Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is Marvin Safe?

MARVINEthereum
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 25, 2026 · 1 audit on record
SummaryAI Copilot

The HoodERC20 contract is a standard ERC-20 implementation utilizing OpenZeppelin libraries.

Read the full analysis
What raised the score
  • Top-10 concentration > 20%
Exact factors
  • Top-10 concentration > 20% (74.7% total → 28.3% effective; 0.0% in EOAs, 70.7% in contracts; 4.0% burned, locked or in pools excluded)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 256 of 7 checks passed
Contract verifiedVerified
OwnershipUnknown
MintNo mint
Liquidity lockLocked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 25, 20263,672 holders
70.7%Contracts4.0%25.3%Everyone else
70.7%Contracts4.0%25.3%Everyone else
ContractsDEX poolsEveryone elseBubble area = share of supply
74.7%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking70.7%
  • DEX poolsthe pools' own liquidity4.0%
  • Everyone else3,662 holders25.3%
Effective concentrationwhat the score reads28.3%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 25, 2026

Liquidity

as of audit · Oct 25$152.7K

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$152.7KShare of depth100.0%
LP Burned100.0% · ≈ permanent lock
LP Locked100.0% · Null Address
Unlocked LP held by
0x1f2f…f3870x171c…3a15

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

6 Info
Info

No issues identified in the reviewed source

The verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint capability, LP lock/burn state, holder concentration) were applied separately and feed the risk score.I-01

Issue

The verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint capability, LP lock/burn state, holder concentration) were applied separately and feed the risk score.

Fix

Re-check after any contract upgrade or ownership change, both of which can alter behaviour without changing this page.

Status

Acknowledged

Info

Who holds the supply

The ten largest holders own 74.7% of supply. Of that, 4.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.0% in wallets, 70.7% in other contracts. 3,672 holders in total.QA-HOLDERS

Issue

The ten largest holders own 74.7% of supply. Of that, 4.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.0% in wallets, 70.7% in other contracts. 3,672 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Listed, but not independently verified

Listed on CoinGecko as Marvin (MARVIN), market cap $2M, rank #2435. 3,672 holders.QA-IDENTITY

Issue

Listed on CoinGecko as Marvin (MARVIN), market cap $2M, rank #2435. 3,672 holders.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

Liquidity burned — cannot be withdrawn

100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY

Issue

100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

The market for this token

Liquidity $153K (DexScreener, all pools). 24h trading volume $30K (CoinGecko, all markets, daily snapshot). 24h trading volume $102K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $153K (DexScreener, all pools). 24h trading volume $30K (CoinGecko, all markets, daily snapshot). 24h trading volume $102K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Meme token

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $153K of DEX liquidity across 1 pools. Launch: 64 days of market history.QA-PROFILE

Issue

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $153K of DEX liquidity across 1 pools. Launch: 64 days of market history.

Fix

Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 25
Executive SummaryWhat the contract is and what the review found

The HoodERC20 contract is a standard ERC-20 implementation utilizing OpenZeppelin libraries. It includes EIP-2612 permit functionality for gasless approvals. The contract contains no administrative privileges or centralized control mechanisms, ensuring full decentralization of token operations.

Technical10/10Low risk

The architecture follows standard ERC-20 patterns (7.1 Architecture) using battle-tested OpenZeppelin contracts (7.2 Code Security). The implementation is immutable with no access control vulnerabilities (7.3 Access Control). No external dependencies beyond standard libraries are utilized (7.6 External).

Governance10/10Low risk

There are no economic parameters or governance mechanisms (7.4 Economic, 7.5 Governance). The token operates as a pure utility asset without inflationary or deflationary logic. Operations are fully permissionless (7.8 Operations).

Upgrades10/10Low risk

The contract is not upgradeable (7.7 Upgrades). It is deployed as a standalone, immutable implementation. No proxy patterns are present.

Final RecommendationWhat to do about this score

The contract is secure and follows industry standards for ERC-20 tokens.

No further action is required for the smart contract code itself. Users should ensure they interact with the correct contract address and remain vigilant against phishing attempts involving permit signatures, as the contract supports EIP-2612.

Contract & Record

1 audit on record
TypeToken
NetworkEthereum
Token age2mo
Contract0x4277…1101
Deployer0x5113…57bb
Badge for your website
Marvin security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Oct 25, 20269Low

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Would You Like a More Detailed Audit of Marvin?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page