Early-stage security check — honeypot & rug-pull analysis
EthereumThe contract is a standard ERC-20 token with additional features for trading control, fees, and anti-whale mechanisms.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
How the supply is spread across holders could not be read — the indexer's holder list does not add up to the supply. The indexer lists 156.6% of the supply in its top 10, which cannot be right. Check the largest holders on a block explorer, which reads current balances.
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The contract uses tx.origin to determine certain rules. This is a security risk because it can be exploited by malicious contracts to bypass authorization checks if a user is tricked into interacting with them.
Replace all instances of tx.origin with msg.sender to ensure that the immediate caller is the one being authorized.
Unresolved
The _transfer function performs division before multiplication, which can lead to rounding errors and slight inaccuracies in fee calculations.
Reorder operations to perform multiplication before division to maintain higher precision.
Unresolved
The contract contains switches (e.g., enableTrading, removeLimits) that control token transfer behavior. Because ownership is renounced, these functions are now inaccessible, rendering these controls permanently fixed in their current state.
No action required as the renouncement provides a security guarantee that these settings cannot be altered.
Unresolved
The contract includes functions to update buy and sell fees. Since ownership is renounced, these fees are now permanently set to their current values and cannot be adjusted by any party.
None required; the immutability of fees is a feature of the current state.
Unresolved
The contract defines maximum transaction and wallet limits. These limits are now immutable due to the renouncement of ownership, preventing any future adjustments to the token's distribution rules.
None required.
Unresolved
The holder list from the security indexer adds up to 156.6% of supply, so it does not describe real balances. That happens with rebasing and reflection tokens, whose balances change without transfers, and with contracts that report balances they do not hold. Concentration is unknown and priced as an unknown — neither a whale nor safe.
Check the largest holders on the block explorer, which reads current balances.
Acknowledged
140 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $22K (DexScreener, all pools). 24h trading volume $56K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $22K of DEX liquidity across 1 pools. Launch: under a day of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The contract is a standard ERC-20 token with additional features for trading control, fees, and anti-whale mechanisms. Ownership has been successfully renounced, meaning the privileged administrative functions are now permanently disabled. The code is functional and follows standard patterns for this type of token, though minor arithmetic and architectural patterns were identified.
The architecture follows a standard ERC-20 implementation with integrated liquidity management. 7.1 Architecture and 7.2 Code Security are generally sound, though the use of tx.origin for logic is discouraged. 7.3 Access Control is robust due to the renounced ownership, effectively locking the administrative state. 7.6 External interactions with the DEX router are handled via standard interfaces.
7.4 Economic and 7.5 Governance aspects are currently static. Since ownership is renounced, no further changes to fees, limits, or blacklists can be enacted by any party. The economic model is fixed, preventing any future rug-pulls or fee adjustments.
7.7 Upgrades are not supported as this is a non-proxy contract. 7.8 Operations are stable because the contract logic is immutable. No upgrade path exists, ensuring the current logic remains permanent.
The contract is safe for interaction as the owner has renounced control, effectively locking the parameters.
Users should be aware that the fixed logic includes transfer fees and potential wallet limits that cannot be changed in the future. For future deployments, consider using msg.sender instead of tx.origin to improve security against phishing attacks and avoid division-before-multiplication patterns to ensure precision in fee calculations.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page
