Quantum Audit Logo

Is NIGHT Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

NIGHT NIGHT
0xfe93…224f
BNB Chain
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → High Risk
Executive SummaryAI Copilot

The WrappedToken contract is an ERC-20 token with standard functionalities and additional minting capabilities. Ownership is retained by an OZ_ProxyAdmin address, allowing centralized control over key administrative functions. The audit identified a high-severity issue related to shadowing state and a medium-severity issue concerning the owner's ability to mint new tokens, which could lead to token dilution.

1 High2 Medium4 Informational
Volume 24h
$393.6K
Liquidity
$45.9K
Price
$0.05021
Token Age
9mo
Top 10 Holders
90.3%

Security Findings

1 High2 Med4 Info
High

Potential for unexpected behavior due to shadowed state variables.

CD-01The contract contains a 'shadowing state' issue. This means that a variable in the contract might have the same name as a variable in an inherited contract, potentially leading to confusion or unexpected behavior when the contract attempts to access or modify these variables. This could cause functions to operate differently than intended, impacting the reliability and security of the token.
IssueThe contract contains a 'shadowing state' issue. This means that a variable in the contract might have the same name as a variable in an inherited contract, potentially leading to confusion or unexpected behavior when the contract attempts to access or modify these variables. This could cause functions to operate differently than intended, impacting the reliability and security of the token.
FixToken holders should be aware that this technical issue could lead to unpredictable contract behavior. It is recommended that the contract developers resolve this by renaming the conflicting variables to ensure clarity and prevent any unintended interactions within the contract's logic.
StatusUnresolved
Medium

Owner can create new tokens, diluting existing holders.

CP-01The `mint` function allows the contract owner to create an unlimited number of new tokens and assign them to any address. This capability, restricted to the owner and `onlyMeaningfulValue`, means that the total supply of the token can be arbitrarily increased at any time. This action would dilute the value of all existing token holders without their consent.
IssueThe `mint` function allows the contract owner to create an unlimited number of new tokens and assign them to any address. This capability, restricted to the owner and `onlyMeaningfulValue`, means that the total supply of the token can be arbitrarily increased at any time. This action would dilute the value of all existing token holders without their consent.
FixToken holders should be aware that the contract owner has the power to increase the token supply. To mitigate this risk, consider advocating for the owner to renounce the minting capability if it's not essential for the token's long-term utility, or to implement a community-governed mechanism for minting decisions.
StatusUnresolved
Medium

Liquidity not locked

QA-LIQUIDITY0.0% of the pool's LP is burned or time-locked. 88.6% is held, unlocked, by 10 address(es) other than the owner/deployer. One of them — a wallet, 0xf949…0298 — holds 61.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 61% of the token's DEX liquidity; the other pools were not assessed.
Issue0.0% of the pool's LP is burned or time-locked. 88.6% is held, unlocked, by 10 address(es) other than the owner/deployer. One of them — a wallet, 0xf949…0298 — holds 61.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 61% of the token's DEX liquidity; the other pools were not assessed.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 90.3% of supply. What remains: 65.6% in wallets, 24.7% in other contracts. 15,416 holders in total.
IssueThe ten largest holders own 90.3% of supply. What remains: 65.6% in wallets, 24.7% in other contracts. 15,416 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Identity verified by independent sources

QA-IDENTITYListed on CoinGecko as Midnight (NIGHT), market cap $831M, rank #86. 15,416 holders. Verified by: CoinGecko.
IssueListed on CoinGecko as Midnight (NIGHT), market cap $831M, rank #86. 15,416 holders. Verified by: CoinGecko.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $75K (DexScreener, all pools). 24h trading volume $116.7M (CoinGecko, all markets, daily snapshot). 24h trading volume $573K (DexScreener, all pools).
IssueLiquidity $75K (DexScreener, all pools). 24h trading volume $116.7M (CoinGecko, all markets, daily snapshot). 24h trading volume $573K (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a ProxyAdmin contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $75K of DEX liquidity across 17 pools. Launch: 298 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a ProxyAdmin contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $75K of DEX liquidity across 17 pools. Launch: 298 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The contract implements the ERC-20 standard, including `transfer` and `transferFrom` functions, which operate as expected (7.2 Code Security). Ownership is managed via Ownable, allowing the owner to control administrative functions like `mint` and `update` (7.3 Access Control). A high-severity issue (CD-01) was identified regarding shadowing state, which can lead to unexpected behavior or vulnerabilities. Additionally, the `mint` function, restricted to the owner, allows for arbitrary token creation (CP-01), posing a technical risk.

GovernanceHigh1/10

The contract exhibits a centralized governance model, with an `OZ_ProxyAdmin` address retaining full ownership (7.5 Governance). This owner has the power to `mint` new tokens (CP-01), which directly impacts the token's total supply and can dilute existing token holders, presenting a significant economic risk (7.4 Economic). The owner can also `update` the token's name and symbol, and `transferOwner` to a new address, maintaining full control over the token's administrative state.

UpgradesMedium4/10

The WrappedToken contract is not deployed as a proxy (7.1 Architecture) and therefore does not have an upgrade mechanism (7.7 Upgrades). This means the contract's logic is immutable once deployed, preventing future modifications or bug fixes without a complete redeployment. While this eliminates upgrade-related risks, it also removes flexibility for future enhancements or addressing unforeseen issues.

Security Checklist

2/5 checks passed
Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionFail
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

90.3% in top 10
65.6% in wallets24.7% in contracts
Effective Concentration75.5%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$74.7K across 17 pairs
UniswapUSDTanalysed$45.9K61.4%UniswapUSDT$11.3K15.1%Pancakeswap v3WBNB$5.6K7.5%Pancakeswap v3BALDOR$4.1K5.4%Pancakeswap v3TrumpBucks$1.9K2.5%UniswapGALIA$1.6K2.2%
Show 4 more pairsShow less
Pancakeswap v3GALIA$1.5K2.0%UniswapNASF$1.2K1.6%Pancakeswap v3U$4760.6%Pancakeswap v3GRUP$4630.6%

The 7 remaining pairs hold $748 between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

Top-1 Unlocked Holder61.0%
Top-3 Unlocked73.8%

Key Addresses

11 addresses
Deployer
0x2fb4…5200
Unlocked LP Held By
0xf949…02980x3262…f28a0x765f…385c0x7243…f8fe0x61cb…fb780x570b…afc10xba24…c8ec0xa1da…bd310x5eee…d8e80xb5f6…7d8e

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

5 factors
  • Owner can change any holder's balance (seize or credit tokens)
  • Mintable supply — no cap found, dilution unbounded
  • Liquidity NOT locked (100% of the pool; this pool is 61% of DEX liquidity) — held by independent providers — market-depth risk
  • Top-10 concentration > 70% (90.3% total → 75.5% effective; 65.6% in EOAs, 24.7% in contracts)
  • Code: Potential for unexpected behavior due to shadowed state variables. (High, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
PancakeSwap Token (CAKE)High RiskSubsquid (SQD)High RiskBOBHigh RiskAnoma (XAN)High RiskelizaOSHigh RiskPlasma (XPL)High Risk

Would You Like a More Detailed Audit of NIGHT?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit