Quantum Audit Logo
Launch App

On-chain security analysis — is it a scam or legit?

Is World of Dypians Safe?

WODBNB Chain
Not verified This record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked Sep 4, 2026 · 1 audit on record
SummaryAI Copilot

The WorldOfDypians token contract is a standard ERC-20 implementation, inheriting from well-audited OpenZeppelin contracts.

Read the full analysis
What raised the score
  • Top-10 concentration > 30%
  • Liquidity not locked, but no owner/deployer address holds LP — market-depth risk, not rug risk
  • LP top1 unlocked holder = 100.0%
  • LP top3 unlocked holders = 100.0%
  • 1 Low finding(s) from audit
Exact factors
  • Top-10 concentration > 30% (75.4% total → 30.2% effective; 0.0% in EOAs, 75.4% in contracts — moderate)
  • Liquidity not locked, but no owner/deployer address holds LP — market-depth risk, not rug risk
  • LP top1 unlocked holder = 100.0% (independent LP — depth risk, pool = 99% of DEX liquidity)
  • LP top3 unlocked holders = 100.0% (independent LP — depth risk, pool = 99% of DEX liquidity)
  • 1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Security Checklist

as of audit · Sep 46 of 7 checks passed
Contract verifiedVerified
OwnershipRenounced
MintNo mint
Liquidity lockNot locked
UpgradeabilityFixed code
HoneypotNone found
Buy / sell tax0% / 0%

Holders

as of audit · Sep 4, 2026
75.4%Contracts24.6%Everyone else
75.4%Contracts24.6%Everyone else
ContractsEveryone elseBubble area = share of supply
75.4%of supply sits with the top 10 holders
  • Contractstreasury, vesting, bridge, staking75.4%
  • Everyone elsethe rest of the supply24.6%
Effective concentrationwhat the score reads30.2%
How holder types affect the score

Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.

Holder balances as recorded by the audit of Sep 4, 2026

Liquidity

as of audit · Sep 4$260.6K across 6 pairs
LP tokensNot locked

The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.

Analysed pool$258.2KShare of depth99.0%
Top-1 Unlocked Holder100.0%
Top-3 Unlocked100.0%
Unlocked LP held by
0xd5d4…d492

No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.

Security Findings

1 Low2 Info
Low

Centralized Control of Initial Supply

The entire MAX_SUPPLY of WorldOfDypians tokens is minted to a single tokenLockAddress (0x3589…3890) during contract deployment. This design choice centralizes control over the initial token distribution to the entity managing this specific address. Any compromise, mismanagement, or single point of failure associated with the tokenLockAddress could significantly impact the entire token supply and its intended distribution (7.3 Access Control, 7.4 Economic, 7.6 External).L-01

Issue

The entire MAX_SUPPLY of WorldOfDypians tokens is minted to a single tokenLockAddress () during contract deployment. This design choice centralizes control over the initial token distribution to the entity managing this specific address. Any compromise, mismanagement, or single point of failure associated with the tokenLockAddress could significantly impact the entire token supply and its intended distribution (7.3 Access Control, 7.4 Economic, 7.6 External).

Fix

Implement robust security measures for the tokenLockAddress, such as a multi-signature wallet or a time-locked contract, to distribute control and reduce the risk of a single point of failure. Clearly communicate the purpose and management of this address to stakeholders.

Status

Unresolved

Info

Immutable Token Supply

The WorldOfDypians token contract implements a fixed token supply model. After the initial minting of MAX_SUPPLY tokens to the tokenLockAddress in the constructor, there are no public or internal functions available to mint additional tokens or burn existing ones. This design makes the total token supply immutable, preventing any future inflation or deflation through contract-level operations (7.4 Economic).I-01

Issue

The WorldOfDypians token contract implements a fixed token supply model. After the initial minting of MAX_SUPPLY tokens to the tokenLockAddress in the constructor, there are no public or internal functions available to mint additional tokens or burn existing ones. This design makes the total token supply immutable, preventing any future inflation or deflation through contract-level operations (7.4 Economic).

Fix

No action is required if a fixed supply is the intended economic model. Ensure this design choice is clearly communicated in the project's documentation and whitepaper.

Status

Unresolved

Info

Hardcoded tokenLockAddress

The tokenLockAddress (0x3589…3890) is defined as a public constant within the contract. While this ensures the address cannot be changed after deployment, it also introduces inflexibility. If the intended recipient or the strategy for managing the initial token supply needs to change in the future, it would necessitate deploying an entirely new contract (7.1 Architecture).I-02

Issue

The tokenLockAddress () is defined as a public constant within the contract. While this ensures the address cannot be changed after deployment, it also introduces inflexibility. If the intended recipient or the strategy for managing the initial token supply needs to change in the future, it would necessitate deploying an entirely new contract (7.1 Architecture).

Fix

No action is required if immutability of the lock address is the intended design. For future projects requiring flexibility, consider making such critical addresses configurable via constructor arguments or an owner-controlled setter function, if appropriate for the project's risk model.

Status

Unresolved

Analysis

AI Copilotas of audit · Sep 4
Executive SummaryWhat the contract is and what the review found

The WorldOfDypians token contract is a standard ERC-20 implementation, inheriting from well-audited OpenZeppelin contracts. It features a fixed maximum supply, with all tokens minted to a designated lock address during deployment. The contract exhibits robust code quality and adheres to common security practices, with no critical or high-severity vulnerabilities identified. Minor findings relate to design choices regarding token distribution and immutability.

Technical10/10Low risk

The technical implementation of the WorldOfDypians token is based on battle-tested OpenZeppelin ERC20 and Ownable contracts, ensuring a high standard of code security (7.2 Code Security). The use of Solidity 0.8.20 provides default overflow/underflow protection, and unchecked blocks are used appropriately where safety is guaranteed. No reentrancy vectors or other common EVM vulnerabilities were identified (7.2 Code Security). The architecture is straightforward, implementing a basic token with a fixed supply (7.1 Architecture).

Governance6/10Medium risk

The contract utilizes the Ownable pattern for administrative control, allowing the owner to transfer or renounce ownership (7.3 Access Control). However, the owner has no control over the token supply after deployment, as there are no minting or burning functions (7.4 Economic). The entire MAX_SUPPLY is minted to a tokenLockAddress in the constructor, centralizing initial distribution control to that address (7.4 Economic, 7.5 Governance). This design ensures a fixed token supply, preventing inflationary risks from arbitrary minting.

Upgrades9/10Low risk

The WorldOfDypians contract is not designed as an upgradeable proxy. It is a standard, non-upgradeable implementation, meaning its logic cannot be modified after deployment (7.7 Upgrades). Any future changes to the token's functionality would require deploying a new contract.

Final RecommendationWhat to do about this score

It is recommended to ensure robust security and operational procedures for the tokenLockAddress, as it holds the entire initial token supply.

Implement multi-signature control and secure key management practices for this address to mitigate risks associated with centralized control. Additionally, consider documenting the intended release schedule or mechanism for tokens held at the tokenLockAddress to provide transparency to the community.

Contract & Record

1 audit on record
TypeToken
NetworkBNB Chain
Token age1y
Contract0xb994…b0e8
Deployer0xb57a…1ea4
Badge for your website
World of Dypians security record badge

Free for any token on the record. It links to this page and always shows the current score and the date it was checked.

Audit History
  1. Sep 3, 202610Low

Score changes are recorded as dated snapshots — history is append-only and cannot be edited.

Frequently Asked Questions

What is the WOD contract address?

The World of Dypians (WOD) contract on BNB Chain is 0xb994882a1b9bd98a71dd6ea5f61577c42848b0e8. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.

Is World of Dypians a scam?

Quantum Audit's risk score for World of Dypians is 10/100 (Low risk) as of Sep 4, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Renounced; Mint: No mint; Liquidity lock: Not locked; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.

Is WOD liquidity locked?

Liquidity lock: Not locked (as of Sep 4, 2026). Total DEX liquidity: $260.6K.

Who holds WOD?

As of Sep 4, 2026, the 10 largest holders own 75.4% of the supply. The Holders section on this page shows who they are by holder type.

Would You Like a More Detailed Audit of World of Dypians?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit Is this your token? Publish your own audit on this page