a 3.00% transfer fee, but no transfer hook is active, and metadata is immutable. Holder distribution data from chain-native RPC was unavailable, but third-party data indicates moderate concentration, and no adverse flags were reported by a third-party risk registry.

1 Informational

Volume 24h

$203.6K

Liquidity

$167.4K

Price

$0.00105

Token Age

1mo

Top 10 Holders

27.8%

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalLow10/10

This token is implemented using the `spl-token-2022` program. Both the mint authority and freeze authority have been `revoked (None)`, indicating a fixed supply and no ability to freeze accounts post-launch. The token has a total supply of `969,505,445.942188400` with `9` decimals. It incorporates a `Transfer Fee` of `300 bps (3.00%)`, but no `Transfer Hook` is active, and `Default Account State Frozen` is `False`. The `balance_mutable` flag is also `False`, preventing arbitrary balance adjustments.

GovernanceLow7/10

Holder concentration is moderate, with the `top10_holders_pct` at `23.52%`, which does not indicate extreme centralization. The token exhibits `Liquidity (USD)` of `$246,115` and a `24h Volume (USD)` of `$1,089,257`. The `Volume/Liquidity Ratio` is `4.43`, which is considered normal, and the `Pair Age` is `31` days, providing some track record.

UpgradesLow8/10

The token's core parameters are largely immutable due to the `revoked` `Mint Authority` and `Freeze Authority`. Key Token-2022 extensions like `Transfer Fee` and `Transfer Hook` are not `upgradable`, as indicated by `transfer_fee_upgradable: False` and `transfer_hook_upgradable: False`. Additionally, the token's `metadata_mutable` flag is `False`, preventing changes to its name, symbol, or image.

Security Checklist

3/4 checks passed

Contract VerifiedPass

No Mint FunctionPass

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$170.6K across 4 pairs

Raydium CLMMSOLanalysed$167.4K Meteora DLMMSOL$2.6K Meteora DYN2Circuit$588 Meteora DYN2SOL$0

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

2 factors

Top-10 concentration > 20% (27.8% total → 27.8% effective; 27.8% in EOAs, 0.0% in contracts — mild)
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Not Signed In

Is loom Safe?