Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is Render Token Safe?

RENDERSolana
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 14, 2026 · 1 audit on record
Chart
Medium RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical8/10Governance1/10Upgrades2/10Checks passed4 of 6Findings2 Critical · 2 Medium · 1 Low · 4 Info9
SummaryAI Copilot

This audit of the Render Token (RENDER) SPL token mint reveals critical security risks due to the active Mint Authority and Freeze Authority, allowing the respective key holders to mint new tokens or freeze existing accounts.

Read the full analysis
What raised the score
  • Freeze authority not revoked — any holder's account can be frozen
  • Mintable supply — no cap found, dilution unbounded
  • Liquidity not locked
  • Top-10 concentration > 30%
Exact factors
  • Freeze authority NOT revoked — any holder's account can be frozen
  • Mintable supply — no cap found, dilution unbounded
  • Liquidity NOT locked (100% of the pool; this pool is 50% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 30% (52.5% total → 39.3% effective; 30.5% in EOAs, 22.0% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 144 of 6 checks passed
Contract verifiedVerified
MintMintable
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 14, 2026126,539 holders
22.0%Contracts30.5%Wallets47.5%Everyone else
22.0%Contracts30.5%Wallets47.5%Everyone else
ContractsWalletsEveryone elseBubble area = share of supply
52.5%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking22.0%
  • Walletsanonymous holders, free to sell30.5%
  • Everyone else126,529 holders47.5%
How holder types affect the score

Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.

Holder balances as recorded by the audit of Oct 14, 2026

Liquidity

as of audit · Oct 14$908.2K across 30 pairs
Show 4 more pairs

The 20 remaining pairs hold $9.4K between them and are not listed. The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$455.8KShare of depth50.2%

Security Findings

2 Critical2 Medium1 Low4 Info
Critical

Mint Authority Not Revoked

The mint authority is CFyeuj…2pdc. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.C-01

Issue

The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.

Fix

Verify on-chain that the mint authority is set to null before treating supply as fixed.

Status

Unresolved

Critical

Freeze Authority Not Revoked

The freeze authority is 3LNxAh…65r5. The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.C-02

Issue

The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.

Fix

Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.

Status

Unresolved

Medium

Holder Concentration > 50%

The ten largest holders that can sell hold 52.46% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.M-01

Issue

The ten largest holders that can sell hold 52.46% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.

Fix

Account for the potential impact of large holder movements on market stability.

Status

Unresolved

Medium

What the token's controller can do

The contract lets its controller — the freeze authority — mint new supply; freeze or blacklist individual addresses; change the token's name, symbol and image. Nothing independent vouches for whoever holds them, so each is a live risk to holders.QA-POWERS

Issue

The contract lets its controller — the freeze authority — mint new supply; freeze or blacklist individual addresses; change the token's name, symbol and image. Nothing independent vouches for whoever holds them, so each is a live risk to holders.

Fix

Check who holds these powers and whether a timelock or multisig stands between them and holders.

Status

Acknowledged

Low

Mutable Metadata

Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True.L-01

Issue

Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True.

Fix

Verify metadata against off-chain expectations before trusting branding.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 52.5% of supply. What remains: 30.5% in wallets, 22.0% in other contracts. 126,539 holders in total.QA-HOLDERS

Issue

The ten largest holders own 52.5% of supply. What remains: 30.5% in wallets, 22.0% in other contracts. 126,539 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Identity verified by independent sources

Listed on CoinGecko as Render (RENDER), market cap $1.1B, rank #78. 126,539 holders. Verified by: CoinGecko.QA-IDENTITY

Issue

Listed on CoinGecko as Render (RENDER), market cap $1.1B, rank #78. 126,539 holders. Verified by: CoinGecko.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $908K (DexScreener, all pools). 24h trading volume $119.7M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.4M (DexScreener, all pools).QA-MARKET

Issue

Liquidity $908K (DexScreener, all pools). 24h trading volume $119.7M (CoinGecko, all markets, daily snapshot). 24h trading volume $1.4M (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $908K of DEX liquidity across 30 pools. Launch: 1072 days of market history.QA-PROFILE

Issue

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $908K of DEX liquidity across 30 pools. Launch: 1072 days of market history.

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 14
Executive SummaryWhat the contract is and what the review found

This audit of the Render Token (RENDER) SPL token mint reveals critical security risks due to the active Mint Authority and Freeze Authority, allowing the respective key holders to mint new tokens or freeze existing accounts. Additionally, over 50% of the sellable supply is concentrated among the top ten holders, posing a market manipulation risk. Third-party risk registry data and chain-native RPC data were successfully collected, but information regarding pool liquidity locking was unavailable.

Technical8/10Low risk

The Render Token is an SPL token operating under the spl-token program. It has an active Mint Authority at , enabling the creation of new tokens, and a Freeze Authority at , which can freeze any token account. The token's supply is 48611332375144507 with 8 decimals, and it is initialized. The balance_mutable and non_transferable flags are false, indicating standard token behavior.

Governance1/10High risk

Economic analysis indicates a medium risk due to holder concentration, with the top 10 holders that can sell controlling 52.46% of the total supply, which could lead to significant price volatility from large sell-offs. The token has substantial liquidity at $451,340 USD and a healthy 24-hour volume of $1,198,789 USD, with a normal Volume/Liquidity Ratio of 2.66. The pair has been active for 790 days. Information on whether the pool's liquidity is locked was not available.

Upgrades2/10High risk

The token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch, as indicated by metadata_mutable: True. Both the Mint Authority and Freeze Authority are active, which means the token's core parameters related to supply and transferability are subject to change by these authorities. There are no Token-2022 specific upgrade mechanisms or extensions like transfer hooks or balance mutability present, as it uses the classic spl-token program.

Final RecommendationWhat to do about this score

Before engaging with this token, verify on-chain that the Mint Authority has been revoked to ensure a fixed supply.

Monitor the Freeze Authority's address for any activity and confirm its revocation if you require unrestricted transferability. Given the holder concentration, observe the wallets of the top holders for any large movements that could impact market stability.

Contract & Record

1 audit on record
TypeSPL Token v3
NetworkSolana
Token age2y
Contractrndriz…HBof
Audit History
  1. Oct 14, 202649Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Related Audits

6 more on the recordAll audits
Official Bridge CurrencyOBC · Solana49MediumGeodnetGEOD · Solana49MediumDark ArenaDARK · Solana49MediumHaymaker ValleyHAYMAKER · Solana49MediumCash ElonCASHELON · Solana49MediumSolana's First AI LifeformCHARLIE · Solana49Medium

Would You Like a More Detailed Audit of Render Token?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page