Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is Unity USD Safe?

UUSDBNB Chain
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 28, 2026 · 1 audit on record
SummaryAI Copilot

The UUSD contract is a standard ERC-20 implementation utilizing the Transparent Proxy pattern.

Read the full analysis
What raised the score
  • Issuer controls retained
Exact factors
  • Issuer controls retained (admin key, mint, freeze, pause) — counterparty risk on a known issuer, not a rug vector

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Oct 284 of 7 checks passed
Contract verifiedVerified
OwnershipRetained
MintMintable
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 28, 2026103,034 holders
84.5%Contracts6.0%9.5%Everyone else
84.5%Contracts6.0%9.5%
ContractsDEX poolsEveryone elseBubble area = share of supply
90.5%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking84.5%
  • DEX poolsthe pools' own liquidity6.0%
  • Everyone else103,024 holders9.5%
Effective concentrationwhat the score reads33.8%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Oct 28, 2026

Liquidity

as of audit · Oct 28$31.71M across 30 pairs
LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$14.70MShare of depth46.4%
Top-1 Unlocked Holder100.0%
Top-3 Unlocked100.0%
Unlocked LP held by
0x37c0…87260x8096…f21d0xb08d…989f0x9c51…909a0xd0d8…b18e

Security Findings

5 Info
Info

Centralized Control Over Account Transfers

The contract includes 'freeze' and 'unfreeze' functions that allow the admin or owner to block specific addresses from transferring or selling their tokens. This grants the controller the power to censor individual users.CP-06

Issue

The contract includes 'freeze' and 'unfreeze' functions that allow the admin or owner to block specific addresses from transferring or selling their tokens. This grants the controller the power to censor individual users.

Fix

Implement a time-lock or a multi-step governance process for freezing accounts to prevent unilateral or malicious actions by a single compromised admin key.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 90.5% of supply. Of that, 6.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.0% in wallets, 84.5% in other contracts. 103,034 holders in total. For a verified reference asset the largest holders are custodians, exchanges and bridges; concentration is reported, not scored.QA-HOLDERS

Issue

The ten largest holders own 90.5% of supply. Of that, 6.0% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 0.0% in wallets, 84.5% in other contracts. 103,034 holders in total. For a verified reference asset the largest holders are custodians, exchanges and bridges; concentration is reported, not scored.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Identity verified by independent sources

Listed on CoinGecko as Unity USD (UUSD), market cap $100M, rank #277. 103,034 holders. Verified by: CoinGecko.QA-IDENTITY

Issue

Listed on CoinGecko as Unity USD (UUSD), market cap $100M, rank #277. 103,034 holders. Verified by: CoinGecko.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $31.7M (DexScreener, all pools). 24h trading volume $2.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $909K (DexScreener, all pools).QA-MARKET

Issue

Liquidity $31.7M (DexScreener, all pools). 24h trading volume $2.6M (CoinGecko, all markets, daily snapshot). 24h trading volume $909K (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

Asset class: Stablecoin — synthetic

A token designed to hold a fixed value (usually $1). Its safety rests on what backs it and on who can mint, freeze or pause it. Scored as an established reference asset: its identity is verified, so the issuer's or protocol's controls (listed as findings) are real and are priced once as counterparty risk, and LP locks and holder concentration are not scored — its pools belong to market makers and its largest holders are exchanges, bridges and custody. Basis: CoinGecko category: Stablecoins. Tokenomics — Supply: issued and redeemed by the issuer against its backing. Control: a 4-of-7 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $31.7M of DEX liquidity across 30 pools. Launch: 243 days of market history.QA-PROFILE

Issue

A token designed to hold a fixed value (usually $1). Its safety rests on what backs it and on who can mint, freeze or pause it. Scored as an established reference asset: its identity is verified, so the issuer's or protocol's controls (listed as findings) are real and are priced once as counterparty risk, and LP locks and holder concentration are not scored — its pools belong to market makers and its largest holders are exchanges, bridges and custody. Basis: CoinGecko category: Stablecoins. Tokenomics — Supply: issued and redeemed by the issuer against its backing. Control: a 4-of-7 multisig. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $31.7M of DEX liquidity across 30 pools. Launch: 243 days of market history.

Fix

Check what backs the peg and who controls supply: reserve attestations for an issuer-backed coin, collateral and governance for a protocol coin.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 28
Executive SummaryWhat the contract is and what the review found

The UUSD contract is a standard ERC-20 implementation utilizing the Transparent Proxy pattern. It includes administrative controls for minting, pausing, and account freezing. The protocol relies on a 4-of-7 multisig for ownership, which provides a strong security baseline for administrative actions.

Technical10/10Low risk

The architecture follows industry-standard OpenZeppelin patterns for upgradeable tokens. 7.1 Architecture and 7.2 Code Security are robust, utilizing well-audited libraries for ERC-20 and EIP-712 compliance. 7.3 Access Control is strictly enforced via multisig-protected owner and admin roles. 7.6 External dependencies are minimal and well-vetted.

Governance9/10Low risk

7.4 Economic and 7.5 Governance rely on centralized multisig control. While the 4-of-7 multisig mitigates single-point-of-failure risks, the ability to freeze accounts and mint tokens creates significant trust requirements for token holders. These mechanisms are standard for regulated stablecoin-like assets but represent a centralization risk.

Upgrades10/10Low risk

7.7 Upgrades are managed via a Transparent Proxy pattern with a dedicated ProxyAdmin. This ensures that logic updates are controlled by the multisig, preventing unauthorized implementation changes. 7.8 Operations are supported by clear event logging for all administrative state changes.

Final RecommendationWhat to do about this score

The protocol should maintain the current multisig configuration and ensure that the keys are distributed across geographically and organizationally diverse signers.

Transparency regarding the criteria for account freezing should be provided to users to mitigate concerns regarding centralized control. Regular audits of the implementation contract should be conducted prior to any proxy upgrades. Ensure that the multisig signers follow strict operational security protocols to prevent key compromise.

Contract & Record

1 audit on record
TypeTransparentUpgradeableProxy
NetworkBNB Chain
Token age8mo
Contract0x61a1…0000
Deployer0xd6d3…4bef
Badge for your website
Unity USD security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Oct 28, 202610Low

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the UUSD contract address?

The Unity USD (UUSD) contract on BNB Chain is 0x61a10e8556bed032ea176330e7f17d6a12a10000. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is Unity USD a scam?

Quantum Audit's risk score for Unity USD is 10/100 (Low risk) as of Oct 28, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: Mintable; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Is UUSD liquidity locked?

Liquidity lock: Not locked (as of Oct 28, 2026). Total DEX liquidity: $31.71M.

Who holds UUSD?

As of Oct 28, 2026, the 10 largest holders own 90.5% of the supply across 103,034 holders. The Holders section on this page shows who they are by holder type.

Would You Like a More Detailed Audit of Unity USD?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Add your links and get it Verified