The ShibAgentFission contract is a complex ERC-20 token with integrated tax, reward, and minting mechanisms. The protocol exhibits high centralization, as multiple privileged roles (owner, marketing treasury, and idcollection) possess the authority to modify core economic parameters, mint tokens, and halt transfers. While the code implements standard security patterns like ReentrancyGuard, the extensive administrative control creates significant trust requirements for token holders.
Early-stage security check — honeypot & rug-pull analysis
Is SHIB AGENT a Scam?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →The ShibAgentFission contract is a complex ERC-20 token with integrated tax, reward, and minting mechanisms.
Read the full analysis- Hidden owner — control survives an apparent renounce
- Owner can pause all transfers
- A privileged address controls a switch that decides whether transfers go through; held by idcollection: EOA, marketingtreasury: EOA
- Owner can change the buy/sell tax; held by idcollection: EOA, marketingtreasury: EOA
- A privileged address can change transfer or wallet limits; held by idcollection: EOA, marketingtreasury: EOA
- Mintable supply — no cap found, dilution unbounded; held by idcollection: EOA, marketingtreasury: EOA
- Liquidity < $50k
- Code: Rounding Errors due to Division Before Multiplication
Exact factors
- Hidden owner — control survives an apparent renounce
- Owner can pause all transfers
- A privileged address controls a switch that decides whether transfers go through; held by idcollection: EOA, marketingtreasury: EOA
- Owner can change the buy/sell tax; held by idcollection: EOA, marketingtreasury: EOA
- A privileged address can change transfer or wallet limits; held by idcollection: EOA, marketingtreasury: EOA
- Mintable supply — no cap found, dilution unbounded; held by idcollection: EOA, marketingtreasury: EOA
- Liquidity < $50k ($30,576 across 1 pairs — thin market)
- Code: Rounding Errors due to Division Before Multiplication (Low, static analysis)
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Nov 6Holders
as of audit · Nov 6, 2026- Contractstreasury, vesting, bridge, staking3.4%
- Walletsanonymous holders, free to sell6.5%
- Burnedout of circulation0.9%
- DEX poolsthe pools' own liquidity22.2%
- Everyone else27,557 holders67.1%
How holder types affect the score
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 6, 2026
Liquidity
as of audit · Nov 6The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
0x0ed9…9706No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
Security Findings
MediumCentralized Minting Authority
Privileged addresses (idcollection, marketingtreasury, owner) can mint new tokens at will, which can dilute the value of existing holdings. This is performed via functions like mint, openEarly, and fissionMint.CP-01
Issue
Privileged addresses (idcollection, marketingtreasury, owner) can mint new tokens at will, which can dilute the value of existing holdings. This is performed via functions like mint, openEarly, and fissionMint.
Fix
Implement a hard cap on the total supply or move minting logic to a decentralized, time-locked, or community-voted process.
Status
Unresolved
MediumAdministrative Transfer Control
Privileged roles can toggle internal switches that determine if transfers are allowed. This effectively allows administrators to pause or restrict trading for all users.CP-05
Issue
Privileged roles can toggle internal switches that determine if transfers are allowed. This effectively allows administrators to pause or restrict trading for all users.
Fix
Remove the ability for administrators to arbitrarily halt transfers, or restrict this functionality to emergency-only scenarios with a clear, public notification process.
Status
Unresolved
MediumDynamic Fee Manipulation
The tax rates applied to token transfers can be modified by privileged addresses. This allows for sudden changes in the cost of trading without prior notice to users.CP-07
Issue
The tax rates applied to token transfers can be modified by privileged addresses. This allows for sudden changes in the cost of trading without prior notice to users.
Fix
Set a maximum fee cap in the contract code and implement a timelock for any changes to the fee structure.
Status
Unresolved
LowRounding Errors due to Division Before Multiplication
The functions _oracleFor and priceAt perform division before multiplication, which can lead to precision loss and inaccurate pricing calculations.CD-01
Issue
The functions _oracleFor and priceAt perform division before multiplication, which can lead to precision loss and inaccurate pricing calculations.
Fix
Always perform multiplication before division to maintain higher precision in calculations.
Status
Unresolved
LowCentralized Limit Management
Privileged addresses can change transaction and wallet limits, which can be used to restrict specific users or change the token's distribution dynamics.CP-08
Issue
Privileged addresses can change transaction and wallet limits, which can be used to restrict specific users or change the token's distribution dynamics.
Fix
Define limits as immutable constants or require a governance vote to adjust them.
Status
Unresolved
InfoWho holds the supply
The ten largest holders own 32.9% of supply. Of that, 0.9% burned, 22.2% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 6.5% in wallets, 3.4% in other contracts. 27,567 holders in total.QA-HOLDERS
Issue
The ten largest holders own 32.9% of supply. Of that, 0.9% burned, 22.2% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 6.5% in wallets, 3.4% in other contracts. 27,567 holders in total.
Fix
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Status
Acknowledged
InfoNot listed by any independent source
27,567 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY
Issue
27,567 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Fix
Match the contract address against the project's official channels before trading.
Status
Acknowledged
InfoLiquidity burned — cannot be withdrawn
99.3% of the pool's LP is burned or time-locked. 99.3% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 0.7% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool.QA-LIQUIDITY
Issue
99.3% of the pool's LP is burned or time-locked. 99.3% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone. 0.7% is held, unlocked, by 1 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool.
Fix
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Status
Acknowledged
InfoThe market for this token
Liquidity $31K (DexScreener, all pools). 24h trading volume $195K (DexScreener, all pools).QA-MARKET
Issue
Liquidity $31K (DexScreener, all pools). 24h trading volume $195K (DexScreener, all pools).
Fix
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Status
Acknowledged
InfoAsset class: Meme token
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: meme vocabulary in name/ticker (shib). Tokenomics — Supply: mintable with no on-chain cap found. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: 2% on buy, 2% on sell. Market: $31K of DEX liquidity across 1 pools. Launch: 2 days of market history.QA-PROFILE
Issue
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: meme vocabulary in name/ticker (shib). Tokenomics — Supply: mintable with no on-chain cap found. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: 2% on buy, 2% on sell. Market: $31K of DEX liquidity across 1 pools. Launch: 2 days of market history.
Fix
Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
Status
Acknowledged
InfoRecently launched — 2 days of market history
The token's oldest DEX pool is 2 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT
Issue
The token's oldest DEX pool is 2 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Fix
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Status
Acknowledged
Analysis
AI Copilotas of audit · Nov 6The architecture relies on a centralized controller model to manage liquidity and tax processing. 7.1 Architecture and 7.2 Code Security are generally sound, utilizing OpenZeppelin standards for ERC-20 and reentrancy protection. However, 7.3 Access Control is overly permissive, allowing administrative functions to alter fundamental contract state. 7.6 External interactions are handled via standard interfaces, though the reliance on external price oracles requires careful monitoring.
7.4 Economic and 7.5 Governance aspects are heavily centralized. Privileged addresses have the power to mint supply and adjust tax rates, which directly impacts the value proposition for holders. There are no on-chain governance mechanisms to limit these powers, creating a high dependency on the integrity of the administrative keys.
7.7 Upgrades are not supported as the contract is not a proxy. 7.8 Operations are managed through fixed administrative functions. The lack of upgradeability ensures the contract logic remains immutable, preventing future unauthorized logic changes.
It is recommended to transition administrative powers to a multi-signature wallet or a decentralized governance contract to mitigate the risk of single-point-of-failure.
Additionally, implementing timelocks on sensitive functions like tax adjustments and minting would provide transparency and protection for the community. Users should be aware that the contract owner and designated treasury addresses have significant control over the token's economic state. We advise monitoring the activity of these privileged addresses and ensuring that the protocol's operational transparency meets your risk tolerance.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Nov 6, 202678High
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Frequently Asked Questions
What is the SHIB contract address?
The SHIB AGENT (SHIB) contract on BNB Chain is 0x78573ab46e5436e126d3ea1fdef8766cce4efd2b. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Is SHIB AGENT a scam?
Quantum Audit's risk score for SHIB AGENT is 78/100 (High risk) as of Nov 6, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: Mintable; Liquidity lock: Locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 2% / 2%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Is SHIB liquidity locked?
Liquidity lock: Locked (as of Nov 6, 2026). Total DEX liquidity: $30.6K.
Who holds SHIB?
As of Nov 6, 2026, the 10 largest holders own 32.9% of the supply across 27,567 holders. The Holders section on this page shows who they are by holder type.
Would You Like a More Detailed Audit of SHIB AGENT?
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Add your links and get it Verified