On-chain security analysis — is it a scam or legit?

Is Pyth Network Safe?

PYTH

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked Sep 22, 2026 · 2 audits on record

Chart

7/ 100

Low RiskHow is this score calculated?

How the score breaks downratings: 10 is safest

Technical10/10 Governance7/10 Upgrades9/10 Checks passed5 of 6 Findings1 Low1

SummaryAI Copilot

This audit of the Pyth Network (PYTH) SPL token mint identifies a low-severity risk related to mutable metadata, which allows for changes to the token's branding.

Read the full analysis

What raised the score

Top-10 concentration > 30%
LP lock status UNKNOWN — the pool's LP could not be read
1 Low finding(s) from audit

Exact factors

Top-10 concentration > 30% (47.6% total → 47.6% effective; 47.6% in EOAs, 0.0% in contracts — moderate)
LP lock status UNKNOWN — the pool's LP could not be read
1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Sep 225 of 6 checks passed

Contract verifiedVerified

MintNo mint

Liquidity lockUnknown

UpgradeabilityFixed code

HoneypotNone found

Buy / sell tax0% / 0%

Holders

as of audit · Sep 22, 2026

Top 10 holdersEveryone elseBubble area = share of supply

47.6%of supply sits with the top 10 holders

Top 10 holdersthe ten largest balances47.6%
Everyone elsethe rest of the supply52.4%

Holder balances as recorded by the audit of Sep 22, 2026

Liquidity

as of audit · Sep 22$701.8K across 30 pairs

Show 4 more pairs

The 20 remaining pairs hold $53.1K between them and are not listed. The risk score reads depth across every pair.

LP tokensUnknown

Whether the LP tokens are locked could not be determined.

Analysed pool$377.1KShare of depth53.7%

Security Findings

1 Low

Low

Mutable Metadata

The token's metadata is mutable, as indicated by metadata_mutable: True. This means the token name, symbol, or image can be changed post-launch by the metadata authority.L-01

Issue

The token's metadata is mutable, as indicated by metadata_mutable: True. This means the token name, symbol, or image can be changed post-launch by the metadata authority.

Fix

Verify metadata against off-chain expectations before trusting branding. Monitor for any unexpected changes to the token's identity.

Status

Unresolved

Analysis

AI Copilotas of audit · Sep 22

Executive SummaryWhat the contract is and what the review found

This audit of the Pyth Network (PYTH) SPL token mint identifies a low-severity risk related to mutable metadata, which allows for changes to the token's branding. Critical authorities like mint and freeze are revoked, enhancing security. The token exhibits healthy liquidity and a mature market presence, with no signs of high holder concentration or wash trading. Third-party registry data was available and confirmed mutable metadata.

Technical10/10Low risk

The token is implemented using the standard spl-token program. Both the Mint Authority and Freeze Authority have been revoked, preventing further token minting or freezing of holder accounts. The token does not utilize advanced Token-2022 extensions such as permanent delegates or transfer hooks. However, the token's metadata is mutable, allowing for potential changes to its name, symbol, or image.

Governance7/10Low risk

The token exhibits a moderate holder concentration, with the top 10 accounts holding 46.68% of the total supply, which does not trigger a high concentration warning. Liquidity is robust at $386,753, and the pair has been active for 749 days, indicating a mature market presence. The 24-hour volume to liquidity ratio is 2.13, suggesting normal trading activity without signs of wash trading.

Upgrades9/10Low risk

The token's core authorities, Mint Authority and Freeze Authority, are permanently revoked, ensuring no future changes to supply or account freeze status. This provides a high degree of immutability for critical token parameters. While the token is based on the standard spl-token program and does not feature Token-2022 upgradeable extensions, its metadata remains mutable, meaning the token's branding elements can be altered post-launch.

Final RecommendationWhat to do about this score

Holders should regularly verify the token's name, symbol, and image against official Pyth Network sources to ensure consistency and prevent potential misrepresentation due to mutable metadata.

While core token functions are immutable, ongoing monitoring of metadata is advised. No further on-chain verification steps are required for critical authorities, as they are already revoked.

Contract & Record

2 audits on record

TypeSPL Token v3

NetworkSolana

Token age2y

ContractHZ1Jov…BCt3

Badge for your website

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History

Sep 22, 20267Low
Sep 4, 202647Medium
Sep 3, 202635Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the PYTH contract address?

The Pyth Network (PYTH) contract on Solana is HZ1JovNiVvGrGNiiYvEozEVgZ58xaU3RKwX8eACQBCt3. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is Pyth Network a scam?

Quantum Audit's risk score for Pyth Network is 7/100 (Low risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: No mint; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Who holds PYTH?

As of Sep 22, 2026, the 10 largest holders own 47.6% of the supply. The Holders section on this page shows who they are by holder type.

Would You Like a More Detailed Audit of Pyth Network?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page