Quantum Audit Logo

Is Permission-less Lending Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Permission-less Lending MAGPIE
9UuLsJ…pump
Solana Not verifiedLast checked 3d ago 1 audit on record
Executive SummaryAI Copilot

This audit of the Permission-less Lending (Magpie) SPL Token Mint found no critical or high-severity issues based on the provided on-chain facts and external security signals. The mint authority and freeze authority are both revoked, indicating a fixed supply and immutable token accounts. Holder distribution data from chain-native RPC was unavailable, but third-party signals indicate moderate concentration. No adverse flags were reported by a third-party risk registry.

1 Informational
Volume 24h
$20.3K
Liquidity
$41.6K
Price
$0.0001059
Token Age
2mo
Top 10 Holders
46.0%

Security Findings

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.
IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.
FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.
StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The Permission-less Lending (Magpie) token is an SPL Token-2022 mint. Its mint authority is revoked, ensuring no new tokens can be created, fixing the total supply at 989,083,293.190903 tokens with 6 decimals. The freeze authority is also revoked, preventing any individual token accounts from being frozen. The token does not utilize a transfer hook, nor is the default account state frozen, ensuring standard transfer behavior. No balance mutability or non-transferable extensions are active.

GovernanceHigh2/10

The token exhibits a moderate holder concentration, with the top 10 accounts holding 36.52% of the total supply, which is below the threshold for high concentration. Total DEX liquidity stands at $69,927, with a 24-hour trading volume of $110,166. The volume-to-liquidity ratio is 1.58, which is considered normal and does not suggest wash trading. The DEX pair has been active for 74 days, providing a reasonable track record.

UpgradesMedium5/10

The mint authority and freeze authority for the Permission-less Lending (Magpie) token are both revoked, meaning these critical controls cannot be re-enabled or transferred. The token is built on the spl-token-2022 program but does not have a transfer hook or default account state frozen. Furthermore, its metadata is immutable, preventing changes to the token's name, symbol, or image post-launch. There are no upgradable features like transfer fee or transfer hook upgradability enabled.

Security Checklist

Contract VerifiedFail
No Mint Function?
Liquidity LockedFail
Not a ProxyPass

Liquidity Depth

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

  • Ownership status UNKNOWN (owner could not be resolved)
  • Mint capability UNKNOWN (implementation ABI unreadable)
  • Contract source NOT verified
  • Top-10 concentration > 30% (46.0% total → 46.0% effective; 46.0% in EOAs, 0.0% in contracts — moderate)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

SpaceX (SPCX)High RiskChinese Digital Oil Fund (CDOF)High RiskPump.fun (PUMP)High RiskAI Rig Complex (ARC)High RiskThe Original Doge (OGDOGE)High RiskPippinHigh Risk

Would You Like a More Detailed Audit of Permission-less Lending?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit