Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is SDollar Safe?

SDLREthereum
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Nov 5, 2026 · 1 audit on record
Chart
Medium RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical8/10Governance1/10Upgrades3/10Checks passed4 of 7Findings1 High · 4 Medium · 4 Info9
SummaryAI Copilot

The TokenContract is a highly centralized ERC-20 implementation featuring advanced administrative controls, including minting, burning, and blacklisting capabilities.

Read the full analysis
What raised the score
  • Owner can change any holder's balance
  • Owner can pause all transfers
  • Owner can blacklist or freeze individual holders
  • Owner can change the buy/sell tax
  • Mintable supply — no cap found, dilution unbounded
  • Ownership status UNKNOWN
  • Liquidity not locked
Exact factors
  • Owner can change any holder's balance (seize or credit tokens)
  • Owner can pause all transfers
  • Owner can blacklist or freeze individual holders
  • Owner can change the buy/sell tax
  • Mintable supply — no cap found, dilution unbounded
  • Ownership status UNKNOWN (owner could not be resolved)
  • Liquidity NOT locked (100% of the pool) — held by independent providers — market-depth risk

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Nov 54 of 7 checks passed
Contract verifiedVerified
OwnershipUnknown
MintMintable
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Nov 5, 20266,188 holders
18.4%Wallets48.0%DEX pools33.6%Everyone else
18.4%Wallets48.0%DEX pools33.6%Everyone else
WalletsDEX poolsEveryone elseBubble area = share of supply
66.4%of supply sits with the top 10 holders
  • Walletsanonymous holders, free to sell18.4%
  • DEX poolsthe pools' own liquidity48.0%
  • Everyone else6,178 holders33.6%
Effective concentrationwhat the score reads18.4%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Nov 5, 2026

Liquidity

as of audit · Nov 5$242.8K across 2 pairs

The risk score reads depth across every pair.

LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$242.8KShare of depth100.0%
Top-1 Unlocked Holder100.0%
Top-3 Unlocked100.0%
Unlocked LP held by
0x55b9…0397

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

1 High4 Medium4 Info
High

Administrative Control Over User Balances

The burnAndRedeem function allows a privileged address to burn or move tokens from any user's balance, posing a direct risk to user funds.CP-02

Issue

The burnAndRedeem function allows a privileged address to burn or move tokens from any user's balance, posing a direct risk to user funds.

Fix

Remove the ability for the admin to burn or transfer tokens on behalf of users without their explicit, time-bound authorization.

Status

Unresolved

Medium

Centralized Minting Capability

The mint function allows a privileged address to create new tokens at will, which can dilute the value of existing holdings.CP-01

Issue

The mint function allows a privileged address to create new tokens at will, which can dilute the value of existing holdings.

Fix

Restrict the minting authority to a multi-signature wallet or a decentralized governance contract.

Status

Unresolved

Medium

Arbitrary Address Blacklisting

The admin can add any address to a blocklist, preventing them from transferring or selling their tokens.CP-06

Issue

The admin can add any address to a blocklist, preventing them from transferring or selling their tokens.

Fix

Implement a clear, public policy for blacklisting and consider using a timelock for such actions.

Status

Unresolved

Medium

Dynamic Transfer Fee Manipulation

The admin can change the transfer tax and discount tiers at any time, which directly impacts the economic utility of the token.CP-07

Issue

The admin can change the transfer tax and discount tiers at any time, which directly impacts the economic utility of the token.

Fix

Set hard caps on transfer taxes and require a governance vote for any changes to the fee structure.

Status

Unresolved

Medium

Liquidity not locked

0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a wallet, 0x55b9…0397 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY

Issue

0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a wallet, 0x55b9…0397 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

Who holds the supply

The ten largest holders own 66.4% of supply. Of that, 48.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 18.4% in wallets, 0.0% in other contracts. 6,188 holders in total.QA-HOLDERS

Issue

The ten largest holders own 66.4% of supply. Of that, 48.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 18.4% in wallets, 0.0% in other contracts. 6,188 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

6,188 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

6,188 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $243K (DexScreener, all pools). 24h trading volume $478K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $243K (DexScreener, all pools). 24h trading volume $478K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $243K of DEX liquidity across 2 pools. Launch: 97 days of market history.QA-PROFILE

Issue

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: mintable with no on-chain cap found. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $243K of DEX liquidity across 2 pools. Launch: 97 days of market history.

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Analysis

AI Copilotas of audit · Nov 5
Executive SummaryWhat the contract is and what the review found

The TokenContract is a highly centralized ERC-20 implementation featuring advanced administrative controls, including minting, burning, and blacklisting capabilities. While the architecture is robust and utilizes standard security patterns like ReentrancyGuard and AccessControl, the level of control granted to the admin role introduces significant trust requirements for token holders. The contract is not upgradeable, ensuring code immutability, but the administrative functions allow for substantial manipulation of user balances and transfer rules.

Technical8/10Low risk

The architecture (7.1) follows standard OpenZeppelin patterns for access control and token management. Code security (7.2) is high, utilizing ReentrancyGuard and explicit input validation to prevent common exploits. Access control (7.3) is granular but highly centralized, allowing admins to modify critical state variables like transfer taxes and blocklists.

Governance1/10High risk

Economic (7.4) and Governance (7.5) risks are elevated due to the admin's ability to mint tokens and modify user balances. The protocol relies on a centralized admin for all parameter adjustments, which could lead to arbitrary fee changes or asset freezing. External (7.6) dependencies are limited to standard ERC-20 interfaces, minimizing integration risks.

Upgrades3/10High risk

The contract does not utilize proxy patterns (7.7), ensuring that the logic is immutable once deployed. Operations (7.8) are straightforward, with no complex upgrade paths to manage. This lack of upgradeability provides high confidence in the long-term stability of the contract logic.

Final RecommendationWhat to do about this score

Token holders should be aware that the administrative role possesses significant power to alter the token's economic properties and individual user access.

It is recommended that the project transition to a multi-signature wallet or a decentralized governance model to mitigate the risks associated with a single point of failure. Furthermore, ensure that all administrative actions are transparently communicated to the community. Consider implementing a timelock mechanism for all sensitive administrative functions to provide users with adequate notice before significant changes to the protocol are enacted.

Contract & Record

1 audit on record
TypeTokenContract
NetworkEthereum
Token age3mo
Contract0x0b57…afd6
Deployer0xd04a…2ca8
Badge for your website
SDollar security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Nov 5, 202656Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Related Audits

6 more on the recordAll audits
EspressoESP · Ethereum56MediumAVAEthereum55MediumGraph TokenGRT · Ethereum57MediumDolomiteDOLO · Ethereum54MediumTrace TokenTRAC · Ethereum58MediumGravityG · Ethereum53Medium

Would You Like a More Detailed Audit of SDollar?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Add your links and get it Verified