The Weft Finance (WEFT) SPL token mint has its mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts. However, the token's metadata is mutable, allowing for post-launch changes to its name, symbol, or image. Third-party risk registry data was unavailable for this assessment, and the locking status of the liquidity pool could not be determined.

Early-stage security check — honeypot & rug-pull analysis
Is Weft Finance a Scam?
Not verified
This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →The Weft Finance (WEFT) SPL token mint has its mint and freeze authorities revoked, indicating a fixed supply and unfreezable accounts.
Read the full analysis- Liquidity not locked
- Top-10 concentration > 20%
Exact factors
- Liquidity NOT locked (100% of the pool; this pool is 48% of DEX liquidity) — who holds it cannot be verified
- Top-10 concentration > 20% (27.2% total → 25.0% effective; 23.5% in EOAs, 3.7% in contracts)
Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Security Checklist
as of audit · Oct 19Holders
as of audit · Oct 19, 2026- Contractstreasury, vesting, bridge, staking3.7%
- Walletsanonymous holders, free to sell23.5%
- Everyone else1,626 holders72.8%
How holder types affect the score
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 19, 2026
Liquidity
as of audit · Oct 19- Meteora DLMMSOLAnalysed$153.8K47.9%
- Meteora DYN2SOL$146.7K45.7%
- Meteora DLMMSOL$10.2K3.2%
- Meteora DLMMUSDC$6.1K1.9%
- Meteora DLMMSOL$2.5K0.8%
- Meteora DLMMSOL$1.9K0.6%
Show 4 more pairs
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
Security Findings
LowMutable Metadata
Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True.L-01
Issue
Token name, symbol, or image can be changed post-launch, as indicated by metadata_mutable: True.
Fix
Verify metadata against off-chain expectations before trusting branding.
Status
Unresolved
InfoWho holds the supply
The ten largest holders own 27.2% of supply. What remains: 23.5% in wallets, 3.7% in other contracts. 1,636 holders in total.QA-HOLDERS
Issue
The ten largest holders own 27.2% of supply. What remains: 23.5% in wallets, 3.7% in other contracts. 1,636 holders in total.
Fix
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Status
Acknowledged
InfoNot listed by any independent source
1,636 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.QA-IDENTITY
Issue
1,636 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Fix
Match the contract address against the project's official channels before trading.
Status
Acknowledged
InfoThe market for this token
Liquidity $321K (DexScreener, all pools). 24h trading volume $2.0M (DexScreener, all pools).QA-MARKET
Issue
Liquidity $321K (DexScreener, all pools). 24h trading volume $2.0M (DexScreener, all pools).
Fix
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Status
Acknowledged
InfoWhat the token's controller can do
The contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.QA-POWERS
Issue
The contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
Fix
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Status
Acknowledged
InfoAsset class: Project token
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $321K of DEX liquidity across 10 pools. Launch: 1 days of market history.QA-PROFILE
Issue
A token issued by a project for use, governance or fundraising. Scored on its contract and market facts. The class itself adds no points; the contract and market facts decide the score. Basis: no class-specific evidence. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $321K of DEX liquidity across 10 pools. Launch: 1 days of market history.
Fix
Check the project's own documentation for what the token is used for; this report covers what the contract allows.
Status
Acknowledged
InfoRecently launched — 1 day of market history
The token's oldest DEX pool is 1 day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.QA-RECENT
Issue
The token's oldest DEX pool is 1 day old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Fix
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Status
Acknowledged
Analysis
AI Copilotas of audit · Oct 19The Weft Finance (WEFT) token operates under the standard spl-token program. Both the mint authority and freeze authority have been revoked, ensuring no new tokens can be minted and no holder accounts can be frozen. The token has 6 decimals and is initialized. (7.1 Architecture, 7.3 Access Control)
Holder concentration is low, with the top 10 holders that can sell holding 27.19% of the supply. The token has a liquidity of $162,126 USD, with a normal 24-hour volume to liquidity ratio of 3.06. The pair is very new, only 1 day old. Information regarding the locking status of the pool's liquidity was not available. (7.4 Economic)
The mint authority and freeze authority are both revoked, preventing further changes to supply or account freeze status. The token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. This token does not use Token-2022 extensions. (7.7 Upgrades)
Holders should monitor the token's metadata for any unexpected changes to its branding.
While core authorities are revoked, the mutable metadata introduces a potential for brand misrepresentation. Verify the token's current name, symbol, and image against official sources before relying on its branding.
Contract & Record
Would You Like a More Detailed Audit of Weft Finance?
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page