Quantum Audit Logo

Is VAIOT Token Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

VAIOT Token VAI
0xd13c…395c
Ethereum
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
Executive SummaryAI Copilot

The VAIToken contract is a standard ERC-20 token implementation. It lacks privileged functions for central control over token transfers or supply. A key finding identifies a medium-severity issue where Ether sent to the contract can become permanently inaccessible due to the absence of a withdrawal mechanism.

3 Medium3 Informational
Volume 24h
$208.7K
Liquidity
$107.4K
Price
$0.004793
Token Age
4y
Top 10 Holders
47.0%

Security Findings

Medium

Ether (ETH) sent to the contract can be permanently lost

CD-01The VAIToken contract has a function, `executeMetaTransaction`, that allows it to receive Ether (ETH). However, the contract lacks any function to send this received ETH back out. This means if any ETH is accidentally or intentionally sent to the VAIToken contract, it will be permanently locked and inaccessible to anyone, including the contract deployer or token holders.
IssueThe VAIToken contract has a function, `executeMetaTransaction`, that allows it to receive Ether (ETH). However, the contract lacks any function to send this received ETH back out. This means if any ETH is accidentally or intentionally sent to the VAIToken contract, it will be permanently locked and inaccessible to anyone, including the contract deployer or token holders.
FixTo prevent loss of funds, a function should be added to the VAIToken contract that allows an authorized party (e.g., an administrator) to withdraw any ETH received. Alternatively, users should be explicitly warned not to send ETH directly to this token contract.
StatusUnresolved
Medium

Liquidity not locked

QA-LIQUIDITY0.0% of the pool's LP is burned or time-locked. 99.6% is held, unlocked, by 9 address(es) other than the owner/deployer. One of them — a contract, 0x454c…169e — holds 56.8% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
Issue0.0% of the pool's LP is burned or time-locked. 99.6% is held, unlocked, by 9 address(es) other than the owner/deployer. One of them — a contract, 0x454c…169e — holds 56.8% and can remove that share at once; who controls it is not visible on-chain, so it is not treated as an independent provider. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Medium

The market for this token

QA-MARKETLiquidity $107K (DexScreener, all pools). 24h trading volume $762K (CoinGecko, all markets, daily snapshot). 24h trading volume $209K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $3.60 on 2021-04-01; the price is now 99.7835% below it.
IssueLiquidity $107K (DexScreener, all pools). 24h trading volume $762K (CoinGecko, all markets, daily snapshot). 24h trading volume $209K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $3.60 on 2021-04-01; the price is now 99.7835% below it.
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 47.0% of supply. Of that, 2.7% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 12.7% in wallets, 31.6% in other contracts. 15,352 holders in total.
IssueThe ten largest holders own 47.0% of supply. Of that, 2.7% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 12.7% in wallets, 31.6% in other contracts. 15,352 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Identity verified by independent sources

QA-IDENTITYListed on CoinGecko as VAIOT (VAI), market cap $3M, rank #2066. Traded on Binance. 15,352 holders. Verified by: exchange listings.
IssueListed on CoinGecko as VAIOT (VAI), market cap $3M, rank #2066. Traded on Binance. 15,352 holders. Verified by: exchange listings.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $107K of DEX liquidity across 1 pools. Launch: 1643 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: an owner that could not be resolved. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $107K of DEX liquidity across 1 pools. Launch: 1643 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged

Category Ratings

TechnicalLow10/10

The VAIToken contract implements the standard ERC-20 token functionality, allowing for transfers, approvals, and balance queries. It does not have any privileged functions that can alter the token's core behavior or supply. A notable technical issue is that the contract can receive Ether via `executeMetaTransaction` but lacks a mechanism to withdraw it, leading to potential permanent loss of funds (7.2 Code Security).

GovernanceHigh2/10

The contract exhibits a decentralized access control model for its core ERC-20 functions, as there are no privileged roles that can control transfers or modify token balances (7.3 Access Control). The economic model is straightforward, based on a standard ERC-20 token with no special minting, burning, or fee mechanisms controlled by an owner (7.4 Economic). There are no governance features implemented (7.5 Governance).

UpgradesLow8/10

The VAIToken contract is not designed as an upgradeable proxy, meaning its logic cannot be modified or updated after deployment (7.7 Upgrades). This provides immutability but also means any discovered vulnerabilities or desired feature changes would require a new contract deployment.

Security Checklist

Contract VerifiedPass
Ownership Renounced?
No Mint FunctionPass
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

12.7% in wallets31.6% in contracts
Effective Concentration25.3%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

Top-1 Unlocked Holder56.8%
Top-3 Unlocked98.6%

Key Addresses

Deployer
0xdd30…06cb
Unlocked LP Held By
0x454c…169e0xcd8e…e4180xfdfa…bb720x638d…17800xbbfe…61620x8392…43e00x1138…76740xda59…8a1e0x5cba…4cfd0x7bb8…9a6b

What Raised This Score

  • Liquidity NOT locked (100% of the pool) — who holds it cannot be verified
  • Top-10 concentration > 20% (47.0% total → 25.3% effective; 12.7% in EOAs, 31.6% in contracts; 2.7% burned, locked or in pools excluded)
  • Code: Ether (ETH) sent to the contract can be permanently lost (Medium, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

wojakLow RiskBalancer (BAL)Low RiskCateLow RiskApeCoin (APE)Low RiskLinqAI (LNQ)Low RiskLayerZero (ZRO)Low Risk

Would You Like a More Detailed Audit of VAIOT Token?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit