Is pumpcat a Scam? Security Analysis

pumpcat PUMPCAT

DyKoCH…pump

Solana Not verifiedLast checked 3d ago 1 audit on record

DexScreener ↗

87 / 100

Critical Risk

Executive SummaryAI Copilot

The pumpcat SPL token mint presents a critical risk due to being flagged as high-risk by an independent third-party registry, citing a creator history of rugged tokens. While core token authorities like mint and freeze are revoked, and liquidity is moderate, this external warning indicates a significant trust concern. Holder distribution data was unavailable from chain-native RPC, but top 10 holder percentage was available from an on-chain security registry.

1 Critical

i Our automated scanner reviewed pumpcat (PUMPCAT) on Solana. 1 of 4 security checks passed — see the full breakdown below.

Volume 24h

$29.0K

Liquidity

$31.1K

Price

$0.00007259

Age

12d

Top 10 Holders

56.2%

Security Findings

1 Crit

Critical

Flagged High-Risk by Third-Party Registry

C-01An independent third-party risk registry classifies this token as high-risk based on its own dataset (developer history, LP movements), specifically noting a 'Creator history of rugged tokens'.

IssueAn independent third-party risk registry classifies this token as high-risk based on its own dataset (developer history, LP movements), specifically noting a 'Creator history of rugged tokens'.

FixDo not interact with this token.

StatusUnresolved

Category Ratings

TechnicalMedium4/10

The token operates on the spl-token-2022 program. Both the Mint Authority and Freeze Authority are revoked, ensuring that no new tokens can be minted and no holder accounts can be frozen by the issuer. Key Token-2022 extensions like Transfer Hook and Default Account State Frozen are not active, simplifying token transfer mechanics. Metadata is immutable, and balance mutability is not enabled, indicating a stable configuration.

GovernanceHigh1/10

Holder concentration shows the top 10 accounts hold 38.1% of the supply, which is below thresholds typically associated with high centralization risk. Total DEX liquidity is $36,774, providing moderate market depth. The 24-hour volume to liquidity ratio is 2.89, which is considered normal and does not suggest wash trading. The DEX pair has been active for 12 days, offering a short track record.

UpgradesMedium4/10

The token's core authorities, Mint Authority and Freeze Authority, are revoked, preventing any post-launch changes to supply or account freeze status by the original issuer. The spl-token-2022 program is used, but no transfer hook or default frozen state is configured. Furthermore, metadata is immutable, ensuring that the token's branding cannot be altered after deployment. There is no upgradeability for transfer fees or transfer hooks.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$31.1K

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

8 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 50% (56.2% total → 56.2% effective; 56.2% in EOAs, 0.0% in contracts — heavy)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Liquidity < $50k ($31,058 across 1 pairs — thin market)
Token age < 30 days (still settling)
1 Critical finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is pumpcat a Scam?

Security Findings

Flagged High-Risk by Third-Party Registry

Category Ratings

Security Checklist

Liquidity Depth

What Raised This Score

Related Audits

Would You Like a More Detailed Audit of pumpcat?