On-chain security analysis — is it a scam or legit?
SolanaThe NVIDIA xStock (NVDAx) token mint has critical security risks due to unrevoked mint, freeze, and permanent delegate authorities, allowing the issuer to control supply and user funds.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The 12 remaining pairs hold $4.8K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
Unresolved
has permanent delegate authority and can transfer any holder's tokens without consent.
Treat this token as fully custodial.
Unresolved
Top 10 token accounts hold 82.03% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
Account for the risk of significant price volatility due to concentrated holdings.
Unresolved
A balance-mutating authority can adjust user balances.
Understand the implications of an authority being able to modify user balances, as this grants significant control over token holdings.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The NVIDIA xStock (NVDAx) token mint has critical security risks due to unrevoked mint, freeze, and permanent delegate authorities, allowing the issuer to control supply and user funds. Additionally, holder concentration is very high, and metadata and balances can be mutated. Third-party registry data confirms these enabled controls.
The token is an SPL Token-2022 mint. It has a Mint Authority at , allowing unlimited new token creation. A Freeze Authority at can freeze any holder's account. Critically, a Permanent Delegate is configured at , enabling transfers of user funds without consent. The balance_mutable flag is also true, indicating an authority can adjust user balances.
Holder concentration is very high, with the top 10 token accounts holding 82.03% of the total supply, posing a significant risk of price manipulation or sudden sell-offs. Liquidity is substantial at $2,494,680, and the 24-hour volume of $1,991,949 results in a normal Volume/Liquidity Ratio of 0.80. The DEX pair has been active for 405 days, indicating a mature market presence.
The token's core authorities, including Mint Authority, Freeze Authority, and Permanent Delegate, remain unrevoked, granting the issuer extensive control over the token's supply and user funds. While the Token-2022 program allows for extensions, no Transfer Hook is active, and the default account state is not frozen. However, the metadata_mutable flag is true, meaning the token's name, symbol, or image can be altered post-launch.
Before any interaction, verify on-chain that the Mint Authority, Freeze Authority, and Permanent Delegate have been revoked to ensure the supply is fixed and funds are secure from issuer control.
Monitor the top holder accounts for any significant movements that could impact market stability. Be aware that token metadata can be changed, so confirm branding against official sources periodically.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The NVIDIA xStock (NVDAX) contract on Solana is Xsc9qvGR1efVDFGLrVsmkzv3qi45LTBjeUKSPmx9qEh. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for NVIDIA xStock is 100/100 (Critical risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: Mintable; Upgradeability: Fixed code. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
As of Sep 22, 2026, the 10 largest holders own 80.7% of the supply. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
