Early-stage security check — honeypot & rug-pull analysis

Is Webcade a Scam?

TOKEN

Solana

Not verified

This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →

Last checked Sep 22, 2026 · 2 audits on recordNew Launch · 6d old

Chart

14/ 100

Low RiskHow is this score calculated?

How the score breaks downratings: 10 is safest

Technical10/10 Governance7/10 Upgrades10/10 Checks passed6 of 6 Findings1 Info1

SummaryAI Copilot

This audit of the Webcade (Token) SPL token mint found no critical or high-severity risks based on the provided on-chain facts and external security signals.

Read the full analysis

What raised the score

Top-10 concentration > 30%
Liquidity < $50k
Token age < 7 days

Exact factors

Top-10 concentration > 30% (49.5% total → 49.5% effective; 49.5% in EOAs, 0.0% in contracts — moderate)
Liquidity < $50k ($39,597 across 1 pairs — thin market)
Token age < 7 days (early, volatile)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (6d old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Sep 226 of 6 checks passed

Contract verifiedVerified

MintNo mint

Liquidity lockLocked

UpgradeabilityFixed code

HoneypotNone found

Buy / sell tax0% / 0%

Holders

as of audit · Sep 22, 2026

Top 10 holdersEveryone elseBubble area = share of supply

49.5%of supply sits with the top 10 holders

Top 10 holdersthe ten largest balances49.5%
Everyone elsethe rest of the supply50.5%

Holder balances as recorded by the audit of Sep 22, 2026

Liquidity

as of audit · Sep 22$39.6K

The risk score reads depth across every pair.

LP tokensLocked

The LP tokens of the analysed pool are locked or burned.

Analysed pool$39.6KShare of depth100.0%

Security Findings

1 Info

Info

No code-level findings — an SPL mint exposes no auditable program source

This token is an SPL token mint, not a deployed program: there is no contract source code on-chain for a line-by-line review, so no code-level vulnerability could be identified either way. The assessment on this page therefore rests on mint/owner authority, mint capability, LP lock/burn state, holder concentration, which are read directly from chain state and from third-party risk registries.I-01

Issue

Fix

Read the risk score breakdown below as the substance of this audit. For a code-level review, the token would need an accompanying verified program.

Status

Acknowledged

Analysis

AI Copilotas of audit · Sep 22

Executive SummaryWhat the contract is and what the review found

This audit of the Webcade (Token) SPL token mint found no critical or high-severity risks based on the provided on-chain facts and external security signals. The mint and freeze authorities are revoked, and no permanent delegate or transfer hook is active. While chain-native holder distribution data was unavailable, external signals indicate moderate holder concentration. The token exhibits high 24-hour trading volume relative to its liquidity, which can sometimes signal artificial activity.

Technical10/10Low risk

The Webcade (Token) is an SPL Token-2022 mint. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no existing accounts can be frozen by an external party. There is no transfer hook configured, meaning transfers are not subject to custom on-chain program logic. The default account state is not frozen, allowing new accounts to receive and transfer tokens immediately. The token also lacks balance mutability, preventing arbitrary adjustments to user balances.

Governance7/10Low risk

The token's liquidity stands at $215,534, which is sufficient to avoid the 'Very Low Liquidity' flag. The 24-hour trading volume is $2,909,112, resulting in a Volume/Liquidity Ratio of 13.50. While this ratio is below the threshold for a 'Wash Trading Signal' finding, it indicates significantly higher trading activity than available liquidity. External security signals report that the top 10 holders account for 32.6% of the supply, which is below the thresholds for high holder concentration. The DEX pair has been active for 14 days, providing some track record.

Upgrades10/10Low risk

The mint authority and freeze authority are both revoked, meaning the token's supply and freeze capabilities are immutable. The token is an SPL Token-2022, but it does not have a transfer hook or default frozen account state configured. Furthermore, the metadata is not mutable, ensuring the token's name, symbol, and image cannot be changed post-launch. There are no upgradable features like transfer fee or transfer hook upgradability enabled, contributing to the token's immutability.

Final RecommendationWhat to do about this score

Holders should monitor the token's liquidity and trading volume for any significant changes, especially given the current volume-to-liquidity ratio.

Although the top 10 holder concentration is not high, continuous monitoring of holder distribution is advisable. Verify on-chain that the mint and freeze authorities remain revoked. Before engaging with any new SPL Token-2022 features, always confirm their current configuration and authority status.

Contract & Record

2 audits on record

TypeSPL Token-2022

NetworkSolana

Token age6d

ContractHos282…pump

Badge for your website

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History

Sep 22, 202614Low
Sep 4, 202657Medium
Aug 30, 202645Medium

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the TOKEN contract address?

The Webcade (TOKEN) contract on Solana is Hos282xmdMJHwMjhni91fNqdjDsgWjgSckxuGc1Bpump. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.