Early-stage security check — honeypot & rug-pull analysis

Is 发财狗 a Scam?

BNB Chain

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked Nov 8, 2026 · 1 audit on recordNew Launch · 23h old

Chart

71/ 100

High RiskHow is this score calculated?

How the score breaks downratings: 10 is safest

Technical6/10 Governance6/10 Upgrades6/10 Checks passed6 of 7 Findings1 Critical · 1 High · 1 Medium · 9 Info12

SummaryAI Copilot

The RichDog contract is a standard ERC-20 token with additional dividend distribution and fee-on-transfer logic.

Read the full analysis

What raised the score

Code: Unauthorized Token Movement
Code: Reentrancy Vulnerability
Code: Ignored Transfer Results

Exact factors

Code: Unauthorized Token Movement (Critical, static analysis)
Code: Reentrancy Vulnerability (Medium, static analysis)
Code: Ignored Transfer Results (High, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (23h old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Nov 86 of 7 checks passed

Contract verifiedVerified

OwnershipRenounced

MintNo mint

Liquidity lockLocked

UpgradeabilityFixed code

HoneypotNone found

Buy / sell tax3.3% / 3.3%

Holders

as of audit · Nov 8, 202642,295 holders

ContractsWalletsLockedDEX poolsEveryone elseBubble area = share of supply

91.0%of supply sits with the top 10 holders

Contractstreasury, vesting, bridge, staking0.3%
Walletsanonymous holders, free to sell1.1%
Lockedtime-locked86.8%
DEX poolsthe pools' own liquidity2.9%
Everyone else42,285 holders9.0%

Effective concentrationwhat the score reads1.2%

How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Nov 8, 2026

Liquidity

as of audit · Nov 8$171.1K

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$171.1KShare of depth100.0%

LP Locked97.8% · Null Address, PinkLock02

Top-1 Unlocked Holder1.7%

Unlocked LP held by

0xaa3a…fc890xf373…0f250x0ed9…9706

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

1 Critical1 High1 Medium9 Info

Critical

Unauthorized Token Movement

The _buy and _sell functions utilize transferFrom in a manner that may allow unauthorized movement of tokens from approving addresses.CD-01

Issue

The _buy and _sell functions utilize transferFrom in a manner that may allow unauthorized movement of tokens from approving addresses.

Fix

Implement strict access control or validation on the source address for all transferFrom operations.

Status

Unresolved

High

Ignored Transfer Results

The contract ignores the boolean return values of ERC-20 transfers in _buy, _sell, deposit, distributeDividend, and trigger functions. This can lead to silent failures where the contract assumes a transfer succeeded when it actually failed.CD-03

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

42,295 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

42,295 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

Liquidity time-locked

97.8% of the pool's LP is burned or time-locked. 97.8% is locked in PinkLock02 until 07 Nov 2028 (730 days). Until then nobody — the project included — can withdraw it unless the locker contract itself is flawed; after that date the lock's owner can. 2.2% is held, unlocked, by 2 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.QA-LIQUIDITY

Issue

Fix

Check the lock's end date and beneficiary on the locker's own page before relying on it.

Status

Acknowledged

Info

The market for this token

Liquidity $171K (DexScreener, all pools). 24h trading volume $450K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $171K (DexScreener, all pools). 24h trading volume $450K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: 3.3% on buy, 3.3% on sell. Market: $171K of DEX liquidity across 1 pools. Launch: under a day of market history.QA-PROFILE

Issue

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Info

Recently launched — less than a day of market history

The token's oldest DEX pool is less than a day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT

Issue

Fix

Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.

Status

Acknowledged

Analysis

AI Copilotas of audit · Nov 8

Executive SummaryWhat the contract is and what the review found

The RichDog contract is a standard ERC-20 token with additional dividend distribution and fee-on-transfer logic. Ownership has been renounced, effectively locking the administrative functions that previously controlled fee structures, trading limits, and external contract dependencies. While this prevents future rug-pulls via configuration changes, the codebase contains critical vulnerabilities related to token handling and reentrancy that remain present in the immutable bytecode.

Technical6/10Medium risk

The architecture relies on external calls for dividend distribution and router interactions, which introduces significant risk. 7.1 Architecture: The contract uses a custom TokenDistributor pattern. 7.2 Code Security: The implementation fails to check the return values of ERC-20 transfers, potentially leading to silent failures. 7.3 Access Control: Ownership is renounced, preventing further administrative changes. 7.6 External: The contract interacts with external routers and dividend distributors, creating potential reentrancy vectors.

Governance6/10Medium risk

7.4 Economic: The token utilizes a fee-on-transfer model with dividend distribution. 7.5 Governance: Ownership has been renounced, meaning no further changes to the economic parameters can be made by the deployer. The system is now fully autonomous and immutable.

Upgrades6/10Medium risk

7.7 Upgrades: The contract is not upgradeable. 7.8 Operations: The 'dev' address retains the ability to rescue tokens, which is the only remaining operational privilege.

Final RecommendationWhat to do about this score

The protocol should be considered high-risk due to the identified critical and high-severity vulnerabilities.

Since ownership is renounced, these issues cannot be patched via contract updates. Users should exercise extreme caution as the lack of return value checks on transfers and potential reentrancy vulnerabilities could lead to loss of funds during trading or dividend distribution events.

Contract & Record

1 audit on record

TypeStaking, Router, Token

NetworkBNB Chain

Token age23h

Contract0x939d…8888

Deployer0xc46e…4763

Badge for your website

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History

Nov 8, 202671High

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the 发财狗 contract address?

The 发财狗 contract on BNB Chain is 0x939d1cffbc9a364b0ac5c4aa07747d9bc8888888. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.