Is RAWR Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No Source Code Provided for Analysis

I-01The audit was requested for the contract at 0xb200…b801 on the Base network, but no Solidity source code was provided. This prevents any form of static or dynamic code analysis, making it impossible to identify vulnerabilities, assess design patterns, or verify adherence to security best practices.

IssueThe audit was requested for the contract at on the Base network, but no Solidity source code was provided. This prevents any form of static or dynamic code analysis, making it impossible to identify vulnerabilities, assess design patterns, or verify adherence to security best practices.

FixProvide the complete and verified Solidity source code for the contract. This includes all imported libraries and dependencies. Verification on a block explorer (e.g., Basescan) is highly recommended to ensure transparency and allow for public scrutiny.

StatusUnresolved

Category Ratings

TechnicalLow10/10

No source code was provided for technical analysis. Therefore, an assessment of architectural patterns (7.1), code security (7.2), and access control mechanisms (7.3) could not be performed. Without code, no specific technical strengths or vulnerabilities can be identified.

GovernanceHigh3/10

No source code was provided, preventing an assessment of economic models (7.4) or governance structures (7.5). Without code, it is impossible to determine potential economic vulnerabilities or the robustness of governance mechanisms, thus no specific strengths or issues can be reported.

UpgradesMedium6/10

No source code was provided, making it impossible to determine if the contract utilizes an upgradeable proxy pattern (7.7) or to assess its upgrade safety. Operational aspects (7.8) and external dependencies (7.6) also could not be evaluated without code. Consequently, no specific upgrade-related strengths or weaknesses can be reported.

Security Checklist

2/5 checks passed

Contract VerifiedPass

Ownership Renounced?

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

16.9% in top 10

3.6% in wallets13.3% in contracts

Effective Concentration8.9%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$112.4K across 29 pairs

Uniswap v4GOOGLcanalysed$97.6K Uniswap v4USDC$3.3K Uniswap v4USDC$2.0K Uniswap v4USDC$1.9K Uniswap v4ETH$1.1K Uniswap v4USDC$1,000

Show 4 more pairsShow less

Uniswap v4USDC$991 Uniswap v4USDC$968 Uniswap v4USDC$669 Uniswap v4USDC$568

The 19 remaining pairs hold $2.2K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

Top-1 Unlocked Holder64.2%

Top-3 Unlocked96.3%

Key Addresses

5 addresses

Unlocked LP Held By

0x575e…fe980xef7a…ae3b0x1690…1c150x5c5b…b0e20x89e8…805e

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

6 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Liquidity not locked, but no owner/deployer address holds LP — market-depth risk, not rug risk
LP top1 unlocked holder = 64.2% (independent LP — depth risk, pool = 87% of DEX liquidity)
LP top3 unlocked holders = 96.3% (independent LP — depth risk, pool = 87% of DEX liquidity)
Token age < 30 days (still settling)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is RAWR Safe?