Quantum Audit Logo
Launch App

Early-stage security check — honeypot & rug-pull analysis

Is Weft Finance a Scam?

WEFTSolana
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Oct 19, 2026 · 1 audit on recordNew Launch · 1d old
SummaryAI Copilot

The Weft Finance (WEFT) SPL token mint has its mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts.

Read the full analysis
What raised the score
  • Liquidity not locked
  • Top-10 concentration > 20%
Exact factors
  • Liquidity NOT locked (100% of the pool; this pool is 48% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 20% (27.2% total → 25.0% effective; 23.5% in EOAs, 3.7% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Early-stage analysis. This token has limited on-chain history (1d old). New tokens carry elevated risk — data may change rapidly. Always verify independently before investing.

Security Checklist

as of audit · Oct 195 of 6 checks passed
Contract verifiedVerified
MintNo mint
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Oct 19, 20261,636 holders
3.7%23.5%Wallets72.8%Everyone else
3.7%23.5%Wallets72.8%Everyone else
ContractsWalletsEveryone elseBubble area = share of supply
27.2%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking3.7%
  • Walletsanonymous holders, free to sell23.5%
  • Everyone else1,626 holders72.8%
How holder types affect the score

Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.

Holder balances as recorded by the audit of Oct 19, 2026

Liquidity

as of audit · Oct 19$321.2K across 10 pairs
LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$153.8KShare of depth47.9%

Security Findings

1 Low6 Info
Low

Mutable Metadata

Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True.L-01

Issue

Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True.

Fix

Verify metadata against off-chain expectations before trusting branding.

Status

Unresolved

Info

Who holds the supply

The ten largest holders own 27.2% of supply. What remains: 23.5% in wallets, 3.7% in other contracts. 1,636 holders in total.QA-HOLDERS

Issue

The ten largest holders own 27.2% of supply. What remains: 23.5% in wallets, 3.7% in other contracts. 1,636 holders in total.

Fix

Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.

Status

Acknowledged

Info

Not listed by any independent source

1,636 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY

Issue

1,636 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.

Fix

Match the contract address against the project's official channels before trading.

Status

Acknowledged

Info

The market for this token

Liquidity $321K (DexScreener, all pools). 24h trading volume $2.0M (DexScreener, all pools).QA-MARKET

Issue

Liquidity $321K (DexScreener, all pools). 24h trading volume $2.0M (DexScreener, all pools).

Fix

Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.

Status

Acknowledged

Info

What the token's controller can do

The contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.QA-POWERS

Issue

The contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.

Fix

Check who holds these powers and whether a timelock or multisig stands between them and holders.

Status

Acknowledged

Info

Asset class: Project token

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $321K of DEX liquidity across 10 pools. Launch: 1 days of market history.QA-PROFILE

Issue

A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $321K of DEX liquidity across 10 pools. Launch: 1 days of market history.

Fix

Check the project's own documentation for what the token is used for; this report covers what the contract allows.

Status

Acknowledged

Info

Recently launched — 1 day of market history

The token's oldest DEX pool is 1 day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT

Issue

The token's oldest DEX pool is 1 day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.

Fix

Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.

Status

Acknowledged

Analysis

AI Copilotas of audit · Oct 19
Executive SummaryWhat the contract is and what the review found

The Weft Finance (WEFT) SPL token mint has its mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts. However, the token's metadata is mutable, allowing for post-launch changes to its name, symbol, or image. Third-party risk registry data was unavailable for this assessment, and the locking status of the liquidity pool could not be determined.

Technical10/10Low risk

The Weft Finance (WEFT) token operates under the standard spl-token program. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token has 6 decimals and is initialized. (7.1 Architecture, 7.3 Access Control)

Governance7/10Low risk

Holder concentration is low, with the top 10 holders that can sell holding 27.19% of the supply. The token has a liquidity of $162,126 USD, with a normal 24-hour volume to liquidity ratio of 3.06. The pair is very new, only 1 day old. Information regarding the locking status of the pool's liquidity was not available. (7.4 Economic)

Upgrades8/10Low risk

The mint authority and freeze authority are both revoked, preventing further changes to supply or account freeze status. The token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. This token does not use Token-2022 extensions. (7.7 Upgrades)

Final RecommendationWhat to do about this score

Holders should monitor the token's metadata for any unexpected changes to its branding.

While core authorities are revoked, the mutable metadata introduces a potential for brand misrepresentation. Verify the token's current name, symbol, and image against official sources before relying on its branding.

Contract & Record

1 audit on record
TypeSPL Token v3
NetworkSolana
Token age1d
ContractHqmFi8…6Ax8
Audit History
  1. Oct 19, 202616Low

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Would You Like a More Detailed Audit of Weft Finance?

This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.

Get Detailed Audit Is this your token? Publish your own audit on this page