Early-stage security check — honeypot & rug-pull analysis

Is Pump Guy a Scam?

PUMPGUY

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked Sep 22, 2026 · 2 audits on recordNew Launch · 2d old

Chart

26/ 100

Low RiskHow is this score calculated?

How the score breaks downratings: 10 is safest

Technical10/10 Governance6/10 Upgrades10/10 Checks passed4 of 4 Findings1 Medium1

SummaryAI Copilot

The Pump Guy (PUMPGUY) SPL Token Mint exhibits strong security posture regarding core authorities, with both mint and freeze authorities permanently revoked.

Read the full analysis

What raised the score

Top-10 concentration > 50%
Liquidity < $50k
Token age < 7 days
1 Medium finding(s) from audit

Exact factors

Top-10 concentration > 50% (55.8% total → 55.8% effective; 55.8% in EOAs, 0.0% in contracts — heavy)
Liquidity < $50k ($16,323 across 1 pairs — thin market)
Token age < 7 days (early, volatile)
1 Medium finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (2d old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Sep 224 of 4 checks passed

Contract verifiedVerified

MintNo mint

Liquidity lockLocked

UpgradeabilityFixed code

Holders

as of audit · Sep 22, 2026

Top 10 holdersEveryone elseBubble area = share of supply

55.8%of supply sits with the top 10 holders

Top 10 holdersthe ten largest balances55.8%
Everyone elsethe rest of the supply44.2%

Holder balances as recorded by the audit of Sep 22, 2026

Liquidity

as of audit · Sep 22$16.3K

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$16.3KShare of depth100.0%

Security Findings

1 Medium

Medium

Very New Pair

The DEX pair for Pump Guy (PUMPGUY) was created 2 days ago. This insufficient track record makes it difficult to assess the team's long-term commitment or typical holder behavior.M-01

Issue

The DEX pair for Pump Guy (PUMPGUY) was created 2 days ago. This insufficient track record makes it difficult to assess the team's long-term commitment or typical holder behavior.

Fix

Exercise caution and monitor the token's performance, liquidity, and community engagement for a longer period (at least 7 days) before making significant investments.

Status

Unresolved

Analysis

AI Copilotas of audit · Sep 22

Executive SummaryWhat the contract is and what the review found

The Pump Guy (PUMPGUY) SPL Token Mint exhibits strong security posture regarding core authorities, with both mint and freeze authorities permanently revoked. Metadata is immutable, and no high-risk flags were reported by third-party registries. However, the token's DEX pair is very new, having been created only 2 days ago, which introduces significant market uncertainty. Holder concentration is low at 27.4% for the top 10 accounts, and liquidity is moderate at $59,584.

Technical10/10Low risk

The Pump Guy token is implemented using the spl-token-2022 program. Both the mint authority and freeze authority have been permanently revoked, preventing the creation of new tokens or the freezing of holder accounts (7.3 Access Control). There is no transfer hook configured, nor is the default account state set to frozen, ensuring standard token transfer behavior (7.1 Architecture). Furthermore, the token does not have balance mutability, closable accounts, or non-transferable status, indicating a standard and secure token configuration (7.2 Code Security).

Governance6/10Medium risk

The token exhibits a low holder concentration, with the top 10 accounts holding 27.4% of the total supply, which is below typical thresholds for significant whale risk (7.4 Economic). Total DEX liquidity stands at $59,584, which is moderate but sufficient for smaller trades. The 24-hour trading volume is $506,734, resulting in a Volume/Liquidity Ratio of 8.50, indicating active trading relative to available liquidity. However, the DEX pair is very new, having been created only 2 days ago, which limits the track record for assessing market stability and team behavior (7.5 Governance).

Upgrades10/10Low risk

The token's core authorities, Mint Authority and Freeze Authority, are both revoked, meaning no further changes can be made to the token's supply or account freeze status (7.7 Upgrades). Metadata for the token is immutable, preventing post-launch changes to its name, symbol, or image. There are no upgradable transfer fee or transfer hook extensions, ensuring the current configuration is permanent.

Final RecommendationWhat to do about this score

Prospective holders should exercise caution due to the very recent launch of the DEX pair.

It is crucial to monitor the token's market behavior, liquidity trends, and holder distribution over the coming weeks to establish a more reliable track record. Verify on-chain that the mint and freeze authorities remain revoked and that no unexpected extensions are enabled. Continuously check for any adverse flags from independent third-party risk registries as the token matures.

Contract & Record

2 audits on record

TypeSPL Token-2022

NetworkSolana

Token age2d

Contracttpg7sW…pump

Badge for your website

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History

Sep 22, 202626Low
Sep 4, 202668High
Aug 11, 202657Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the PUMPGUY contract address?

The Pump Guy (PUMPGUY) contract on Solana is tpg7sWJPSKijHqPqtpHY2BWBEUq1RwGxmJpD8Tppump. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.