Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is NEXST Safe?

NXTBNB Chain
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 16, 2026 · 1 audit on record
Chart
High RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical6/10Governance2/10Upgrades3/10Checks passed4 of 7Findings1 High · 3 Medium · 3 Info7
SummaryAI Copilot

The NEXST token contract implements standard ERC-20 functionality with additional features like pausing, blacklisting, and minting.

Read the full analysis
What raised the score
  • Owner can pause all transfers
  • Owner can blacklist or freeze individual holders
  • Mintable supply — no cap found, dilution unbounded
  • Liquidity not locked
  • Top-10 concentration > 30%
Exact factors
  • Owner can pause all transfers
  • Owner can blacklist or freeze individual holders
  • Mintable supply — no cap found, dilution unbounded
  • Liquidity NOT locked (100% of the pool) — who holds it cannot be verified
  • Top-10 concentration > 30% (100.0% total → 40.0% effective; 0.0% in EOAs, 100.0% in contracts; deployer/owner holds 24.2%)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 164 of 7 checks passed
Contract verifiedVerified
OwnershipRetained
MintMintable
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 16, 20261 holders
100.0%Contracts
100.0%Contracts
ContractsBubble area = share of supply
100.0%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking100.0%
Effective concentrationwhat the score reads40.0%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 16, 2026

Liquidity

as of audit · Oct 16$813.9K

The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$813.9KShare of depth100.0%

Security Findings

1 High3 Medium3 Info
High

Who holds the supply

The ten largest holders own 100.0% of supply. What remains: 0.0% in wallets, 100.0% in other contracts. The deployer/owner wallet itself holds 24.2%. A holder that also controls the contract can sell into its own liquidity. 1 holders in total.QA-HOLDERS

Issue

The ten largest holders own 100.0% of supply. What remains: 0.0% in wallets, 100.0% in other contracts. The deployer/owner wallet itself holds 24.2%. A holder that also controls the contract can sell into its own liquidity. 1 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Medium

Centralized Minting Capability

A specific role has the power to create new NEXST tokens at any time by calling the mint(address,uint256) function. This means the total supply of NEXST tokens can be increased arbitrarily, which could dilute the value of existing tokens held by others.CP-01

Issue

A specific role has the power to create new NEXST tokens at any time by calling the mint(address,uint256) function. This means the total supply of NEXST tokens can be increased arbitrarily, which could dilute the value of existing tokens held by others.

Fix

Token holders should be aware that the supply of NEXST tokens is not fixed and can be increased by the designated MINTER_ROLE. The project team should clearly communicate the policies and circumstances under which new tokens will be minted.

Status

Unresolved

Medium

Centralized Transfer Pause

The contract owner has the ability to temporarily stop all NEXST token transfers by calling the pause() function. They can also resume transfers using unpause(). This means the owner can prevent token holders from moving or selling their tokens at any time, potentially impacting liquidity and market access.CP-04

Issue

The contract owner has the ability to temporarily stop all NEXST token transfers by calling the pause() function. They can also resume transfers using unpause(). This means the owner can prevent token holders from moving or selling their tokens at any time, potentially impacting liquidity and market access.

Fix

Token holders should understand that their ability to transfer NEXST tokens can be halted by the contract owner. The project team should establish and communicate clear policies for when and why the pause functionality would be used, and ideally, implement a timelock for such critical actions.

Status

Unresolved

Medium

Centralized Blacklisting Capability

The contract owner can prevent specific addresses from transferring or receiving NEXST tokens by adding them to a blacklist using the setBlacklist(address,bool) function. This allows the owner to freeze funds or restrict access for individual token holders without their consent.CP-06

Issue

The contract owner can prevent specific addresses from transferring or receiving NEXST tokens by adding them to a blacklist using the setBlacklist(address,bool) function. This allows the owner to freeze funds or restrict access for individual token holders without their consent.

Fix

Token holders should be aware that their address can be blacklisted by the contract owner, preventing them from interacting with their NEXST tokens. The project team should provide transparent guidelines on the criteria for blacklisting and consider mechanisms for dispute resolution.

Status

Unresolved

Info

Listed, but not independently verified

Listed on CoinGecko as NEXST (NXT), market cap $13M, rank #1082. 1 holders.QA-IDENTITY

Issue

Listed on CoinGecko as NEXST (NXT), market cap $13M, rank #1082. 1 holders.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $814K (DexScreener, all pools). 24h trading volume $2.3M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.4M (DexScreener, all pools).QA-MARKET

Issue

Liquidity $814K (DexScreener, all pools). 24h trading volume $2.3M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.4M (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a 3-of-5 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $814K of DEX liquidity across 1 pools. Launch: 157 days of market history.QA-PROFILE

Issue

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a 3-of-5 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $814K of DEX liquidity across 1 pools. Launch: 157 days of market history.

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 16
Executive SummaryWhat the contract is and what the review found

The NEXST token contract implements standard ERC-20 functionality with additional features like pausing, blacklisting, and minting. It leverages OpenZeppelin's AccessControl and Ownable for managing permissions. The contract exhibits a high degree of centralized control, with specific roles or the owner able to mint new tokens, pause all transfers, and blacklist individual addresses. These centralized powers, while managed by a multisig owner, introduce potential economic and operational risks.

Technical6/10Medium risk

The NEXST token contract is built upon robust OpenZeppelin standards, inheriting from ERC20, Pausable, ERC20Capped, ERC20Burnable, and AccessControl. This provides a solid foundation for token operations and access management (7.1 Architecture). Key functions like mint, pause, unpause, setBlacklist, and rescueTokens are appropriately restricted to specific roles or the contract owner, demonstrating a structured approach to permissions (7.3 Access Control). However, the centralized control over these critical functions, such as the ability to mint new tokens (7.2 Code Security) and pause all transfers (7.8 Operations), introduces technical risks if the controlling keys are compromised or misused.

Governance2/10High risk

The economic model of the NEXST token is significantly influenced by centralized governance. The ability for a privileged role to mint new tokens (7.4 Economic) allows for arbitrary supply inflation, potentially diluting existing token holders. Furthermore, the owner's power to pause all token transfers and setBlacklist individual addresses (7.4 Economic, 7.5 Governance) grants substantial control over the token's liquidity and user access. While the owner is a 3/5 multisig, which enhances security against a single point of failure, these centralized powers still represent a considerable governance and economic risk.

Upgrades3/10High risk

The NEXST token contract is not designed as an upgradeable proxy (7.7 Upgrades), meaning its logic cannot be modified after deployment. This eliminates upgrade-related risks such as proxy misconfigurations or malicious upgrade implementations. However, it also means that any discovered vulnerabilities or desired feature changes would necessitate a new contract deployment and a token migration process.

Final RecommendationWhat to do about this score

It is crucial for token holders to understand the significant centralized control inherent in the NEXST token contract.

The project team should clearly communicate the operational policies and security measures surrounding the multisig owner and the MINTER_ROLE to ensure transparency. Consider implementing a timelock for critical administrative actions like minting or pausing to provide a window for community review and reaction. Additionally, explore options for progressive decentralization of these powers over time, such as integrating a community governance mechanism for key decisions, to reduce reliance on a centralized entity.

Contract & Record

1 audit on record
TypeToken
NetworkBNB Chain
Token age5mo
Contract0xae74…16c1
Deployer0x907a…6cd6
Audit History
  1. Oct 16, 202666High

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Related Audits

6 more on the recordAll audits
XPULSBNB Chain66HighHana TokenHANA · BNB Chain66HighUpstartyUPY · BNB Chain66HighOrizonORI · BNB Chain66High牛来NIULAI · BNB Chain66HighRandyBNB Chain66High

Would You Like a More Detailed Audit of NEXST?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page