Quantum Audit Logo
Launch App

Early-stage security check — honeypot & rug-pull analysis

Is SHIB AGENT a Scam?

SHIBBNB Chain
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Nov 6, 2026 · 1 audit on recordNew Launch · 2d old
SummaryAI Copilot

The ShibAgentFission contract is a complex ERC-20 token with integrated tax, reward, and minting mechanisms.

Read the full analysis
What raised the score
  • Hidden owner — control survives an apparent renounce
  • Owner can pause all transfers
  • A privileged address controls a switch that decides whether transfers go through; held by idcollection: EOA, marketingtreasury: EOA
  • Owner can change the buy/sell tax; held by idcollection: EOA, marketingtreasury: EOA
  • A privileged address can change transfer or wallet limits; held by idcollection: EOA, marketingtreasury: EOA
  • Mintable supply — no cap found, dilution unbounded; held by idcollection: EOA, marketingtreasury: EOA
  • Liquidity < $50k
  • Code: Rounding Errors due to Division Before Multiplication
Exact factors
  • Hidden owner — control survives an apparent renounce
  • Owner can pause all transfers
  • A privileged address controls a switch that decides whether transfers go through; held by idcollection: EOA, marketingtreasury: EOA
  • Owner can change the buy/sell tax; held by idcollection: EOA, marketingtreasury: EOA
  • A privileged address can change transfer or wallet limits; held by idcollection: EOA, marketingtreasury: EOA
  • Mintable supply — no cap found, dilution unbounded; held by idcollection: EOA, marketingtreasury: EOA
  • Liquidity < $50k ($30,576 across 1 pairs — thin market)
  • Code: Rounding Errors due to Division Before Multiplication (Low, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (2d old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Nov 64 of 7 checks passed
Contract verifiedVerified
OwnershipRetained
MintMintable
Liquidity lockLocked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax2% / 2%

Holders

as of audit · Nov 6, 202627,567 holders
3.4%6.5%Wallets22.2%DEX pools67.1%Everyone else
6.5%22.2%DEX pools67.1%Everyone else
ContractsWalletsBurnedDEX poolsEveryone elseBubble area = share of supply
32.9%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking3.4%
  • Walletsanonymous holders, free to sell6.5%
  • Burnedout of circulation0.9%
  • DEX poolsthe pools' own liquidity22.2%
  • Everyone else27,557 holders67.1%
Effective concentrationwhat the score reads7.8%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Nov 6, 2026

Liquidity

as of audit · Nov 6$30.6K

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$30.6KShare of depth100.0%
LP Burned99.3% · ≈ permanent lock
LP Locked99.3% · Null Address
Unlocked LP held by
0x0ed9…9706

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

3 Medium2 Low6 Info
Medium

Centralized Minting Authority

Privileged addresses (idcollection, marketingtreasury, owner) can mint new tokens at will, which can dilute the value of existing holdings. This is performed via functions like mint, openEarly, and fissionMint.CP-01

Issue

Privileged addresses (idcollection, marketingtreasury, owner) can mint new tokens at will, which can dilute the value of existing holdings. This is performed via functions like mint, openEarly, and fissionMint.

Fix

Implement a hard cap on the total supply or move minting logic to a decentralized, time-locked, or community-voted process.

Status

Unresolved

Medium

Administrative Transfer Control

Privileged roles can toggle internal switches that determine if transfers are allowed. This effectively allows administrators to pause or restrict trading for all users.CP-05

Issue

Privileged roles can toggle internal switches that determine if transfers are allowed. This effectively allows administrators to pause or restrict trading for all users.

Fix

Remove the ability for administrators to arbitrarily halt transfers, or restrict this functionality to emergency-only scenarios with a clear, public notification process.

Status

Unresolved

Medium

Dynamic Fee Manipulation

The tax rates applied to token transfers can be modified by privileged addresses. This allows for sudden changes in the cost of trading without prior notice to users.CP-07

Issue

The tax rates applied to token transfers can be modified by privileged addresses. This allows for sudden changes in the cost of trading without prior notice to users.

Fix

Set a maximum fee cap in the contract code and implement a timelock for any changes to the fee structure.

Status

Unresolved

Low

Rounding Errors due to Division Before Multiplication

The functions _oracleFor and priceAt perform division before multiplication, which can lead to precision loss and inaccurate pricing calculations.CD-01

Issue

The functions _oracleFor and priceAt perform division before multiplication, which can lead to precision loss and inaccurate pricing calculations.

Fix

Always perform multiplication before division to maintain higher precision in calculations.

Status

Unresolved

Low

Centralized Limit Management

Privileged addresses can change transaction and wallet limits, which can be used to restrict specific users or change the token's distribution dynamics.CP-08

Issue

Privileged addresses can change transaction and wallet limits, which can be used to restrict specific users or change the token's distribution dynamics.

Fix

Define limits as immutable constants or require a governance vote to adjust them.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 32.9% of supply. Of that, 0.9% burned, 22.2% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 6.5% in wallets, 3.4% in other contracts. 27,567 holders in total.QA-HOLDERS

Issue

The ten largest holders own 32.9% of supply. Of that, 0.9% burned, 22.2% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 6.5% in wallets, 3.4% in other contracts. 27,567 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

27,567 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

27,567 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

Liquidity burned — cannot be withdrawn

99.3% of the pool's LP is burned or time-locked. 99.3% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 0.7% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool.QA-LIQUIDITY

Issue

99.3% of the pool's LP is burned or time-locked. 99.3% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 0.7% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool.

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

The market for this token

Liquidity $31K (DexScreener, all pools). 24h trading volume $195K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $31K (DexScreener, all pools). 24h trading volume $195K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Meme token

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: meme vocabulary in name/ticker (shib). Tokenomics — Supply: mintable with no on-chain cap found. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: 2% on buy, 2% on sell. Market: $31K of DEX liquidity across 1 pools. Launch: 2 days of market history.QA-PROFILE

Issue

A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: meme vocabulary in name/ticker (shib). Tokenomics — Supply: mintable with no on-chain cap found. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: 2% on buy, 2% on sell. Market: $31K of DEX liquidity across 1 pools. Launch: 2 days of market history.

Fix

Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.

Status

Acknowledged

Info

Recently launched — 2 days of market history

The token's oldest DEX pool is 2 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT

Issue

The token's oldest DEX pool is 2 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.

Fix

Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.

Status

Acknowledged

Analysis

AI Copilotas of audit · Nov 6
Executive SummaryWhat the contract is and what the review found

The ShibAgentFission contract is a complex ERC-20 token with integrated tax, reward, and minting mechanisms. The protocol exhibits high centralization, as multiple privileged roles (owner, marketing treasury, and idcollection) possess the authority to modify core economic parameters, mint tokens, and halt transfers. While the code implements standard security patterns like ReentrancyGuard, the extensive administrative control creates significant trust requirements for token holders.

Technical6/10Medium risk

The architecture relies on a centralized controller model to manage liquidity and tax processing. 7.1 Architecture and 7.2 Code Security are generally sound, utilizing OpenZeppelin standards for ERC-20 and reentrancy protection. However, 7.3 Access Control is overly permissive, allowing administrative functions to alter fundamental contract state. 7.6 External interactions are handled via standard interfaces, though the reliance on external price oracles requires careful monitoring.

Governance3/10High risk

7.4 Economic and 7.5 Governance aspects are heavily centralized. Privileged addresses have the power to mint supply and adjust tax rates, which directly impacts the value proposition for holders. There are no on-chain governance mechanisms to limit these powers, creating a high dependency on the integrity of the administrative keys.

Upgrades4/10Medium risk

7.7 Upgrades are not supported as the contract is not a proxy. 7.8 Operations are managed through fixed administrative functions. The lack of upgradeability ensures the contract logic remains immutable, preventing future unauthorized logic changes.

Final RecommendationWhat to do about this score

It is recommended to transition administrative powers to a multi-signature wallet or a decentralized governance contract to mitigate the risk of single-point-of-failure.

Additionally, implementing timelocks on sensitive functions like tax adjustments and minting would provide transparency and protection for the community. Users should be aware that the contract owner and designated treasury addresses have significant control over the token's economic state. We advise monitoring the activity of these privileged addresses and ensuring that the protocol's operational transparency meets your risk tolerance.

Contract & Record

1 audit on record
TypeStaking, Vault, Token
NetworkBNB Chain
Token age2d
Contract0x7857…fd2b
Deployer0x7af7…4861
Badge for your website
SHIB AGENT security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Nov 6, 202678High

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the SHIB contract address?

The SHIB AGENT (SHIB) contract on BNB Chain is 0x78573ab46e5436e126d3ea1fdef8766cce4efd2b. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is SHIB AGENT a scam?

Quantum Audit's risk score for SHIB AGENT is 78/100 (High risk) as of Nov 6, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: Mintable; Liquidity lock: Locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 2% / 2%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Is SHIB liquidity locked?

Liquidity lock: Locked (as of Nov 6, 2026). Total DEX liquidity: $30.6K.

Who holds SHIB?

As of Nov 6, 2026, the 10 largest holders own 32.9% of the supply across 27,567 holders. The Holders section on this page shows who they are by holder type.

Would You Like a More Detailed Audit of SHIB AGENT?

This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.

Get Detailed Audit Is this your token? Add your links and get it Verified