Early-stage security check — honeypot & rug-pull analysis
SolanaThe PUMP2 token is a Token-2022 asset with revoked mint and freeze authorities, significantly reducing central control risks.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
How the supply is spread across holders could not be read — the indexer's holder list does not add up to the supply. Check the largest holders on a block explorer, which reads current balances.
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The token metadata (name, symbol, image) is mutable and can be changed by the authority at any time.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The transfer fee configuration is mutable, allowing the fee authority to adjust the 100 bps fee.
Monitor the fee authority's actions and verify the fee rate before trading.
Unresolved
Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the pool's liquidity is locked for good in Raydium's LP locker (Burn & Earn) — only its trading fees can be collected; no one can withdraw the liquidity.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $13K (DexScreener, all pools). 24h trading volume $107K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The contract lets its controller — nobody (ownership renounced) — change the buy/sell tax; change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $13K of DEX liquidity across 1 pools. Launch: under a day of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The PUMP2 token is a Token-2022 asset with revoked mint and freeze authorities, significantly reducing central control risks. Liquidity is fully locked, ensuring the pool cannot be drained by the creator. Holder concentration data was unavailable, and metadata remains mutable.
The token utilizes the Token-2022 program (7.1 Architecture). Access control is robust as both mint and freeze authorities are revoked (7.3 Access Control). A 100 bps (1.00%) transfer fee is active, which is configurable (7.4 Economic). No transfer hooks are present (7.2 Code Security).
Liquidity is $14,611 with 100% of the pool locked, preventing rug-pulls via liquidity withdrawal (7.4 Economic). The volume/liquidity ratio is 7.39, indicating moderate trading activity relative to depth (7.4 Economic). Holder concentration data is unavailable (7.5 Governance). Pair age is 0 days (7.8 Operations).
The token metadata is mutable, allowing for potential changes to the name or symbol (7.7 Upgrades). Transfer fee configuration is also mutable, allowing the fee to be adjusted by the fee authority (7.7 Upgrades). There are no upgradeable proxy patterns as this is a native SPL mint (7.7 Upgrades).
Investors should monitor the mutable metadata and transfer fee configuration to ensure they remain consistent with expectations.
Since holder concentration data is unavailable, users should exercise caution regarding potential whale activity. Verify the current transfer fee on-chain before executing large swaps to account for the 100 bps cost. Confirm the metadata state periodically if branding integrity is a priority.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Add your links and get it Verified
