On-chain security analysis — is it a scam or legit?
SolanaThe Pomni SPL Token-2022 mint exhibits a secure configuration with both mint and freeze authorities permanently revoked, ensuring a fixed supply and unfreezable accounts.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.
Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.
Acknowledged
The Pomni SPL Token-2022 mint exhibits a secure configuration with both mint and freeze authorities permanently revoked, ensuring a fixed supply and unfreezable accounts. No adverse flags were reported by a third-party risk registry, and market data indicates moderate liquidity. Holder distribution data was unavailable for analysis.
The Pomni token is implemented using the spl-token-2022 program. Both the mint authority and freeze authority have been permanently revoked, which prevents further token issuance and ensures that no holder accounts can be frozen. The token does not utilize a transfer hook, nor is the default account state set to frozen, simplifying transfer mechanics. (7.1 Architecture, 7.3 Access Control)
The token's market presence shows a liquidity of $17,207 USD, which is moderate. The 24-hour volume to liquidity ratio is 0.44, suggesting healthy trading activity without signs of wash trading. The DEX pair has been established for 105 days, providing a reasonable operational history. Holder concentration data was not available for this audit. (7.4 Economic)
The Pomni token mint has a fixed configuration due to the revocation of both mint and freeze authorities, preventing any future changes to supply or account freeze status. The token's metadata is immutable, meaning its name, symbol, or image cannot be altered. There are no upgradable transfer fees or transfer hooks configured for this token. (7.7 Upgrades)
Holders should independently verify the on-chain status of the mint and freeze authorities to confirm their revoked state.
While current liquidity is moderate, continuous monitoring of DEX liquidity and trading volume is advised, especially for large positions. Future audits should prioritize obtaining holder distribution data to assess potential concentration risks.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
While Pomni exhibits positive traits like renounced ownership and no mint function, mitigating some direct developer-controlled scam vectors, the unverified contract and unlocked liquidity introduce significant scam potential. The inability to review the code and the risk of liquidity withdrawal mean investors face elevated risks. The medium risk score of 37/100 indicates that caution is strongly advised due to these unaddressed vulnerabilities.
Pomni carries considerable risk due to an unverified contract and unlocked liquidity. These factors prevent independent code review and expose the project to a potential rug pull by liquidity providers. Given its medium risk score (37/100) and relatively low liquidity compared to trading volume, which can lead to high volatility and slippage, potential investors should exercise extreme caution and acknowledge the elevated risk of capital loss.
The Pomni contract is listed as unverified, meaning its source code has not been published or confirmed on the blockchain explorer. Consequently, it has not undergone a public, independent audit process based on available on-chain data. Investors cannot independently review its code for security vulnerabilities or malicious functions, which significantly elevates the project's risk profile compared to audited and verified contracts.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
