On-chain security analysis — is it a scam or legit?
SolanaThe token exhibits significant centralization risks due to active Mint, Freeze, and Permanent Delegate authorities.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Nov 6, 2026
The 20 remaining pairs hold $1.6K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
Unresolved
has permanent delegate authority and can transfer any holder's tokens without consent.
Treat this token as fully custodial.
Unresolved
The contract lets its controller — the freeze authority — mint new supply; change any holder's balance (seize or credit tokens); freeze or blacklist individual addresses; change the token's name, symbol and image. Nothing independent vouches for whoever holds them, so each is a live risk to holders.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
GoPlus balance_mutable is True, indicating a balance-mutating authority can adjust user balances.
Review the token program configuration to identify the scope of balance mutation.
Unresolved
Metadata is mutable, meaning the token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The ten largest holders own 48.7% of supply. Of that, 27.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 6.2% in wallets, 14.7% in other contracts. 9,625 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
9,625 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $323K (DexScreener, all pools). 24h trading volume $2.5M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $323K of DEX liquidity across 30 pools. Launch: 42 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token exhibits significant centralization risks due to active Mint, Freeze, and Permanent Delegate authorities. While liquidity is sufficient for current volume, the presence of a permanent delegate allows for unauthorized fund transfers, and the mint authority permits unlimited supply inflation. Third-party registry data confirms these high-risk configurations.
The token utilizes the Token-2022 program, incorporating advanced extensions. 7.1 Architecture relies on a centralized authority model. 7.2 Code Security is not applicable as this is a standard SPL mint. 7.3 Access Control is highly permissive, with active Mint and Freeze authorities. 7.8 Operations are subject to the Permanent Delegate's ability to move user funds.
7.4 Economic factors show a healthy $237,991 liquidity pool with a 42-day history. 7.5 Governance is centralized, with top 10 holders controlling 13.38% of the supply. The volume/liquidity ratio of 5.11 indicates active trading without extreme wash-trading signals. Liquidity lock status remains unverified.
7.7 Upgrades are not applicable in the EVM sense, but 7.3 Access Control allows for metadata mutability. The token metadata can be changed by the owner at any time. No authority revocation has occurred, maintaining the current high-risk configuration.
Investors should exercise extreme caution due to the Permanent Delegate and Freeze Authority.
Verify the identity of the authority holders before interacting with the token, as these keys have total control over user balances and transfer capabilities. Monitor the mint address on-chain to check for future revocation of authorities. If the authorities are not renounced, the token should be treated as a custodial asset rather than a decentralized one.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
