Quantum Audit Logo

Is Nullmask Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Nullmask MASK
HuAXPy…CUa7
Solana
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

The Nullmask (MASK) SPL Token Mint is built on the spl-token-2022 program. Key authorities such as Mint Authority and Freeze Authority have been revoked, indicating a fixed supply and unfreezable accounts. However, the token's metadata remains mutable, allowing changes to its name, symbol, or image post-launch. Holder distribution data was unavailable from chain-native RPC, preventing a full assessment of concentration risk, though a third-party registry signals high concentration.

1 Medium1 Low5 Informational
Volume 24h
$1.39M
Liquidity
$605.7K
Price
$0.02938
Token Age
8d
Top 10 Holders
0.0%

Security Findings

1 Med1 Low5 Info
Medium

Liquidity only partly locked or burned

QA-LIQUIDITY85.0% of the pool's LP is burned or time-locked. 85.0% of the pool's liquidity is locked for good in Raydium's LP locker (Burn & Earn) — only its trading fees can be collected; no one can withdraw the liquidity. 15.0% is held, unlocked, by 1 address(es) other than the pool's creator. This assessment covers the main pool, which holds 69% of the token's DEX liquidity; the other pools were not assessed.
Issue85.0% of the pool's LP is burned or time-locked. 85.0% of the pool's liquidity is locked for good in Raydium's LP locker (Burn & Earn) — only its trading fees can be collected; no one can withdraw the liquidity. 15.0% is held, unlocked, by 1 address(es) other than the pool's creator. This assessment covers the main pool, which holds 69% of the token's DEX liquidity; the other pools were not assessed.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch, as indicated by `metadata_mutable: True`.
IssueToken name, symbol, or image can be changed post-launch, as indicated by `metadata_mutable: True`.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved
Info

Listed, but not independently verified

QA-IDENTITYListed on CoinGecko as Nullmask (MASK).
IssueListed on CoinGecko as Nullmask (MASK).
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $878K (DexScreener, all pools). 24h trading volume $4.2M (CoinGecko, all markets, daily snapshot). 24h trading volume $2.8M (DexScreener, all pools).
IssueLiquidity $878K (DexScreener, all pools). 24h trading volume $4.2M (CoinGecko, all markets, daily snapshot). 24h trading volume $2.8M (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

What the token's controller can do

QA-POWERSThe contract lets its controller — nobody (ownership renounced) — change the buy/sell tax; change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
IssueThe contract lets its controller — nobody (ownership renounced) — change the buy/sell tax; change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
FixCheck who holds these powers and whether a timelock or multisig stands between them and holders.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $878K of DEX liquidity across 16 pools. Launch: 8 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $878K of DEX liquidity across 16 pools. Launch: 8 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged
Info

Recently launched — 8 days of market history

QA-RECENTThe token's oldest DEX pool is 8 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
IssueThe token's oldest DEX pool is 8 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
FixRe-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
StatusAcknowledged

Category Ratings

TechnicalLow8/10

The Nullmask (MASK) token operates on the spl-token-2022 program. Both the Mint Authority and Freeze Authority have been revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token has a Transfer Fee of 3.00% (300 bps) applied to transfers. No Transfer Hook is active, and new accounts are not created in a frozen state.

GovernanceLow8/10

The token exhibits a healthy liquidity profile with $615,521 in total DEX liquidity. The 24-hour volume of $1,405,412 results in a normal Volume/Liquidity Ratio of 2.28, not indicating wash trading. A significant 85.0% of the pool's liquidity is locked for good in Raydium's LP locker, with 0.0% withdrawable by the pool's creator. Holder concentration data from chain-native RPC was unavailable, but a third-party risk registry signals high holder concentration.

UpgradesLow7/10

The Mint Authority and Freeze Authority are both revoked, preventing further changes to supply or account freezing capabilities. While the token leverages the Token-2022 program, its Transfer Hook is not active and cannot be upgraded. The Transfer Fee is upgradable, and the token's metadata, including name, symbol, or image, remains mutable, allowing for post-launch changes.

Security Checklist

3/4 checks passed
Contract VerifiedPass
No Mint FunctionPass
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$878.1K across 16 pairs
Raydium CPMMZECanalysed$605.7K69.0%Meteora DLMMSOL$148.0K16.9%Raydium CLMMSOL$38.6K4.4%Raydium CPMMMASKCAT$38.1K4.3%Raydium CPMMV$17.5K2.0%Raydium CPMMMINU$12.2K1.4%
Show 4 more pairsShow less
Meteora DLMMUSDC$5.0K0.6%Meteora DLMMSOL$4.0K0.5%Meteora DLMMSOL$3.6K0.4%Meteora DLMMUSDC$3.4K0.4%

The 6 remaining pairs hold $2.0K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

Key Addresses

1 addresses
Unlocked LP Held By
FrXTvk…P5xJ

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

3 factors
  • Owner can change the buy/sell tax
  • Liquidity NOT locked (15% of the pool; this pool is 69% of DEX liquidity) — held by independent providers — market-depth risk
  • Transfer Fee 3.0% but upgradeable (can be raised)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
Football Capital Markets (FCM)Medium RiskDogeus Maximus (DOGEUS)Medium RiskSPCX69Medium RiskBatCatMedium RiskPump Guy (PUMPGUY)Medium RiskMario64Medium Risk

Would You Like a More Detailed Audit of Nullmask?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit