On-chain security analysis — is it a scam or legit?
PolygonThe PolygonSand contract is a bridge-enabled ERC-20 token on Polygon.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 30, 2026
The 20 remaining pairs hold $214 between them and are not listed. The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0x4ab0…0f300xcb5c…c1e20x8a24…05a20x41e2…40570x4e00…01640xaca8…5f1e0xab3c…113f0x8621…4fc60x7414…9c660xd476…c85dNo privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
The 'burnFor' function allows 'SuperOperators' to directly modify the balance of any user address. This effectively allows these operators to seize or destroy tokens from any holder without their explicit consent.
Restrict the 'SuperOperator' role to the absolute minimum number of addresses and implement a timelock for any balance-altering operations.
Unresolved
The 'deposit' function allows the 'ChildChainManager' to mint new tokens, and the 'withdraw' function allows 'SuperOperators' to burn tokens. This grants privileged addresses the ability to alter the total supply, which can dilute the value of existing holdings.
Ensure the 'ChildChainManager' address is secured by a multisig and monitor its activity for unexpected minting events.
Unresolved
0.0% of the pool's LP is burned or time-locked. 62.3% is held, unlocked, by 10 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 91% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $198K (DexScreener, all pools). 24h trading volume $39.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $39K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $8.40 on 2021-11-24; the price is now 99.4527% below it.
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The ten largest holders own 70.1% of supply. Of that, 1.6% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 49.2% in wallets, 19.4% in other contracts. 157,881 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as The Sandbox (SAND), market cap $135M, rank #223. Traded on Binance. 157,881 holders. Verified by: CoinGecko, exchange listings.
Match the contract address against the project's official channels before trading.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: a 3-of-5 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $198K of DEX liquidity across 30 pools. Launch: 1807 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The PolygonSand contract is a bridge-enabled ERC-20 token on Polygon. It utilizes a highly privileged administrative structure, including 'SuperOperators' and a 'ChildChainManager', which possess extensive control over token balances, supply, and allowances. While the architecture is standard for cross-chain assets, the centralization of power presents significant trust requirements for users.
The contract implements a robust ERC-20 standard with additional extensions for meta-transactions and cross-chain bridging. 7.1 Architecture: Uses a centralized bridge manager for minting. 7.2 Code Security: Logic is clean and follows standard patterns. 7.3 Access Control: Heavily reliant on 'SuperOperators' who can bypass standard allowance checks and modify balances. 7.6 External: Relies on the integrity of the ChildChainManager for supply updates.
7.4 Economic: The total supply is elastic and controlled by the bridge manager. 7.5 Governance: Administrative roles are held by a multisig, providing a layer of protection against single-point-of-failure. However, the ability for operators to burn tokens from any address is a significant economic risk. The protocol relies on the multisig to act as a responsible steward of these powerful functions.
7.7 Upgrades: The contract is not currently using a proxy pattern, making the logic immutable. 7.8 Operations: Administrative parameters like the ChildChainManager and TrustedForwarder can be updated by the owner. This allows for operational flexibility without requiring a full contract migration.
Users should be aware that the 'SuperOperator' and 'ChildChainManager' roles have the technical capability to move or burn tokens from any address.
It is recommended that the project maintain strict multisig requirements for these roles and provide transparent documentation regarding the operational procedures for these privileged functions. For future iterations, consider implementing a timelock on administrative actions that affect token supply or user balances to provide a window for community oversight and incident response.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
