Is Manifesting (MANIFEST) Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The Manifesting (MANIFEST) token is implemented using the spl-token-2022 program. Both the mint authority and freeze authority have been revoked, which is a strong security positive, ensuring no new tokens can be minted and no accounts can be frozen. The token does not utilize a transfer hook, permanent delegate, or default frozen account state, simplifying its operational model. The token's supply is fixed at 899,998,978,248,591 units with 6 decimals.

GovernanceHigh3/10

The token exhibits healthy liquidity with $274,032 USD available on DEXs, and a 24-hour volume of $741,182 USD. The Volume/Liquidity Ratio is 2.70, which is considered normal and does not indicate wash trading. The DEX pair has been active for 73 days, providing a reasonable track record. A third-party registry reports top 10 holders at 12.18%, indicating low holder concentration.

UpgradesMedium5/10

The Manifesting (MANIFEST) token mint has a fixed configuration as both mint and freeze authorities are revoked, preventing any future changes to the token's supply or account freezing capabilities. Key Token-2022 extensions such as transfer hook and transfer fee are not present, and their upgradability flags are false, indicating a stable and immutable design. Furthermore, the token's metadata is not mutable, ensuring that its name, symbol, and image cannot be altered post-launch.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$624.7K across 11 pairs

PumpswapSOLanalysed$545.0K Meteora DLMMSOL$75.9K Meteora DLMMSOL$1.8K Meteora DLMMSOL$815 Orca wpUSDC$512 Meteora DLMMfone$369

Show 4 more pairsShow less

Meteora DYN2WIHA$227 Meteora DLMMTripleT$93 Meteora DYN2CSR$21 Meteora DYN2ANSEM$3

One more pair holds $2 and is not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

4 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is Manifesting Safe?