Honeypot, rug-pull and ownership checks
SolanaThe token is currently high-risk primarily due to an active mint authority, which allows for unlimited supply inflation.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 21, 2026
The 20 remaining pairs hold $139.1K between them and are not listed. The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
Presents itself as Monero (XMR), but CoinGecko lists no Monero contract on solana at all (CoinGecko). Holders who think they own the real asset own this contract instead; it has none of the real asset's backing, liquidity or redemption.
Do not buy, hold or accept this token as the asset it names. Verify any token address against the issuer's official site.
Acknowledged
100% of the pool's liquidity is held, unlocked, by wallet 5weo7C…pcTd. This wallet can remove that liquidity at any moment and leave holders unable to sell.
Watch that wallet's liquidity position; treat the pool as removable until the liquidity is burned or locked.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the pool's creator. One of them — a wallet, 5weo7C…pcTd — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. This assessment covers the main pool, which holds 44% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
An independent third-party risk registry flags the mint authority as enabled.
Monitor the mint authority status via on-chain tools.
Unresolved
The ten largest holders own 57.9% of supply. Of that, 21.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 12.7% in wallets, 24.2% in other contracts. 36,316 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Liquidity $1.0M (DexScreener, all pools). 24h trading volume $5.0M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The contract lets its controller — nobody (ownership renounced) — mint new supply; change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
A token presenting itself under the name or ticker of an established asset without being that asset's contract. Its only reason to borrow that identity is to be mistaken for it. Scored as an imitation (see the identity finding). Basis: launched on pump.fun (PumpSwap), a meme launchpad; behaves as: meme token. Tokenomics — Supply: mintable with no on-chain cap found. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $1.0M of DEX liquidity across 30 pools. Launch: launched on pump.fun (PumpSwap), 175 days of market history.
Do not treat this token as the asset it names. Use only the official contract address published by that asset's issuer.
Acknowledged
The token is currently high-risk primarily due to an active mint authority, which allows for unlimited supply inflation. While the freeze authority is revoked, the liquidity pool is entirely unlocked and controlled by a single external wallet, posing a significant risk of liquidity removal. Third-party risk registry data confirms the mint authority remains enabled.
The token utilizes the standard spl-token program. 7.1 Architecture and 7.2 Code Security are standard for this program type. 7.3 Access Control is currently compromised by an active mint authority (). 7.8 Operations are stable with no transfer hooks or complex extensions active.
7.4 Economic factors show moderate holder concentration at 36.89% for the top 10. 7.6 External liquidity is $449,314 with a healthy volume/liquidity ratio of 0.94. However, 100% of pool liquidity is held by a single wallet (5weo7C…pcTd) and is not locked, presenting a significant risk to 7.5 Governance and market stability.
7.7 Upgrades are not applicable as SPL tokens do not use proxy patterns. Metadata is mutable, allowing for potential branding changes. The mint authority remains active, which is the primary concern for long-term supply control.
Investors should monitor the mint authority address for a potential revocation transaction.
Given that 100% of the liquidity is held by an unlocked wallet, users should be prepared for the possibility of sudden liquidity withdrawal. Verify the current mint authority status on-chain using a block explorer before committing capital. Avoid holding large positions until the mint authority is set to null and liquidity is moved to a time-locked contract.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The Monero (XMR) contract on Solana is WXMRyRZhsa19ety5erZhHg4N3xj3EVN92u94422teJp. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for Monero is 99/100 (Critical risk) as of Oct 21, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: Mintable; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Liquidity lock: Not locked (as of Oct 21, 2026). Total DEX liquidity: $1.03M.
As of Oct 21, 2026, the 10 largest holders own 57.9% of the supply across 36,316 holders. The Holders section on this page shows who they are by holder type.
Paste the contract address into our AI-powered scanner for a deeper real-time report — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
