Is PETRO PENGUINS (PENGO) Safe? Smart Contract Security Analysis

PETRO PENGUINS PENGO

F2k82E…pump

Solana Not verifiedLast checked 3d ago 1 audit on record

DexScreener ↗

45 / 100

Medium Risk

Executive SummaryAI Copilot

The PETRO PENGUINS (PENGO) SPL token mint exhibits a robust security configuration with no critical or high-risk findings identified based on the provided on-chain facts and security registry data. Both the mint and freeze authorities are revoked, preventing further token issuance or account freezing. Key token parameters, including metadata and balance mutability, are set to immutable, indicating a fixed and predictable token behavior. Third-party risk registries report no adverse flags, and liquidity and trading patterns appear healthy.

1 Informational

Volume 24h

$84.8K

Liquidity

$81.3K

Price

$0.0006746

Token Age

10mo

Top 10 Holders

23.4%

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The token is implemented using the standard `spl-token` program. Both the Mint Authority and Freeze Authority are revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token's supply is fixed at 999,977,641.298566 PENGO with 6 decimals. Key extensions such as balance mutability, default account state, and metadata mutability are all set to false, indicating a secure and immutable configuration (7.3 Access Control, 7.2 Code Security).

GovernanceHigh3/10

Holder concentration is low, with the top 10 accounts holding 24.52% of the supply, reducing the risk of single-whale market manipulation (7.4 Economic). The token has moderate liquidity of $95,563 USD and a healthy 24-hour volume of $70,187 USD. The Volume/Liquidity Ratio is 0.73, which is normal and does not suggest wash trading. The DEX pair has been active for 323 days, indicating a relatively established market presence (7.4 Economic, 7.6 External).

UpgradesMedium5/10

The token's configuration is highly immutable due to the revocation of both Mint and Freeze authorities. There are no active Token-2022 extensions that would allow for post-launch changes to core token behavior, such as upgradable transfer fees or transfer hooks. Metadata is also immutable, ensuring the token's name, symbol, and image cannot be altered after deployment (7.7 Upgrades, 7.3 Access Control).

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$81.3K across 2 pairs

PumpswapSOLanalysed$81.3K Meteora DYN2SOL$2

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

5 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 20% (23.4% total → 23.4% effective; 23.4% in EOAs, 0.0% in contracts — mild)
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is PETRO PENGUINS Safe?