Quantum Audit Logo

Is Metaplex Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Metaplex MPLX
METAew…Y18m
Solana
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 2 audits on record
Executive SummaryAI Copilot

The Metaplex Token (MPLX) mint retains an active mint authority, allowing for unlimited new token creation and potential dilution of existing holders. Additionally, the token's metadata is mutable, enabling changes to its name, symbol, or image post-launch. Holder distribution data was unavailable from chain-native RPC, preventing a full assessment of supply concentration risk.

1 Critical1 Low
Volume 24h
$283.0K
Liquidity
$2.38M
Price
$0.03879
Token Age
8mo
Top 10 Holders
68.2%

Security Findings

Critical

Mint Authority Not Revoked

C-01The mint authority is BHkk3R…254k. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
FixVerify on-chain that the mint authority is set to null before treating supply as fixed.
StatusUnresolved
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch, as indicated by `metadata_mutable: True`.
IssueToken name, symbol, or image can be changed post-launch, as indicated by `metadata_mutable: True`.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalMedium6/10

The Metaplex Token (MPLX) is an SPL token operating under the `spl-token` program. A critical risk is present as the mint authority, , remains active, enabling the creation of new tokens. Conversely, the freeze authority has been revoked, preventing any entity from freezing holder accounts. The token has a supply of 999,981,547.002026 with 6 decimals and does not utilize Token-2022 extensions like permanent delegates or transfer hooks. Other security flags like `balance_mutable`, `closable`, `freezable`, `default_account_state_frozen`, `non_transferable`, `transfer_fee_upgradable`, and `transfer_hook_upgradable` are all set to False, indicating a standard SPL token configuration without these specific mutable features.

GovernanceMedium4/10

The token exhibits a healthy liquidity of $1,705,177 USD and a normal 24-hour volume to liquidity ratio of 0.05, suggesting organic trading activity rather than wash trading. The DEX pair has been active for 262 days, providing a reasonable track record. However, holder concentration data was unavailable, which prevents an assessment of potential whale manipulation or supply centralization risks. No honeypot indicators were detected by external security signals.

UpgradesMedium4/10

The mint authority for MPLX is still active, which allows for potential future changes to the token's total supply. In contrast, the freeze authority has been permanently revoked, ensuring that no further changes can be made to account freezing capabilities. The token's metadata, including its name, symbol, or image, is mutable, meaning it can be altered post-launch. As a classic SPL token, it does not feature Token-2022 specific upgradeable extensions.

Security Checklist

Contract VerifiedPass
No Mint FunctionFail
Liquidity LockedFail
Not a ProxyPass

Liquidity Depth

Show 4 more pairsShow less

One more pair holds $3 and is not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

  • Mintable supply — no cap found, dilution unbounded
  • Top-10 concentration > 50% (68.2% total → 68.2% effective; 68.2% in EOAs, 0.0% in contracts — heavy)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • 1 Critical finding(s) from audit
  • 1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

The Rizz Bull (RIZZLER)High RiskPointless Coin (POINTLESS)High RiskCaitecoyn (CAITE)High RiskBIDit (BID)High RiskDumb Phone Gang (DPG)High RiskWalruseHigh Risk

Would You Like a More Detailed Audit of Metaplex?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit