Is Meteora (MET) Safe? Smart Contract Security Analysis

Meteora MET

METvsv…mWQL

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked today 2 audits on record

DexScreener ↗

How is this score calculated? →

25 / 100

Medium Risk

Executive SummaryAI Copilot

The Meteora (MET) SPL token mint exhibits a low-risk profile with both mint and freeze authorities revoked, ensuring a fixed supply and unfreezable accounts. The primary concern identified is the mutability of its metadata, which allows for changes to branding post-launch. Holder distribution data was unavailable, preventing a full assessment of supply concentration.

1 Low

Volume 24h

$639.6K

Liquidity

$2.87M

Price

$0.294

Token Age

1mo

Top 10 Holders

80.0%

Security Findings

1 Low

Low

Mutable Metadata

L-01The token's metadata is mutable, as indicated by `metadata_mutable: True`. This means the token name, symbol, or image can be changed post-launch by an authorized party.

IssueThe token's metadata is mutable, as indicated by `metadata_mutable: True`. This means the token name, symbol, or image can be changed post-launch by an authorized party.

FixVerify metadata against off-chain expectations before trusting branding.

StatusUnresolved

Category Ratings

TechnicalLow10/10

The token is implemented using the standard `spl-token` program. Both the mint authority and freeze authority have been revoked, which means no new tokens can be minted and no holder accounts can be frozen, ensuring a fixed supply and unhindered transfers. The token does not utilize advanced Token-2022 extensions such as permanent delegates, transfer hooks, or default frozen account states, simplifying its operational model. (7.1 Architecture, 7.3 Access Control)

GovernanceHigh3/10

The token demonstrates healthy market activity with over $51 million in DEX liquidity and a 24-hour volume of $157,839, resulting in a normal Volume/Liquidity Ratio of 0.00. The DEX pair has been established for 256 days, indicating a mature market presence. Holder concentration data was unavailable, precluding an assessment of potential whale-driven price volatility. (7.4 Economic)

UpgradesLow8/10

The mint authority and freeze authority are both revoked, preventing any future changes to the token's supply or account freeze status. The underlying `spl-token` program is not subject to upgradeability in the manner of EVM proxy contracts. However, the token's metadata is mutable, meaning its name, symbol, or image can be altered after launch. (7.7 Upgrades)

Security Checklist

3/4 checks passed

Contract VerifiedPass

No Mint FunctionPass

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$6.90M across 30 pairs

Meteora DYN2USDCanalysed$2.87M Meteora DLMMSOL$1.33M Meteora DLMMUSDC$947.6K Meteora DLMMSOL$490.5K Meteora DLMMSOL$258.5K Meteora DLMMUSDC$187.5K

Show 4 more pairsShow less

Meteora DLMMJUP$147.2K Meteora DLMMUSDC$124.4K Meteora DLMMUSDC$76.1K Meteora DLMMSOL$68.9K

The 20 remaining pairs hold $399.9K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

3 factors

Top-10 concentration > 70% (80.0% total → 80.0% effective; 80.0% in EOAs, 0.0% in contracts — extreme)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Frequently Asked Questions

Is Meteora a scam?

Meteora carries a high-risk score of 56/100 based on available data. While ownership is renounced and no new tokens can be minted, significant concerns exist. The contract is unverified, meaning its code cannot be publicly scrutinized for vulnerabilities or hidden functions. Additionally, 68% of the supply is concentrated in the top 10 wallets, raising centralization risks. These factors warrant extreme caution.

Is Meteora safe to buy?

Meteora is classified with a high-risk score of 56/100, suggesting it is not inherently safe to buy without significant due diligence. Key risk factors include an unverified contract, which prevents independent security audits, and highly centralized holdings, with 68.0% of the supply controlled by the top ten wallets. Additionally, the substantial liquidity, while impressive, is not locked, adding to potential vulnerabilities.

Has Meteora been audited?

Based on the provided information, the Meteora contract is unverified. This means its source code has not been published and confirmed to match the deployed code on the blockchain. Without contract verification, a comprehensive security audit by independent third parties is practically impossible to conduct or validate, significantly increasing the uncertainty regarding its integrity.

Not Signed In

Is Meteora Safe?