Is モモ太 (MOMOTA) Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The Momota token is implemented using the spl-token-2022 program. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no accounts can be frozen post-launch. No Token-2022 extensions like Transfer Hook or Default Account State Frozen are active, nor are there any balance-mutating or non-transferable authorities, as confirmed by external security signals (balance_mutable: False, non_transferable: False).

GovernanceHigh1/10

The token exhibits a healthy holder distribution, with the top 10 accounts holding 27.68% of the supply, indicating low concentration risk. Total DEX liquidity stands at $43,072, which is moderate. The 24-hour volume of $95,918 results in a normal Volume/Liquidity Ratio of 2.23, suggesting organic trading activity. The DEX pair has been active for 115 days, providing a reasonable track record.

UpgradesMedium5/10

The token's immutability is strong, with both mint and freeze authorities permanently revoked. No Token-2022 extensions that could introduce mutable behavior, such as a transfer hook or default frozen state, are enabled. Furthermore, the token's metadata is immutable (metadata_mutable: False), preventing post-launch changes to its name, symbol, or image.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$43.9K across 2 pairs

PumpswapSOLanalysed$41.7K Meteora DLMMSOL$2.2K

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

6 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 30% (46.7% total → 46.7% effective; 46.7% in EOAs, 0.0% in contracts — moderate)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Liquidity < $50k ($43,880 across 2 pairs — thin market)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is モモ太 Safe?