On-chain security analysis — is it a scam or legit?
EthereumThe SHOGGOTH contract is a standard ERC-20 token with additional tax and transfer restriction features.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Nov 3, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
The manualSwap function, controlled by the taxWallet, manages the internal state of the contract. If misused, this function could potentially disrupt the token's ability to process transfers or sales by altering the internal swap state.
Implement a time-lock or multi-signature requirement for the taxWallet to prevent unilateral changes to the contract's transfer logic.
Unresolved
The taxWallet can modify the buy and sell fees via the reduceFee function. This allows the controller to change the economic cost of trading the token at any time.
Establish a clear, public policy or hard-coded limit on the maximum fee that the taxWallet can set to protect users from sudden fee spikes.
Unresolved
The addBots and delBots functions allow for the blacklisting of specific addresses. Because ownership has been renounced, these functions are effectively locked and cannot be called by anyone.
None required, as the renouncement of ownership has rendered these functions permanently inaccessible.
Unresolved
The removeLimits function allows for the removal of transaction and wallet size restrictions. Since ownership is renounced, this function is now permanently disabled.
None required, as the renouncement of ownership has rendered this function permanently inaccessible.
Unresolved
The ten largest holders own 44.9% of supply. Of that, 26.8% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 9.1% in wallets, 9.0% in other contracts. 553 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
553 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the LP tokens were sent to a burn address — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $23K (DexScreener, all pools). 24h trading volume $144K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $23K of DEX liquidity across 2 pools. Launch: 847 days of market history.
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Acknowledged
The SHOGGOTH contract is a standard ERC-20 token with additional tax and transfer restriction features. Ownership has been renounced, effectively disabling administrative functions previously restricted to the owner. However, a separate 'taxWallet' address retains control over fee adjustments and liquidity swapping, which introduces centralized control over the token's economic parameters.
The contract implements standard ERC-20 functionality with clean logic for transfers and approvals. 7.1 Architecture follows a monolithic pattern, while 7.2 Code Security is maintained through the use of OpenZeppelin-style arithmetic libraries. 7.3 Access Control is partially disabled due to renounced ownership, though the taxWallet remains a central point of authority.
7.4 Economic parameters are governed by the taxWallet, which can modify fees and trigger liquidity swaps. 7.5 Governance is non-existent as ownership is renounced, preventing community oversight of the remaining privileged functions. 7.6 External dependencies are minimal, relying only on standard library functions for math and context.
7.7 Upgrades are not supported as the contract is not a proxy. 7.8 Operations are limited to the taxWallet's ability to manage fees and swap tokens for ETH. No further changes to the contract logic are possible.
Investors should be aware that the taxWallet address maintains significant control over the token's economic flow, including the ability to adjust fees and execute manual swaps.
Since ownership is renounced, the community cannot influence these settings, making the taxWallet's behavior the primary factor in the token's economic stability. We recommend that the taxWallet address be transitioned to a multi-signature wallet or a decentralized DAO contract to mitigate the risk of a single point of failure. Ensure that all future interactions with the taxWallet are transparent to the token holders.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
