Quantum Audit Logo

Is Mamo Safe?

On-chain security analysis — is it a scam or legit?

Mamo MAMO
0x7300…19fe
Base
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

The MAMO contract is an ERC-20 token with standard functionalities including burning, voting, and permit features. The contract incorporates cross-chain minting and burning capabilities, which are restricted to a `superchain_token_bridge` address. While the core ERC-20 functions operate as expected, the centralized control over token supply and individual balances by the `superchain_token_bridge` introduces significant economic and technical risks, as identified in the findings.

1 High1 Medium4 Informational
Volume 24h
$31.3K
Liquidity
$476.5K
Price
$0.00826
Token Age
1y
Top 10 Holders
90.0%

Security Findings

1 High1 Med4 Info
High

Privileged Address Can Burn Tokens From Any Holder

CP-02The `superchain_token_bridge` controller can destroy MAMO tokens from any holder's balance using the `crosschainBurn(address,uint256)` function. This means the controller could arbitrarily reduce the token holdings of any address, potentially leading to loss of user funds.
IssueThe `superchain_token_bridge` controller can destroy MAMO tokens from any holder's balance using the `crosschainBurn(address,uint256)` function. This means the controller could arbitrarily reduce the token holdings of any address, potentially leading to loss of user funds.
FixToken holders should be aware that the `superchain_token_bridge` address possesses the power to directly affect individual token balances. The integrity and trustworthiness of the `superchain_token_bridge` controller are paramount to prevent unauthorized token destruction. Strong access controls, such as a multi-signature wallet with a high threshold, are highly recommended for this critical function.
StatusUnresolved
Medium

Privileged Address Can Mint New Tokens

CP-01The `superchain_token_bridge` controller has the ability to create new MAMO tokens at any time using the `crosschainMint(address,uint256)` function. This action increases the total supply of MAMO, which could reduce the value of existing tokens held by others due to inflation.
IssueThe `superchain_token_bridge` controller has the ability to create new MAMO tokens at any time using the `crosschainMint(address,uint256)` function. This action increases the total supply of MAMO, which could reduce the value of existing tokens held by others due to inflation.
FixToken holders should understand that the `superchain_token_bridge` address has significant control over the token supply. The security and governance of this `superchain_token_bridge` address are critical to the token's economic stability. Consider implementing safeguards like a multi-signature wallet or a time-lock for this function.
StatusUnresolved
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 90.0% of supply. What remains: 9.5% in wallets, 80.5% in other contracts. 72,482 holders in total.
IssueThe ten largest holders own 90.0% of supply. What remains: 9.5% in wallets, 80.5% in other contracts. 72,482 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Identity verified by independent sources

QA-IDENTITYListed on CoinGecko as Mamo (MAMO), market cap $5M, rank #1755. Traded on Coinbase. 72,482 holders. Verified by: exchange listings.
IssueListed on CoinGecko as Mamo (MAMO), market cap $5M, rank #1755. Traded on Coinbase. 72,482 holders. Verified by: exchange listings.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $1.1M (DexScreener, all pools). 24h trading volume $1.4M (CoinGecko, all markets, daily snapshot). 24h trading volume $351K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.409 on 2026-08-27; the price is now 98.048% below it.
IssueLiquidity $1.1M (DexScreener, all pools). 24h trading volume $1.4M (CoinGecko, all markets, daily snapshot). 24h trading volume $351K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.409 on 2026-08-27; the price is now 98.048% below it.
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.1M of DEX liquidity across 14 pools. Launch: 478 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.1M of DEX liquidity across 14 pools. Launch: 478 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged

Category Ratings

TechnicalLow8/10

The MAMO token implements the ERC-20 standard, including extensions for burning, voting, and gasless permits (ERC-20Permit). The architecture (7.1) is standard for an ERC-20 token, inheriting from multiple OpenZeppelin contracts, which generally contributes to code security (7.2). However, the contract introduces two privileged functions, `crosschainMint` and `crosschainBurn`, which allow a designated `superchain_token_bridge` address to directly manipulate the token supply and individual user balances. This centralized access control (7.3) is a significant technical risk, as demonstrated by findings CP-01 and CP-02, where the `superchain_token_bridge` can mint new tokens or burn tokens from any address.

GovernanceHigh1/10

The economic model (7.4) of the MAMO token is heavily influenced by the `superchain_token_bridge` address. This address has the power to mint an arbitrary amount of new tokens via `crosschainMint`, directly diluting the value of existing token holders (CP-01). More critically, the `superchain_token_bridge` can burn tokens from any holder's balance using `crosschainBurn`, posing a direct threat to individual asset ownership (CP-02). The governance (7.5) and operational (7.8) security of this `superchain_token_bridge` address are paramount, as its compromise would lead to severe economic consequences for all token holders. External (7.6) dependencies are limited to standard ERC interfaces.

UpgradesHigh2/10

The MAMO contract is not implemented as an upgradeable proxy (7.7). Therefore, there are no upgrade-related risks or mechanisms to consider. Any changes to the contract's logic would require a new deployment and migration of assets.

Security Checklist

2/5 checks passed
Contract VerifiedPass
Ownership Renounced?
No Mint FunctionFail
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

90.0% in top 10
9.5% in wallets80.5% in contracts
Effective Concentration41.7%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$1.11M across 14 pairs
AerodromeVIRTUALanalysed$476.5K42.8%AerodromecbBTC$401.8K36.1%AerodromeUSDC$107.2K9.6%AerodromeEDGE$51.2K4.6%AerodromeWETH$42.0K3.8%AerodromeZORA$22.7K2.0%
Show 4 more pairsShow less
Uniswap v2AIXBT$9.7K0.9%Uniswap v3VIRTUAL$2.6K0.2%AerodromeKTA$2960.0%Uniswap v4FRLZ$110.0%

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

Key Addresses

1 addresses
Deployer
0xdca8…6fb8

What Raised This Score

5 factors
  • Owner can change any holder's balance (seize or credit tokens)
  • Mintable supply — no cap found, dilution unbounded
  • Ownership status UNKNOWN (owner could not be resolved)
  • Liquidity NOT locked (100% of the pool; this pool is 43% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 30% (90.0% total → 41.7% effective; 9.5% in EOAs, 80.5% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
B3Medium RiskLienFi (LFI)Medium RiskMey Network (MEY)Medium RiskBrain Armstrong (BRAINARM)Medium RiskDerive (DRV)Medium RiskVenice Deity (VVVEITY)Medium Risk

Would You Like a More Detailed Audit of Mamo?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit