Is UPTOBER Safe? Smart Contract Security Analysis

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

I-01This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

IssueThis token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.

FixRead the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

StatusAcknowledged

Category Ratings

TechnicalMedium6/10

The UPTOBER token operates under the standard spl-token program. Key authorities, including the Mint Authority and Freeze Authority, are both revoked (None), ensuring no new tokens can be minted and no accounts can be frozen post-launch. The token has a supply of 903,214,665,153,257 with 6 decimals. No Token-2022 extensions such as transfer hooks, permanent delegates, or default frozen account states are active, and the token is not balance_mutable, closable, freezable, or non_transferable, indicating standard token behavior.

GovernanceHigh3/10

The token's economic stability appears robust. Top 10 token accounts hold 27.01% of the supply, which is below thresholds for significant holder concentration risk. Total DEX liquidity stands at $141,322 USD, providing reasonable depth for trading. The 24-hour volume of $76,955 USD results in a normal Volume/Liquidity Ratio of 0.54, not suggesting wash trading. The DEX pair has been active for 692 days, indicating a mature market presence.

UpgradesMedium5/10

The token's immutability is well-established, as both the Mint Authority and Freeze Authority are revoked. This prevents any future changes to the token's supply or transfer restrictions by an administrative key. Furthermore, the metadata_mutable flag is False, ensuring that the token's name, symbol, or image cannot be altered post-launch. No Token-2022 specific upgradeability concerns, such as upgradable transfer fees or hooks, are present.

Security Checklist

1/4 checks passed

Contract VerifiedFail

No Mint Function?

Liquidity LockedFail

Not a ProxyPass

Liquidity Depth

$165.1K across 3 pairs

RaydiumSOLanalysed$164.9K Orca wpUSDC$192 PumpswapIMT$2

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Burned100.0% · ≈ permanent lock

What Raised This Score

5 factors

Ownership status UNKNOWN (owner could not be resolved)
Mint capability UNKNOWN (implementation ABI unreadable)
Contract source NOT verified
Top-10 concentration > 20% (28.6% total → 28.6% effective; 28.6% in EOAs, 0.0% in contracts — mild)
Liquidity NOT locked (owner can withdraw — rug-pull risk)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Is UPTOBER Safe?