Is Sherbert The Tree (SHERBERT) Safe? Smart Contract Security Analysis

Security Findings

1 High

High

Very Low Liquidity

H-01Total DEX liquidity for SHERBERT is $4,134. Slippage will be severe; large positions cannot be exited without significant loss.

IssueTotal DEX liquidity for SHERBERT is $4,134. Slippage will be severe; large positions cannot be exited without significant loss.

FixAccount for the extremely low liquidity in any swap calculation and be prepared for significant price impact on trades. Avoid large positions unless liquidity materially improves.

StatusUnresolved

Category Ratings

TechnicalMedium4/10

The Sherbert The Tree (SHERBERT) token is an SPL Token-2022 mint. Its technical configuration is robust, with both the mint authority and freeze authority successfully revoked, ensuring no new tokens can be minted and no existing accounts can be frozen. The token does not utilize a transfer hook, nor is the default account state set to frozen. Furthermore, the token is not balance_mutable, closable, freezable, or non_transferable, indicating a standard and secure operational setup.

GovernanceHigh1/10

The primary economic risk for SHERBERT is its very low liquidity, currently at $4,134 USD, which a third-party risk registry also flagged. This makes it challenging to trade significant amounts without incurring substantial slippage. While the 24-hour volume is only $8 and the Volume/Liquidity Ratio is normal (0.00), the low liquidity remains a concern. The DEX pair has been active for 39 days, providing some track record, but holder concentration data was unavailable for analysis.

UpgradesMedium4/10

The token's upgradeability posture is favorable, as both the mint and freeze authorities have been revoked, preventing any future changes to supply or account freeze status. The token does not have a transfer hook, and its metadata is immutable, meaning the token name, symbol, or image cannot be altered post-launch. There are no upgradable transfer fees or transfer hooks configured, ensuring stability in its core functionality.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$4.5K

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

8 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 70% (99.1% total → 99.1% effective; 99.1% in EOAs, 0.0% in contracts — extreme)
Liquidity NOT locked (owner can withdraw — rug-pull risk)
Liquidity < $10k ($4,518 across 1 pairs — easily drained)
Token age < 30 days (still settling)
1 High finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is Sherbert The Tree Safe?