The TreehouseToken is a standard ERC-20 implementation utilizing UUPS proxy patterns and OpenZeppelin's upgradeable library. The contract includes governance capabilities via ERC-20Votes and is managed by a Timelock controller. No critical or high-severity vulnerabilities were identified in the provided source code.

On-chain security analysis — is it a scam or legit?
Is Treehouse Token Safe?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →The TreehouseToken is a standard ERC-20 implementation utilizing UUPS proxy patterns and OpenZeppelin's upgradeable library.
Read the full analysis- Upgradeable proxy — the admin can replace the logic
- Liquidity not locked
- Top-10 concentration > 30%
Exact factors
- Upgradeable proxy — the admin can replace the logic
- Liquidity NOT locked (100% of the pool; this pool is 52% of DEX liquidity) — who holds it cannot be verified
- Top-10 concentration > 30% (87.6% total → 45.1% effective; 16.8% in EOAs, 70.8% in contracts)
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Oct 24Holders
as of audit · Oct 24, 2026- Contractstreasury, vesting, bridge, staking70.8%
- Walletsanonymous holders, free to sell16.8%
- Everyone else10,424 holders12.4%
How holder types affect the score
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 24, 2026
Liquidity
as of audit · Oct 24- Balancer v3WETHAnalysed$266.9K52.4%
- Uniswap v4USDC$226.6K44.5%
- Balancer v3tETH$11.4K2.2%
- Uniswap v4USDC$4.4K0.9%
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0xb494…3b91Security Findings
MediumLiquidity not locked
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0xb494…3b91 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 52% of the token's DEX liquidity; the other pools were not assessed.QA-LIQUIDITY
Issue
0.0% of the pool's LP is burned or time-locked. 100.0% is held, unlocked, by 1 address(es) other than the owner/deployer. One of them — a contract, 0xb494…3b91 — holds 100.0% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 52% of the token's DEX liquidity; the other pools were not assessed.
Fix
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Status
Acknowledged
InfoNo issues identified in the reviewed source
The verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint/owner authority, mint capability, holder concentration) were applied separately and feed the risk score.I-01
Issue
The verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint/owner authority, mint capability, holder concentration) were applied separately and feed the risk score.
Fix
Re-check after any contract upgrade or ownership change, both of which can alter behaviour without changing this page.
Status
Acknowledged
InfoWho holds the supply
The ten largest holders own 87.6% of supply. What remains: 16.8% in wallets, 70.8% in other contracts. 10,434 holders in total.QA-HOLDERS
Issue
The ten largest holders own 87.6% of supply. What remains: 16.8% in wallets, 70.8% in other contracts. 10,434 holders in total.
Fix
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Status
Acknowledged
InfoIdentity verified by independent sources
Listed on CoinGecko as Treehouse (TREE), market cap $7M, rank #1428. Traded on Coinbase. 10,434 holders. Verified by: exchange listings.QA-IDENTITY
Issue
Listed on CoinGecko as Treehouse (TREE), market cap $7M, rank #1428. Traded on Coinbase. 10,434 holders. Verified by: exchange listings.
Fix
Match the contract address against the project's official channels before trading.
Status
Acknowledged
InfoThe market for this token
Liquidity $509K (DexScreener, all pools). 24h trading volume $12.7M (CoinGecko, all markets, daily snapshot). 24h trading volume $937K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $1.36 on 2025-07-29; the price is now 96.7206% below it.QA-MARKET
Issue
Liquidity $509K (DexScreener, all pools). 24h trading volume $12.7M (CoinGecko, all markets, daily snapshot). 24h trading volume $937K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $1.36 on 2025-07-29; the price is now 96.7206% below it.
Fix
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Status
Acknowledged
InfoAsset class: Governance token
A token whose main use is voting on a protocol's decisions (delegation and vote checkpoints in its code). The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Liquid Staking Governance Tokens. Tokenomics — Supply: fixed — the contract has no mint function. Control: a timelock with a 120h delay. Code: upgradeable proxy. Fees: no buy or sell tax. Market: $509K of DEX liquidity across 4 pools. Launch: 456 days of market history.QA-PROFILE
Issue
A token whose main use is voting on a protocol's decisions (delegation and vote checkpoints in its code). The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Liquid Staking Governance Tokens. Tokenomics — Supply: fixed — the contract has no mint function. Control: a timelock with a 120h delay. Code: upgradeable proxy. Fees: no buy or sell tax. Market: $509K of DEX liquidity across 4 pools. Launch: 456 days of market history.
Fix
Check how much of the voting supply insiders hold and what governance can change.
Status
Acknowledged
Analysis
AI Copilotas of audit · Oct 24The architecture follows industry-standard patterns (7.1 Architecture) using OpenZeppelin's battle-tested libraries. Code security (7.2) is high due to the use of audited upgradeable contracts and standard ERC-20 implementations. Access control (7.3) is correctly implemented using Ownable2Step, preventing accidental ownership loss. No external dependencies (7.6) were found to introduce risks.
Economic (7.4) and Governance (7.5) parameters are robust, as the contract is managed by a 5-day Timelock. This ensures that any administrative changes, such as setting the CCIP admin, are subject to a mandatory delay. The inclusion of ERC-20Votes allows for decentralized governance participation.
The contract utilizes the UUPS proxy pattern (7.7), which is the current industry standard for upgradeability. Operations (7.8) are protected by the Timelock, ensuring that upgrades cannot be performed unilaterally or instantaneously. The implementation is correctly initialized, and the proxy structure is standard.
The protocol is well-structured and follows security best practices.
We recommend maintaining the current Timelock configuration for all administrative actions and ensuring that the private keys for the Timelock controller are stored in a multi-signature wallet or hardware security module.
Contract & Record
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
- Oct 24, 202636Medium
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Frequently Asked Questions
What is the TREE contract address?
The Treehouse Token (TREE) contract on Ethereum is 0x77146784315ba81904d654466968e3a7c196d1f3. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Is Treehouse Token a scam?
Quantum Audit's risk score for Treehouse Token is 36/100 (Medium risk) as of Oct 24, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: No mint; Liquidity lock: Not locked; Upgradeability: Upgradeable; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Is TREE liquidity locked?
Liquidity lock: Not locked (as of Oct 24, 2026). Total DEX liquidity: $509.3K.
Who holds TREE?
As of Oct 24, 2026, the 10 largest holders own 87.6% of the supply across 10,434 holders. The Holders section on this page shows who they are by holder type.
Would You Like a More Detailed Audit of Treehouse Token?
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page