Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is PETRO PENGUINS Safe?

PENGOSolana
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Sep 22, 2026 · 2 audits on record
SummaryAI Copilot

The PETRO PENGUINS (PENGO) SPL token mint exhibits a robust security configuration with no critical or high-risk findings identified based on the provided on-chain facts and security registry data.

Read the full analysis
What raised the score
  • Top-10 concentration > 20%
Exact factors
  • Top-10 concentration > 20% (23.0% total → 23.0% effective; 23.0% in EOAs, 0.0% in contracts — mild)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Sep 226 of 6 checks passed
Contract verifiedVerified
MintNo mint
Liquidity lockLocked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Sep 22, 2026
23.0%Top 10 holders77.0%Everyone else
23.0%Top 10 holders77.0%Everyone else
Top 10 holdersEveryone elseBubble area = share of supply
23.0%of supply sits with the top 10 holders
  • Top 10 holdersthe ten largest balances23.0%
  • Everyone elsethe rest of the supply77.0%

Holder balances as recorded by the audit of Sep 22, 2026

Liquidity

as of audit · Sep 22$88.4K across 2 pairs

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$88.4KShare of depth100.0%

Security Findings

1 Info
Info

No code-level findings — an SPL mint exposes no auditable program source

This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.I-01

Issue

This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

Fix

Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

Status

Acknowledged

Analysis

AI Copilotas of audit · Sep 22
Executive SummaryWhat the contract is and what the review found

The PETRO PENGUINS (PENGO) SPL token mint exhibits a robust security configuration with no critical or high-risk findings identified based on the provided on-chain facts and security registry data. Both the mint and freeze authorities are revoked, preventing further token issuance or account freezing. Key token parameters, including metadata and balance mutability, are set to immutable, indicating a fixed and predictable token behavior. Third-party risk registries report no adverse flags, and liquidity and trading patterns appear healthy.

Technical10/10Low risk

The token is implemented using the standard spl-token program. Both the Mint Authority and Freeze Authority are revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token's supply is fixed at 999,977,641.298566 PENGO with 6 decimals. Key extensions such as balance mutability, default account state, and metadata mutability are all set to false, indicating a secure and immutable configuration (7.3 Access Control, 7.2 Code Security).

Governance10/10Low risk

Holder concentration is low, with the top 10 accounts holding 24.52% of the supply, reducing the risk of single-whale market manipulation (7.4 Economic). The token has moderate liquidity of $95,563 USD and a healthy 24-hour volume of $70,187 USD. The Volume/Liquidity Ratio is 0.73, which is normal and does not suggest wash trading. The DEX pair has been active for 323 days, indicating a relatively established market presence (7.4 Economic, 7.6 External).

Upgrades10/10Low risk

The token's configuration is highly immutable due to the revocation of both Mint and Freeze authorities. There are no active Token-2022 extensions that would allow for post-launch changes to core token behavior, such as upgradable transfer fees or transfer hooks. Metadata is also immutable, ensuring the token's name, symbol, and image cannot be altered after deployment (7.7 Upgrades, 7.3 Access Control).

Final RecommendationWhat to do about this score

Holders should independently verify on-chain that the mint and freeze authorities for the token mint address remain revoked.

This ensures the token's supply is fixed and accounts cannot be frozen. Monitor the token's liquidity and daily trading volume on DEXs for any significant fluctuations that could affect market stability or exit opportunities. Periodically check independent third-party risk registries for any new flags or warnings that may arise concerning the token or its associated project.

Contract & Record

2 audits on record
TypeSPL Token v3
NetworkSolana
Token age10mo
ContractF2k82E…pump
Badge for your website
PETRO PENGUINS security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Sep 22, 20260Low
  2. Sep 4, 202645Medium
  3. Aug 30, 202633Low

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Would You Like a More Detailed Audit of PETRO PENGUINS?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page