The Orderly Network (ORDER) token mint retains active Mint and Freeze authorities, posing significant centralization risks. Third-party registries have flagged the token for metadata and symbol mismatches, and metadata remains mutable. Holder concentration and liquidity data were analyzed, though specific lock status for pool liquidity was unavailable.

On-chain security analysis — is it a scam or legit?
Is Orderly Network Safe?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →The Orderly Network (ORDER) token mint retains active Mint and Freeze authorities, posing significant centralization risks.
Read the full analysis- Freeze authority not revoked — any holder's account can be frozen
- Mintable supply — no cap found, dilution unbounded
- LP lock status UNKNOWN — the pool's LP could not be read; this pool is 94% of DEX liquidity
- Top-10 concentration > 20%
Exact factors
- Freeze authority NOT revoked — any holder's account can be frozen
- Mintable supply — no cap found, dilution unbounded
- LP lock status UNKNOWN — the pool's LP could not be read; this pool is 94% of DEX liquidity
- Top-10 concentration > 20% (91.6% total → 23.4% effective; 23.0% in EOAs, 1.1% in contracts; 67.6% burned, locked or in pools excluded)
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Oct 25Holders
as of audit · Oct 25, 2026- Contractstreasury, vesting, bridge, staking1.1%
- Walletsanonymous holders, free to sell23.0%
- DEX poolsthe pools' own liquidity67.6%
- Everyone else681 holders8.4%
How holder types affect the score
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 25, 2026
Liquidity
as of audit · Oct 25- Raydium CLMMSOLAnalysed$198.5K93.8%
- Orca wpUSDC$12.4K5.9%
- Meteora DYN2SOL$6280.3%
- Meteora DLMMUSDC$660.0%
The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
Security Findings
CriticalMint Authority Not Revoked
The mint authority is Efvf2Q…pAf7. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.C-01
Issue
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Fix
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Status
Unresolved
CriticalFreeze Authority Not Revoked
The freeze authority is Efvf2Q…pAf7. The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.C-02
Issue
The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
Fix
Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
Status
Unresolved
MediumMutable Metadata
Token name, symbol, or image can be changed post-launch as metadata_mutable is True.M-01
Issue
Token name, symbol, or image can be changed post-launch as metadata_mutable is True.
Fix
Verify metadata against off-chain expectations before trusting branding.
Status
Unresolved
MediumWhat the token's controller can do
The contract lets its controller — the freeze authority — mint new supply; freeze or blacklist individual addresses; change the token's name, symbol and image. Nothing independent vouches for whoever holds them, so each is a live risk to holders.QA-POWERS
Issue
The contract lets its controller — the freeze authority — mint new supply; freeze or blacklist individual addresses; change the token's name, symbol and image. Nothing independent vouches for whoever holds them, so each is a live risk to holders.
Fix
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Status
Acknowledged
LowThird-Party Registry Flag
Third-party risk registry signals indicate Symbol Mismatch and Name Mismatch.L-01
Issue
Third-party risk registry signals indicate Symbol Mismatch and Name Mismatch.
Fix
Cross-reference the token identity with official project documentation.
Status
Unresolved
InfoWho holds the supply
The ten largest holders own 91.6% of supply. Of that, 67.6% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 23.0% in wallets, 1.1% in other contracts. 691 holders in total.QA-HOLDERS
Issue
The ten largest holders own 91.6% of supply. Of that, 67.6% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 23.0% in wallets, 1.1% in other contracts. 691 holders in total.
Fix
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Status
Acknowledged
InfoListed, but not independently verified
Listed on CoinGecko as Orderly (ORDER), market cap $24M, rank #756. 691 holders.QA-IDENTITY
Issue
Listed on CoinGecko as Orderly (ORDER), market cap $24M, rank #756. 691 holders.
Fix
Match the contract address against the project's official channels before trading.
Status
Acknowledged
InfoThe market for this token
Liquidity $212K (DexScreener, all pools). 24h trading volume $314.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.8M (DexScreener, all pools).QA-MARKET
Issue
Liquidity $212K (DexScreener, all pools). 24h trading volume $314.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.8M (DexScreener, all pools).
Fix
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Status
Acknowledged
InfoAsset class: Project token
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $212K of DEX liquidity across 4 pools. Launch: 691 days of market history.QA-PROFILE
Issue
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $212K of DEX liquidity across 4 pools. Launch: 691 days of market history.
Fix
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Status
Acknowledged
Analysis
AI Copilotas of audit · Oct 25The token utilizes the standard spl-token program (7.1 Architecture). Access control is centralized, with both Mint and Freeze authorities held by the same address (7.3 Access Control). The mint is initialized with 10 decimals and a large supply (7.4 Economic). No transfer hooks or permanent delegates are configured (7.2 Code Security).
The top 10 holders that can sell control 24.08% of the supply (7.5 Governance). Liquidity is $201,155 with a 24h volume of $1,839,454, resulting in a volume/liquidity ratio of 9.14 (7.4 Economic). The pair has been active for 691 days (7.8 Operations). Liquidity lock status is currently unknown (7.6 External).
Metadata is mutable, allowing for potential changes to the token's branding (7.7 Upgrades). The mint and freeze authorities are not revoked, allowing for potential supply expansion or account freezing (7.3 Access Control). There is no upgrade mechanism for the token program itself, as it is a standard SPL mint (7.7 Upgrades).
Holders should monitor the Mint and Freeze authority addresses for potential revocation transactions.
Given the mutable metadata, verify the token's identity against official project channels before performing any transactions. Users should exercise caution regarding the active Freeze authority, which allows the controller to restrict token transfers. Verify the current liquidity lock status through block explorers to ensure the pool creator cannot withdraw the underlying assets.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Oct 25, 202676High
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Frequently Asked Questions
What is the ORDER contract address?
The Orderly Network (ORDER) contract on Solana is ABt79MkRXUsoHuV2CVQT32YMXQhTparKFjmidQxgiQ6E. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Is Orderly Network a scam?
Quantum Audit's risk score for Orderly Network is 76/100 (High risk) as of Oct 25, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: Mintable; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Who holds ORDER?
As of Oct 25, 2026, the 10 largest holders own 91.6% of the supply across 691 holders. The Holders section on this page shows who they are by holder type.
Would You Like a More Detailed Audit of Orderly Network?
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page