On-chain security analysis — is it a scam or legit?
PolygonThe Quick token is a standard ERC-20 implementation with additional minting and burning capabilities.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 20, 2026
The 20 remaining pairs hold $4.0K between them and are not listed. The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
The deposit(address,bytes) function allows a privileged 'gateway' address to mint new tokens at will. This increases the total supply and dilutes the value of existing holdings for all token holders.
Restrict the minting capability to a multi-signature wallet or a time-locked governance contract to prevent single-point-of-failure risks.
Unresolved
The ten largest holders own 81.5% of supply. Of that, 12.2% burned — not holders that can sell, so excluded from the concentration score. What remains: 23.3% in wallets, 46.0% in other contracts. 54,433 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Quickswap (QUICK), market cap $4M, rank #1771. On GoPlus's list of trusted tokens. Traded on Binance. 54,433 holders. Verified by: GoPlus, exchange listings.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $387K (DexScreener, all pools). 24h trading volume $957K (CoinGecko, all markets, daily snapshot). 24h trading volume $325K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.23 on 2022-05-05; the price is now 97.1881% below it.
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: gateway — a role-controlled contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $387K of DEX liquidity across 30 pools. Launch: 1631 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The Quick token is a standard ERC-20 implementation with additional minting and burning capabilities. The architecture is straightforward, utilizing a gateway-based minting mechanism. While the code is functional, it lacks a standard totalSupply() function, which may cause compatibility issues with some DeFi protocols. The primary risk involves the centralized control over token supply via the gateway address.
The contract implements standard ERC-20 transfer logic with safe arithmetic checks. 7.1 Architecture is simple and modular, relying on a gateway for minting. 7.2 Code Security is maintained through explicit bounds checking via safe96. 7.3 Access Control is strictly enforced for the deposit function, ensuring only the authorized gateway can mint tokens.
7.4 Economic risk is tied to the minting authority held by the gateway. 7.5 Governance is currently centralized, as the gateway address has the power to increase supply. This allows for potential dilution of token holders if the gateway key is compromised or misused.
7.7 Upgrades are not supported as the contract is not a proxy. The logic is immutable, which provides security against unauthorized logic changes. 7.8 Operations are stable due to the lack of complex state dependencies.
It is recommended to implement the standard totalSupply() function to ensure full compatibility with external DeFi aggregators and wallets.
Additionally, consider transitioning the gateway control to a multi-signature wallet or a decentralized governance contract to mitigate the risk of centralized minting authority.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
