On-chain security analysis — is it a scam or legit?
BNB ChainThe BridgeToken contract is a standard ERC-20 implementation with administrative minting capabilities.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
How the supply is spread across holders could not be read — the indexer's holder list does not add up to the supply. Check the largest holders on a block explorer, which reads current balances.
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
The contract lets its controller — a contract — mint new supply. Nothing independent vouches for whoever holds them, so each is a live risk to holders.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
The contract's source code has not been published or verified on the block explorer, so only its deployed bytecode and on-chain behaviour were available. No source-level vulnerability could be confirmed or ruled out. The assessment on this page rests on mint/owner authority, mint capability.
Treat an unverified contract as unaudited at the code level. Ask the team to verify the source on the explorer, which makes an independent review possible.
Acknowledged
Listed on CoinGecko as Metaplex (MPLX), market cap $24M, rank #755.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $709K (DexScreener, all pools). 24h trading volume $994K (CoinGecko, all markets, daily snapshot). 24h trading volume $2.9M (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.897 on 2022-09-19; the price is now 94.4311% below it.
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $709K of DEX liquidity across 3 pools. Launch: 487 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The BridgeToken contract is a standard ERC-20 implementation with administrative minting capabilities. The contract utilizes a beacon proxy pattern for upgradeability. No critical or high-severity vulnerabilities were identified during the static analysis of the implementation logic.
The contract follows standard ERC-20 patterns with robust implementation of transfer and approval logic. 7.1 Architecture is sound, utilizing a beacon proxy for modularity. 7.2 Code Security is high, with no arithmetic overflows due to Solidity 0.8.x usage. 7.6 External dependencies are minimal and well-integrated.
7.3 Access Control is centralized under an owner address, which is currently a contract. 7.4 Economic risk is present due to the minting function, which allows the owner to increase supply arbitrarily. 7.5 Governance is implicit via the owner address, requiring trust in the controlling entity.
7.7 Upgrades are managed via a Beacon proxy, allowing for implementation updates. This pattern is well-understood and provides a clear path for maintenance. 7.8 Operations are supported by the updateDetails function, which allows for metadata synchronization.
The protocol should consider transitioning the owner address to a multi-signature wallet or a decentralized governance contract to mitigate single-point-of-failure risks associated with the minting capability.
Ensure that the beacon proxy owner is also secured with similar multi-signature requirements to prevent unauthorized implementation upgrades.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
