Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is Tilly Safe?

TILLYSolana
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Sep 22, 2026 · 2 audits on record
Chart
Low RiskHow is this score calculated?
How the score breaks downratings: 10 is safest
Technical10/10Governance5/10Upgrades10/10Checks passed4 of 4Findings1 Info1
SummaryAI Copilot

The Tilly SPL Token Mint is configured with both mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts.

Read the full analysis
What raised the score
  • Top-10 concentration > 70%
  • Liquidity < $50k
  • Token age < 30 days
Exact factors
  • Top-10 concentration > 70% (83.1% total → 83.1% effective; 83.1% in EOAs, 0.0% in contracts — extreme)
  • Liquidity < $50k ($15,792 across 2 pairs — thin market)
  • Token age < 30 days (still settling)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Sep 224 of 4 checks passed
Contract verifiedVerified
MintNo mint
Liquidity lockLocked
UpgradeabilityFixed code

Holders

as of audit · Sep 22, 2026
83.1%Top 10 holders16.9%Everyone else
83.1%Top 10 holders16.9%Everyone else
Top 10 holdersEveryone elseBubble area = share of supply
83.1%of supply sits with the top 10 holders
  • Top 10 holdersthe ten largest balances83.1%
  • Everyone elsethe rest of the supply16.9%

Holder balances as recorded by the audit of Sep 22, 2026

Liquidity

as of audit · Sep 22$15.8K across 2 pairs

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$15.8KShare of depth100.0%

Security Findings

1 Info
Info

No code-level findings — an SPL mint exposes no auditable program source

This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.I-01

Issue

This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

Fix

Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

Status

Acknowledged

Analysis

AI Copilotas of audit · Sep 22
Executive SummaryWhat the contract is and what the review found

The Tilly SPL Token Mint is configured with both mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts. It utilizes the Token-2022 program without critical extensions like permanent delegates or transfer hooks. Liquidity is moderate, and holder concentration is below significant thresholds. Third-party risk registry data reported no adverse flags, though specific holder distribution details were unavailable from chain-native RPC.

Technical10/10Low risk

The Tilly token is an SPL Token-2022 mint with a total supply of 999,694,397.351732 tokens across 6 decimals. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no accounts can be frozen post-launch. The token does not utilize a transfer hook, permanent delegate, or default account state frozen, which simplifies its on-chain behavior and reduces potential for unexpected interactions (7.1 Architecture, 7.3 Access Control).

Governance5/10Medium risk

The token exhibits a holder concentration where the top 10 accounts hold 32.48% of the supply, which is below the thresholds for high or medium concentration risks (7.4 Economic). Total DEX liquidity stands at $49,395, which is moderate. The 24-hour volume of $225,155 results in a Volume/Liquidity Ratio of 4.56, indicating normal trading activity without signs of wash trading. The DEX pair has been active for 12 days, providing a short but established track record (7.6 External).

Upgrades10/10Low risk

The mint authority and freeze authority are both revoked, meaning the token's supply is fixed and no accounts can be frozen, preventing future changes to these critical parameters. The token is built on the spl-token-2022 program but does not have a transfer hook or default account state frozen. Furthermore, metadata is immutable, ensuring that the token's name, symbol, or image cannot be altered post-launch (7.7 Upgrades).

Final RecommendationWhat to do about this score

Holders should verify on-chain that the mint authority and freeze authority remain revoked to confirm the fixed supply and unfreezable nature of the token.

Monitor DEX liquidity and holder distribution over time for any significant changes that could impact market stability. While no critical risks were identified, ongoing vigilance regarding market dynamics is always prudent for any token holding.

Contract & Record

2 audits on record
TypeSPL Token-2022
NetworkSolana
Token age12d
Contract6Z6qeA…pump
Badge for your website
Tilly security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Sep 22, 202623Low
  2. Sep 4, 202673High
  3. Jul 29, 202652Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Related Audits

6 more on the recordAll audits
Collector CryptCARDS · Solana23LowKiyomasa清正 · Solana23LowReligionSolana23LowmanletSolana23LowNonchalant HorseHORSE · Solana23LowRONINSolana23Low

Would You Like a More Detailed Audit of Tilly?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page