The Mushu (MUSHU) SPL token mint audit found no critical or high-severity issues based on available on-chain data and external security signals. Both mint and freeze authorities are revoked, indicating a fixed supply and unfreezable accounts. Holder concentration for the top 10 accounts is moderate, and third-party risk registry data reported no adverse flags.

On-chain security analysis — is it a scam or legit?
Is Mushu Safe?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →The Mushu (MUSHU) SPL token mint audit found no critical or high-severity issues based on available on-chain data and external security signals.
Read the full analysis- Top-10 concentration > 30%
- Liquidity not locked
Exact factors
- Top-10 concentration > 30% (46.2% total → 46.2% effective; 46.2% in EOAs, 0.0% in contracts — moderate)
- Liquidity NOT locked (owner can withdraw — rug-pull risk)
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Sep 22Holders
as of audit · Sep 22, 2026- Top 10 holdersthe ten largest balances46.2%
- Everyone elsethe rest of the supply53.8%
Holder balances as recorded by the audit of Sep 22, 2026
Liquidity
as of audit · Sep 22The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
Security Findings
InfoNo code-level findings — an SPL mint exposes no auditable program source
This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.I-01
Issue
This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.
Fix
Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.
Status
Acknowledged
Analysis
AI Copilotas of audit · Sep 22The Mushu (MUSHU) token operates on the spl-token program. Its mint authority is revoked (None), preventing further token creation and ensuring a fixed supply. The freeze authority is also revoked (None), meaning no entity can freeze token holder accounts. The token does not utilize advanced Token-2022 extensions such as permanent delegates, transfer hooks, or default frozen account states, as indicated by default_account_state_frozen: False and balance_mutable: False (7.1 Architecture, 7.3 Access Control).
The token exhibits moderate liquidity with $368,704 USD available on DEXs. The 24-hour volume of $1,120,443 USD results in a Volume/Liquidity Ratio of 3.04, which is within normal ranges and does not suggest wash trading. Holder concentration shows the top 10 accounts hold 31.51% of the supply, which is below thresholds for high concentration risk. The DEX pair has been active for 769 days, providing a long track record (7.4 Economic, 7.5 Governance).
The Mushu (MUSHU) token mint has both its mint authority and freeze authority revoked, meaning its core parameters related to supply and account freezing are immutable. The metadata_mutable flag is False, indicating that the token's name, symbol, or image cannot be changed post-launch. The token does not have upgradable transfer fees or transfer hooks, as transfer_fee_upgradable: False and transfer_hook_upgradable: False (7.7 Upgrades).
Holders should verify on-chain that the mint and freeze authorities remain revoked to ensure the token's fixed supply and unfreezable nature.
Monitor for any changes in liquidity or trading patterns that could indicate market manipulation. While no adverse flags were reported by a third-party registry, continuous due diligence on the project's ecosystem and community is advisable.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Sep 22, 20260Low
- Aug 11, 202629Low
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Frequently Asked Questions
What is the MUSHU contract address?
The Mushu contract on Solana is 5Jr9hGmJgxBRjjF8XGcGgQzXUdsbpZNNMpigEv8Wpump. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Is Mushu a scam?
Quantum Audit's risk score for Mushu is 0/100 (Low risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: No mint; Liquidity lock: Not locked; Upgradeability: Fixed code. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Is MUSHU liquidity locked?
Liquidity lock: Not locked (as of Sep 22, 2026). Total DEX liquidity: $268.6K.
Who holds MUSHU?
As of Sep 22, 2026, the 10 largest holders own 46.2% of the supply. The Holders section on this page shows who they are by holder type.
Would You Like a More Detailed Audit of Mushu?
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page