Early-stage security check — honeypot & rug-pull analysis
SolanaThe playboicarti (carti) token is a Token-2022 asset with revoked mint and freeze authorities, providing a secure foundation regarding supply control.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
How the supply is spread across holders could not be read — the indexer's holder list does not add up to the supply. Check the largest holders on a block explorer, which reads current balances.
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The 24-hour volume of $4,077,248 relative to $10,689 in liquidity results in a ratio of 381.45, which is significantly higher than the 20x threshold for suspicious trading patterns.
Exercise extreme caution; high volume-to-liquidity ratios are often indicative of wash trading or automated bot activity designed to inflate perceived interest.
Unresolved
Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the pool's LP tokens are burned — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $11K (DexScreener, all pools). 24h trading volume $4.1M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: launched on pump.fun, a meme launchpad. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $11K of DEX liquidity across 28 pools. Launch: launched on pump.fun, under a day of market history.
Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
Acknowledged
The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The playboicarti (carti) token is a Token-2022 asset with revoked mint and freeze authorities, providing a secure foundation regarding supply control. However, the token exhibits a high volume-to-liquidity ratio, suggesting potential wash trading, and holder concentration data is currently unavailable. Third-party risk registry data indicates no adverse flags.
The token utilizes the Token-2022 program with no active transfer hooks or frozen account states. 7.1 Architecture and 7.2 Code Security are standard for SPL mints, as the mint and freeze authorities are both revoked. 7.3 Access Control is effectively nullified by the revocation of administrative keys, ensuring no further supply inflation or account freezing is possible.
7.4 Economic and 7.5 Governance metrics are impacted by a volume/liquidity ratio of 381.45, which significantly exceeds the 20x threshold for wash-trading signals. While 100% of pool liquidity is burned, ensuring 7.6 External safety against rug-pulls via liquidity withdrawal, the lack of holder distribution data prevents a full assessment of concentration risks.
7.7 Upgrades and 7.8 Operations are stable as the token metadata is immutable and no upgradeable extensions are present. The mint address is fixed, and the absence of mutable balance or metadata authorities ensures that the token's core parameters cannot be altered post-launch.
Investors should exercise caution regarding the high trading volume relative to the $10,689 liquidity pool, as this often indicates artificial market activity.
Monitor the token on-chain to verify that no new extensions are added if the program allows, though current settings are immutable. Verify the current holder distribution using a block explorer to ensure that supply is not concentrated in a small number of wallets, as this data was unavailable at the time of this audit.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The playboicarti (CARTI) contract on Solana is H5UCZUqCsuTQijwNLBX2KjwP7XJaMaESBSDzQytypump. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for playboicarti is 20/100 (Low risk) as of Oct 26, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: No mint; Liquidity lock: Locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Liquidity lock: Locked (as of Oct 26, 2026). Total DEX liquidity: $10.9K.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Add your links and get it Verified
