Quantum Audit Logo
Launch App

Is Reserve Rights Safe?

On-chain security analysis — is it a scam or legit?

Reserve Rights RSR
0xab36…f64a
Base
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Medium Risk
Executive SummaryAI Copilot

This report details the security audit of the OptimismMintableERC20 token contract. The contract functions as a standard ERC-20 token with an additional minting capability. A key finding is that a privileged bridge address can mint new tokens, which could dilute existing token holders.

2 Medium4 Informational
Volume 24h
$269.3K
Liquidity
$78.9K
Price
$0.00238
Token Age
2y
Top 10 Holders
77.0%

Security Findings

2 Med4 Info
Medium

Privileged Address Can Mint New Tokens

CP-01The `mint(address _to, uint256 _amount)` function allows a specific, privileged address, referred to as the 'bridge,' to create new tokens and add them to the total supply. This means the total number of tokens can be increased at any time by the bridge controller. If the bridge's private key is compromised or if the bridge operator acts maliciously, they could mint an arbitrary amount of tokens, which would dilute the value of all existing tokens held by other users.
IssueThe `mint(address _to, uint256 _amount)` function allows a specific, privileged address, referred to as the 'bridge,' to create new tokens and add them to the total supply. This means the total number of tokens can be increased at any time by the bridge controller. If the bridge's private key is compromised or if the bridge operator acts maliciously, they could mint an arbitrary amount of tokens, which would dilute the value of all existing tokens held by other users.
FixToken holders should understand that the value of their tokens is subject to the minting policy controlled by the bridge. It is important to research and trust the entity or mechanism that controls the 'bridge' address. Ensure there are robust security measures and transparent operational procedures in place for the bridge to prevent unauthorized or excessive minting.
StatusUnresolved
Medium

Liquidity not locked

QA-LIQUIDITY0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 6 address(es) other than the owner/deployer. One of them — a wallet, 0xa9e0…46c1 — holds 81.3% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 55% of the token's DEX liquidity; the other pools were not assessed.
Issue0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 6 address(es) other than the owner/deployer. One of them — a wallet, 0xa9e0…46c1 — holds 81.3% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 55% of the token's DEX liquidity; the other pools were not assessed.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 77.0% of supply. What remains: 70.5% in wallets, 6.5% in other contracts. 84,593 holders in total.
IssueThe ten largest holders own 77.0% of supply. What remains: 70.5% in wallets, 6.5% in other contracts. 84,593 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Identity verified by independent sources

QA-IDENTITYListed on CoinGecko as Reserve Rights (RSR), market cap $104M, rank #288. Traded on Binance, Coinbase. 84,593 holders. Verified by: CoinGecko, exchange listings.
IssueListed on CoinGecko as Reserve Rights (RSR), market cap $104M, rank #288. Traded on Binance, Coinbase. 84,593 holders. Verified by: CoinGecko, exchange listings.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $143K (DexScreener, all pools). 24h trading volume $4.4M (CoinGecko, all markets, daily snapshot). 24h trading volume $388K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.117 on 2021-04-16; the price is now 98.5837% below it.
IssueLiquidity $143K (DexScreener, all pools). 24h trading volume $4.4M (CoinGecko, all markets, daily snapshot). 24h trading volume $388K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $0.117 on 2021-04-16; the price is now 98.5837% below it.
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: bridge — a contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $143K of DEX liquidity across 19 pools. Launch: 1030 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: bridge — a contract. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $143K of DEX liquidity across 19 pools. Launch: 1030 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged

Category Ratings

TechnicalLow8/10

The OptimismMintableERC20 contract correctly implements the standard ERC-20 token interface, providing essential functionalities like `transfer`, `balanceOf`, and `approve`. Its architecture is straightforward, focusing on core token operations (7.1 Architecture). A `mint(address,uint256)` function is present, allowing new tokens to be created. This function is protected by an `onlyBridge` modifier, restricting its execution to a single designated bridge address (7.3 Access Control), which introduces a central point of control.

GovernanceHigh1/10

The contract's economic model is clear, with minting explicitly tied to a bridge mechanism, which can be beneficial for cross-chain liquidity. The `mint` function, callable only by the `bridge` address, allows for an increase in the total supply (7.4 Economic). This design means that the value of existing tokens could be diluted if the bridge address is compromised or mismanaged. There is no on-chain governance mechanism for token holders to influence or restrict this minting process (7.5 Governance).

UpgradesHigh3/10

The OptimismMintableERC20 contract is not implemented as an upgradeable proxy (7.7 Upgrades). This design choice provides immutability, meaning its logic cannot be altered after deployment, which enhances predictability and reduces upgrade-related risks. As a non-upgradeable contract, any discovered vulnerabilities or desired feature enhancements would necessitate a complete redeployment and migration of assets, which can be a complex and costly process.

Security Checklist

2/5 checks passed
Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionFail
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

77.0% in top 10
70.5% in wallets6.5% in contracts
Effective Concentration73.1%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$142.9K across 19 pairs
Uniswap v3WETHanalysed$78.9K55.2%AerodromeWETH$27.2K19.0%Uniswap v3WETH$13.0K9.1%AerodromebsdETH$12.1K8.5%AerodromeWETH$9.9K6.9%AerodromebsdETH$1.2K0.9%
Show 4 more pairsShow less
Uniswap v3USDC$3110.2%AerodromeCOMP$1790.1%Uniswap v4USDC$810.1%AerodromeUSDC$100.0%

The 9 remaining pairs hold $23 between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

Top-1 Unlocked Holder81.3%
Top-3 Unlocked95.9%

Key Addresses

10 addresses
Deployer
0x20b4…cc15
Unlocked LP Held By
0xa9e0…46c10x9c4d…264f0x2794…98b20x21fd…71d70xcdbc…25d90x1610…52260xd3c9…13340xd0f5…48170xe1f6…806f

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

What Raised This Score

4 factors
  • Owner can change any holder's balance (seize or credit tokens); held by bridge: Other-Contract
  • Mintable supply — no cap found, dilution unbounded; held by bridge: Other-Contract
  • Liquidity NOT locked (100% of the pool; this pool is 55% of DEX liquidity) — held by independent providers — market-depth risk
  • Top-10 concentration > 70% (77.0% total → 73.1% effective; 70.5% in EOAs, 6.5% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
OMI Token (OMI)Medium RiskSilencio (SLC)Medium RiskCARVMedium RiskCoinbase Wrapped XRP (CBXRP)Medium RiskZestMedium RiskWrapped Coinbase Global Inc ST0x (WTCOIN)Medium Risk

Would You Like a More Detailed Audit of Reserve Rights?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit