Solana · Smart Contract Security · Updated Jul 24, 2026

Is Pomni Safe? POMNI

On-chain security analysis — is it a scam or legit?

Contract DSSXu6…pump DexScreener ↗

67 / 100

High Risk How is this score calculated? →

Volume 24h

$1.0K

Liquidity

$14.7K

Price

$0.00002075

Token Age

2mo

Top 10 Holders

58.3%

Security Checklist

1/5 checks passed

Contract VerifiedFail

Ownership RenouncedUnknown

No Mint FunctionUnknown

Liquidity LockedFail

Not a ProxyPass

Audit History

2 audits on record

Jul 2367

Every audit run adds a dated snapshot — history is append-only and cannot be edited.

Audit Summary

The Pomni SPL Token-2022 mint exhibits a secure configuration with both mint and freeze authorities permanently revoked, ensuring a fixed supply and unfreezable accounts. No adverse flags were reported by a third-party risk registry, and market data indicates moderate liquidity. Holder distribution data was unavailable for analysis.

Final Recommendation: Holders should independently verify the on-chain status of the mint and freeze authorities to confirm their revoked state. While current liquidity is moderate, continuous monitoring of DEX liquidity and trading volume is advised, especially for large positions. Future audits should prioritize obtaining holder distribution data to assess potential concentration risks.

Category Ratings

TechnicalMedium

6/10

The Pomni token is implemented using the spl-token-2022 program. Both the mint authority and freeze authority have been permanently revoked, which prevents further token issuance and ensures that no holder accounts can be frozen. The token does not utilize a transfer hook, nor is the default account

GovernanceHigh

1/10

The token's market presence shows a liquidity of $17,207 USD, which is moderate. The 24-hour volume to liquidity ratio is 0.44, suggesting healthy trading activity without signs of wash trading. The DEX pair has been established for 105 days, providing a reasonable operational history. Holder c

UpgradesMedium

5/10

The Pomni token mint has a fixed configuration due to the revocation of both mint and freeze authorities, preventing any future changes to supply or account freeze status. The token's metadata is immutable, meaning its name, symbol, or image cannot be altered. There are no upgradable transfer f

What Raised This Score

6 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 50% (58.3% total → 58.3% effective; 58.3% in EOAs, 0.0% in contracts — heavy)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Liquidity < $50k ($14,732 across 1 pairs — thin market)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Frequently Asked Questions

Is Pomni a scam?

While Pomni exhibits positive traits like renounced ownership and no mint function, mitigating some direct developer-controlled scam vectors, the unverified contract and unlocked liquidity introduce significant scam potential. The inability to review the code and the risk of liquidity withdrawal mean investors face elevated risks. The medium risk score of 37/100 indicates that caution is strongly advised due to these unaddressed vulnerabilities.

Is Pomni safe to buy?

Pomni carries considerable risk due to an unverified contract and unlocked liquidity. These factors prevent independent code review and expose the project to a potential rug pull by liquidity providers. Given its medium risk score (37/100) and relatively low liquidity compared to trading volume, which can lead to high volatility and slippage, potential investors should exercise extreme caution and acknowledge the elevated risk of capital loss.

Has Pomni been audited?

The Pomni contract is listed as unverified, meaning its source code has not been published or confirmed on the blockchain explorer. Consequently, it has not undergone a public, independent audit process based on available on-chain data. Investors cannot independently review its code for security vulnerabilities or malicious functions, which significantly elevates the project's risk profile compared to audited and verified contracts.