On-chain security analysis — is it a scam or legit?
BNB ChainThe protocol is a standard ERC-20 token deployed as an EIP-1167 minimal clone.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 8, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x88d2…1ea50x892b…ed1b0x89b3…56a50x22ec…bd1d0xd07c…56ca0x4f0f…328d35.9% of the pool's LP is burned or time-locked. 35.9% is locked in UNCX Locker with no expiry date. 64.1% is held, unlocked, by 2 address(es) other than the owner/deployer. One of them — a contract, 0x88d2…1ea5 — holds 54.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 65% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The contract contains a 'removeTransferConstraints' function that could previously toggle transfer restrictions. Because ownership has been renounced, this function is now permanently inaccessible, rendering the switch immutable.
No action required. The current state is locked and secure.
Unresolved
The ten largest holders own 7.5% of supply. Of that, 1.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.8% in wallets, 5.3% in other contracts. 47,654 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Moolah (MOOLAH), market cap $63M, rank #371. 47,654 holders. Verified by: CoinGecko.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $2.5M (DexScreener, all pools). 24h trading volume $225K (CoinGecko, all markets, daily snapshot). 24h trading volume $213K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Meme. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $2.5M of DEX liquidity across 6 pools. Launch: 525 days of market history.
Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
Acknowledged
The protocol is a standard ERC-20 token deployed as an EIP-1167 minimal clone. The contract ownership has been renounced, effectively locking the administrative functions and ensuring the current state is immutable. No critical or high-severity vulnerabilities were identified.
The architecture utilizes a standard EIP-1167 minimal clone pattern, ensuring gas-efficient deployment and consistent logic. 7.1 Architecture is robust, 7.2 Code Security is high due to the use of audited OpenZeppelin libraries, and 7.3 Access Control is effectively disabled via ownership renouncement. 7.6 External dependencies are limited to standard ERC-20 interfaces, minimizing integration risks.
7.4 Economic and 7.5 Governance risks are minimal as the contract is immutable and ownership is renounced. There are no minting functions, ensuring a fixed supply. The token operates as a standard utility asset without complex economic levers.
7.7 Upgrades are not applicable as the EIP-1167 minimal clone pattern is inherently immutable. The implementation address is fixed at deployment and cannot be altered. 7.8 Operations are stable due to this permanent state.
The contract is secure and immutable. No further action is required as the renounced ownership prevents any unauthorized or malicious changes to the token's transfer logic or state.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The Moolah contract on BNB Chain is 0xbab528425edb1e0e36d3719bc3307d9c8cce8888. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for Moolah is 9/100 (Low risk) as of Nov 8, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Renounced; Mint: No mint; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Liquidity lock: Not locked (as of Nov 8, 2026). Total DEX liquidity: $2.45M.
As of Nov 8, 2026, the 10 largest holders own 7.5% of the supply across 47,654 holders. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
