Is MetaDAO (META) Safe? Smart Contract Security Analysis

MetaDAO META

METAwk…meta

Solana Not verifiedLast checked 3d ago 1 audit on record

DexScreener ↗

64 / 100

High Risk

Executive SummaryAI Copilot

The MetaDAO (META) token mint has a critical vulnerability: the mint authority remains active, allowing the creation of unlimited new tokens which can dilute existing holders. Additionally, the token's metadata is mutable, meaning its name, symbol, or image could be altered. While chain-native RPC data for holder distribution was unavailable, a third-party registry indicates moderate holder concentration, and market data shows healthy liquidity and trading patterns.

1 Critical1 Low

Volume 24h

$725.9K

Liquidity

$2.65M

Price

$6.3400

Token Age

6mo

Top 10 Holders

39.8%

Security Findings

1 Crit1 Low

Critical

Mint Authority Not Revoked

C-01The mint authority is BfzJzF…xDvk. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.

IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.

FixVerify on-chain that the mint authority is set to null before treating supply as fixed.

StatusUnresolved

Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch.

IssueToken name, symbol, or image can be changed post-launch.

FixVerify metadata against off-chain expectations before trusting branding.

StatusUnresolved

Category Ratings

TechnicalMedium4/10

The MetaDAO (META) token is implemented using the standard `spl-token` program. A significant risk is present as the mint authority, , is still active, enabling the creation of new tokens at any time. The freeze authority, however, has been revoked, preventing individual accounts from being frozen. The token's metadata is mutable, allowing for post-launch changes to its descriptive information.

GovernanceHigh1/10

The token exhibits healthy market dynamics with $2,612,489 in DEX liquidity and a 24-hour trading volume of $3,761,955. The volume/liquidity ratio of 1.44 is normal, and the pair has been active for 204 days, indicating maturity. Holder concentration is moderate, with the top 10 accounts holding 40.03% of the total supply, which does not suggest extreme centralization.

UpgradesMedium4/10

The primary upgrade risk stems from the active mint authority, which allows for an uncontrolled increase in total supply. While the freeze authority is revoked, ensuring accounts cannot be frozen, the metadata remains mutable. This means the token's name, symbol, or other descriptive attributes can be changed by the authority holder after launch.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$3.51M across 17 pairs

MetadaoUSDCanalysed$2.65M Meteora DYNUSDC$346.8K Meteora DLMMUSDC$230.8K Orca wpUSDC$177.7K Meteora DLMMSOL$63.0K Meteora DLMMUSDC$25.1K

Show 4 more pairsShow less

Meteora DLMMSOL$11.1K Meteora DLMMUSDC$2.7K Meteora DLMMZEC$2.0K Meteora DLMMZEREBRO$985

The 7 remaining pairs hold $2.0K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

7 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 30% (39.8% total → 39.8% effective; 39.8% in EOAs, 0.0% in contracts — moderate)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 Critical finding(s) from audit
1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is MetaDAO Safe?