Early-stage security check — honeypot & rug-pull analysis
SolanaThe Pepe Bonk (PONK) SPL Token Mint exhibits a robust security posture with no critical or high-risk findings identified.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 17, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.
Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.
Acknowledged
The ten largest holders own 55.7% of supply. Of that, 26.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 29.7% in wallets, 0.0% in other contracts. 583 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
583 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the pool's LP tokens are burned — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $16K (DexScreener, all pools). 24h trading volume $70K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: meme vocabulary in name/ticker (bonk, pepe); launched on pump.fun, a meme launchpad. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $16K of DEX liquidity across 7 pools. Launch: launched on pump.fun, 2 days of market history.
Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
Acknowledged
The token's oldest DEX pool is 2 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The Pepe Bonk (PONK) SPL Token Mint exhibits a robust security posture with no critical or high-risk findings identified. Key authorities such as Mint and Freeze are revoked, and liquidity is fully burned, indicating a secure and immutable state. Third-party risk registries reported no adverse flags, and all available sources indicate a low-risk profile.
The Pepe Bonk (PONK) token is implemented using the spl-token-2022 program. Both the Mint Authority and Freeze Authority have been revoked, ensuring no new tokens can be minted and no accounts can be frozen post-launch. No Token-2022 extensions like Transfer Hook or Default Account State Frozen are active, simplifying its behavior. The token's balance_mutable and closable flags are set to False, preventing unauthorized balance adjustments or account closures.
Holder concentration is low, with the top 10 holders that can sell controlling only 29.67% of the supply, reducing the risk of large-scale dumps. The token benefits from strong liquidity provisions, with 100.0% of the pool's LP tokens burned, ensuring that liquidity cannot be withdrawn by any party. Current DEX liquidity stands at $16,061, with a healthy 24-hour volume of $70,430, resulting in a normal Volume/Liquidity Ratio of 4.39.
The token's immutability is reinforced by the revocation of both Mint and Freeze authorities, preventing any post-deployment changes to supply or account states. Furthermore, the metadata_mutable flag is set to False, ensuring that the token's name, symbol, or image cannot be altered. No Token-2022 extensions that allow for upgradability of transfer fees or transfer hooks are active, contributing to a fixed and predictable token behavior.
Given the strong security posture, holders should verify on-chain that the Mint and Freeze authorities remain revoked.
Monitor the token's trading activity and liquidity levels, although the current setup with burned LP tokens significantly mitigates liquidity rug pull risks. No further specific actions are required regarding mutable authorities or extensions, as they are either revoked or not present.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page
