Quantum Audit Logo

Is NVIDIA xStock Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

NVIDIA xStock NVDAX
Xsc9qv…9qEh
Solana Not verifiedLast checked 3d ago 1 audit on record
DexScreener ↗
How is this score calculated? → Critical Risk
Executive SummaryAI Copilot

The NVIDIA xStock (NVDAx) token mint has critical security risks due to unrevoked mint, freeze, and permanent delegate authorities, allowing the issuer to control supply and user funds. Additionally, holder concentration is very high, and metadata and balances can be mutated. Third-party registry data confirms these enabled controls.

3 Critical1 High1 Medium1 Low
Volume 24h
$581.7K
Liquidity
$1.83M
Price
$230.3300
Token Age
1y
Top 10 Holders
81.4%

Security Findings

3 Crit1 High1 Med1 Low
Critical

Mint Authority Not Revoked

C-01The mint authority is 7pt9tk…taCj. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
FixVerify on-chain that the mint authority is set to null before treating supply as fixed.
StatusUnresolved
Critical

Freeze Authority Not Revoked

C-02The freeze authority is JDq14B…xJNs. The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
IssueThe freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
FixAvoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
StatusUnresolved
Critical

Permanent Delegate Configured

C-035aMNNL…FvEq has permanent delegate authority and can transfer any holder's tokens without consent.
Issue has permanent delegate authority and can transfer any holder's tokens without consent.
FixTreat this token as fully custodial.
StatusUnresolved
High

Holder Concentration > 70%

H-01Top 10 token accounts hold 82.03% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
IssueTop 10 token accounts hold 82.03% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
FixAccount for the risk of significant price volatility due to concentrated holdings.
StatusUnresolved
Medium

Balance Mutability Authority

M-01A balance-mutating authority can adjust user balances.
IssueA balance-mutating authority can adjust user balances.
FixUnderstand the implications of an authority being able to modify user balances, as this grants significant control over token holdings.
StatusUnresolved
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch.
IssueToken name, symbol, or image can be changed post-launch.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalHigh1/10

The token is an SPL Token-2022 mint. It has a Mint Authority at , allowing unlimited new token creation. A Freeze Authority at can freeze any holder's account. Critically, a Permanent Delegate is configured at , enabling transfers of user funds without consent. The `balance_mutable` flag is also true, indicating an authority can adjust user balances.

GovernanceHigh1/10

Holder concentration is very high, with the top 10 token accounts holding 82.03% of the total supply, posing a significant risk of price manipulation or sudden sell-offs. Liquidity is substantial at $2,494,680, and the 24-hour volume of $1,991,949 results in a normal Volume/Liquidity Ratio of 0.80. The DEX pair has been active for 405 days, indicating a mature market presence.

UpgradesHigh1/10

The token's core authorities, including Mint Authority, Freeze Authority, and Permanent Delegate, remain unrevoked, granting the issuer extensive control over the token's supply and user funds. While the Token-2022 program allows for extensions, no Transfer Hook is active, and the default account state is not frozen. However, the `metadata_mutable` flag is true, meaning the token's name, symbol, or image can be altered post-launch.

Security Checklist

1/4 checks passed
Contract VerifiedFail
No Mint Function?
Liquidity LockedFail
Not a ProxyPass

Liquidity Depth

$2.21M across 17 pairs
Raydium CLMMUSDCanalysed$1.83M82.7%Raydium CLMMUSDC$167.8K7.6%Orca wpUSDC$136.6K6.2%Raydium CLMMSOL$44.3K2.0%Raydium CLMMTSLAx$7.5K0.3%Orca wpSKHY$6.7K0.3%
Show 4 more pairsShow less
Orca wpSOL$4.8K0.2%Orca wpUSDC$4.0K0.2%Meteora DLMMSOL$3.9K0.2%Raydium CLMMUSDC$3.0K0.1%

The 7 remaining pairs hold $2.2K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

10 factors
  • Ownership status UNKNOWN (owner could not be resolved)
  • Mint capability UNKNOWN (implementation ABI unreadable)
  • Contract source NOT verified
  • Top-10 concentration > 70% (81.4% total → 81.4% effective; 81.4% in EOAs, 0.0% in contracts — extreme)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • 3 Critical finding(s) from audit
  • 1 High finding(s) from audit
  • 1 Medium finding(s) from audit
  • 1 Low finding(s) from audit
  • Permanent Delegate set (any holder's tokens can be burned)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
Backpack (BP)Critical RiskCash Cat (CASHCAT)Critical RiskNO ONE CARES (KIM)Critical RiskMoon Doge Coin (MOONDOGECOIN)Critical RiskZazuCritical RiskCircle xStock (CRCLX)Critical Risk

Would You Like a More Detailed Audit of NVIDIA xStock?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit