Quantum Audit Logo
Launch App

Is VELLORA Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

VELLORA VELL
0x40f4…53f2
BNB Chain
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Low Risk
Executive SummaryAI Copilot

The VELLORA token contract is an ERC-20 implementation with integrated transfer fees and administrative controls. The audit identified a medium-severity issue related to the owner's ability to change transfer fees and a low-severity issue concerning potential rounding loss in internal calculations. The contract's architecture grants significant centralized control to the owner and marketing manager over key economic and operational parameters.

1 Medium1 Low5 Informational
Volume 24h
$65.3K
Liquidity
$361.5K
Price
$0.008281
Token Age
4mo
Top 10 Holders
61.3%

Security Findings

1 Med1 Low5 Info
Medium

Owner can change token transfer fees

CP-07The owner of the VELLORA token contract has the ability to change the fees applied to token transfers. Specifically, the `setFees` function allows the owner to adjust the `buyFee`, `sellFee`, and `burnFee` that are deducted from transactions. This means the owner can unilaterally increase or decrease the cost of transacting with VELLORA tokens.
IssueThe owner of the VELLORA token contract has the ability to change the fees applied to token transfers. Specifically, the `setFees` function allows the owner to adjust the `buyFee`, `sellFee`, and `burnFee` that are deducted from transactions. This means the owner can unilaterally increase or decrease the cost of transacting with VELLORA tokens.
FixToken holders should be aware that the owner has significant control over the token's economic parameters. It is recommended that the project clearly communicate its policy regarding fee changes and consider implementing a timelock or multi-signature wallet for such critical functions to introduce a delay and require broader consensus.
StatusUnresolved
Low

Potential for minor rounding errors in calculations

CD-01The contract's internal calculations, specifically in the `slitherConstructorVariables` (likely related to initial state setup or internal constant calculations), might perform division before multiplication. This order of operations can lead to minor rounding losses, potentially resulting in slightly less precise outcomes for certain calculations.
IssueThe contract's internal calculations, specifically in the `slitherConstructorVariables` (likely related to initial state setup or internal constant calculations), might perform division before multiplication. This order of operations can lead to minor rounding losses, potentially resulting in slightly less precise outcomes for certain calculations.
FixWhile often minor, it's best practice to ensure calculations prioritize multiplication before division to maintain maximum precision. The project should review its internal arithmetic operations to prevent any potential rounding discrepancies, especially for sensitive financial calculations.
StatusUnresolved
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 61.3% of supply. Of that, 35.0% locked, 4.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 15.3% in wallets, 6.7% in other contracts. 2,744 holders in total.
IssueThe ten largest holders own 61.3% of supply. Of that, 35.0% locked, 4.4% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 15.3% in wallets, 6.7% in other contracts. 2,744 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Listed, but not independently verified

QA-IDENTITYListed on CoinGecko as VELLORA (VELL). 2,744 holders.
IssueListed on CoinGecko as VELLORA (VELL). 2,744 holders.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Liquidity time-locked

QA-LIQUIDITY100.0% of the pool's LP is burned or time-locked. 100.0% is locked in PinkLock02 until 08 Oct 2027 (365 days). Until then nobody — the project included — can withdraw it unless the locker contract itself is flawed; after that date the lock's owner can.
Issue100.0% of the pool's LP is burned or time-locked. 100.0% is locked in PinkLock02 until 08 Oct 2027 (365 days). Until then nobody — the project included — can withdraw it unless the locker contract itself is flawed; after that date the lock's owner can.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $361K (DexScreener, all pools). 24h trading volume $56K (CoinGecko, all markets, daily snapshot). 24h trading volume $65K (DexScreener, all pools).
IssueLiquidity $361K (DexScreener, all pools). 24h trading volume $56K (CoinGecko, all markets, daily snapshot). 24h trading volume $65K (DexScreener, all pools).
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

Asset class: Project token

QA-PROFILEA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $361K of DEX liquidity across 1 pools. Launch: 133 days of market history.
IssueA token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: a single wallet (EOA). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $361K of DEX liquidity across 1 pools. Launch: 133 days of market history.
FixCheck the project's own documentation for what the token is used for; this report covers what the contract allows.
StatusAcknowledged

Category Ratings

TechnicalLow10/10

The VELLORA token implements standard ERC-20 functionality, including `transfer` and `transferFrom` methods. The contract incorporates a fee mechanism for transfers, which can be configured by privileged roles. A key technical finding is that the owner can modify the `buyFee`, `sellFee`, and `burnFee` via `setFees`, directly impacting token transfer economics (7.2 Code Security, 7.3 Access Control). Additionally, a minor issue of division before multiplication was noted in the constructor's variable initialization (7.2 Code Security).

GovernanceMedium6/10

The contract exhibits significant centralized control over economic parameters. The owner can set `buyFee`, `sellFee`, and `burnFee` using `setFees`, and also control `maxTotalFee` and `liquidityAddress` (7.4 Economic). The `marketingManager` role, which can be set by the owner or current marketing manager, can exempt addresses from fees via `setFeeExempt` and change the `marketingWallet` (7.3 Access Control, 7.5 Governance). This centralized control introduces economic risk as these parameters can be altered without community consensus.

UpgradesLow7/10

The VELLORA contract is not designed with an upgrade mechanism, as it is not deployed as a proxy (7.7 Upgrades). This means its logic is immutable once deployed. Any future changes or bug fixes would require deploying a new contract and migrating users, which can be a complex and disruptive process.

Security Checklist

4/5 checks passed
Contract VerifiedPass
Ownership RenouncedFail
No Mint FunctionPass
Liquidity LockedPass
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Holder Composition

61.3% in top 10
15.3% in wallets6.7% in contracts
Effective Concentration18.0%

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Liquidity Depth

$361.5K

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

LP Distribution

LP Locked100.0% · Null Address, PinkLock02

Key Addresses

1 addresses
Deployer
0x9f31…1cab

What Raised This Score

2 factors
  • Owner can change the buy/sell tax
  • Code: Potential for minor rounding errors in calculations (Low, static analysis)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
AsterLow RiskMYXLow RiskBluwhale AI (BLUAI)Low RiskTaleX (X)Low RiskPeaqOFT (PEAQ)Low Risk施工猫 (SUE)Low Risk

Would You Like a More Detailed Audit of VELLORA?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit