Quantum Audit Logo
Launch App

Is Wormhole a Scam?

Honeypot, rug-pull and ownership checks

Is this your token? Publish your own audit on this page →

Wormhole W
85VBFQ…QAmQ
Solana
Not verifiedThis record has not gone through deep verification and is not being monitored. The score is a dated snapshot — the token’s risk can change at any time.Own this token? Put it under verification →
Last checked today 1 audit on record
DexScreener ↗
How is this score calculated? → Low Risk
Executive SummaryAI Copilot

The Wormhole Token (W) mint has revoked both mint and freeze authorities, indicating a fixed supply and unfreezable accounts. However, a significant portion of the token's DEX liquidity is not locked or burned, posing a risk of liquidity withdrawal. Additionally, the token's metadata is mutable, allowing for potential changes to its branding. Third-party registry data indicates mutable metadata but does not flag the token as high-risk. Chain-native RPC data for holder distribution was fully available.

1 Medium1 Low6 Informational
i Our automated scanner reviewed Wormhole (W) on Solana. 3 of 4 security checks passed — see the full breakdown below.
Volume 24h
$117.8K
Liquidity
$132.6K
Price
$0.01615
Age
2y
Top 10 Holders
36.2%

Security Findings

1 Med1 Low6 Info
Medium

Pool Liquidity Not Locked

M-01Only 0.0% of the pool's liquidity is burned or locked; the rest can be withdrawn by whoever holds it. Solana LP holders are anonymous in the data we read, so who can withdraw the remaining liquidity cannot be verified. (Fact: Pool Liquidity Burned or Locked for Good: 0.0%)
IssueOnly 0.0% of the pool's liquidity is burned or locked; the rest can be withdrawn by whoever holds it. Solana LP holders are anonymous in the data we read, so who can withdraw the remaining liquidity cannot be verified. (Fact: Pool Liquidity Burned or Locked for Good: 0.0%)
FixExercise caution as a significant portion of liquidity can be removed.
StatusUnresolved
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch. (Fact: metadata_mutable: True)
IssueToken name, symbol, or image can be changed post-launch. (Fact: metadata_mutable: True)
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved
Info

Who holds the supply

QA-HOLDERSThe ten largest holders own 36.2% of supply. What remains: 24.5% in wallets, 11.7% in other contracts. 96,571 holders in total.
IssueThe ten largest holders own 36.2% of supply. What remains: 24.5% in wallets, 11.7% in other contracts. 96,571 holders in total.
FixWatch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
StatusAcknowledged
Info

Identity verified by independent sources

QA-IDENTITYListed on CoinGecko as Wormhole (W), market cap $115M, rank #264. On GoPlus's list of trusted tokens. 96,571 holders. Verified by: CoinGecko, GoPlus.
IssueListed on CoinGecko as Wormhole (W), market cap $115M, rank #264. On GoPlus's list of trusted tokens. 96,571 holders. Verified by: CoinGecko, GoPlus.
FixMatch the contract address against the project's official channels before trading.
StatusAcknowledged
Info

Liquidity protection could not be verified

QA-LIQUIDITY0.0% of the pool's LP is burned or time-locked. 0.0% of the pool's LP tokens are burned — that liquidity can never be withdrawn by anyone. Solana LP holders are anonymous in the data we read, so who can withdraw the remaining liquidity cannot be verified. This assessment covers the main pool, which holds 34% of the token's DEX liquidity; the other pools were not assessed.
Issue0.0% of the pool's LP is burned or time-locked. 0.0% of the pool's LP tokens are burned — that liquidity can never be withdrawn by anyone. Solana LP holders are anonymous in the data we read, so who can withdraw the remaining liquidity cannot be verified. This assessment covers the main pool, which holds 34% of the token's DEX liquidity; the other pools were not assessed.
FixCheck the lock's end date and beneficiary on the locker's own page before relying on it.
StatusAcknowledged
Info

The market for this token

QA-MARKETLiquidity $388K (DexScreener, all pools). 24h trading volume $46.8M (CoinGecko, all markets, daily snapshot). 24h trading volume $407K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $1.66 on 2024-04-03; the price is now 98.9462% below it.
IssueLiquidity $388K (DexScreener, all pools). 24h trading volume $46.8M (CoinGecko, all markets, daily snapshot). 24h trading volume $407K (DexScreener, all pools). CoinGecko's record for this coin: all-time high $1.66 on 2024-04-03; the price is now 98.9462% below it.
FixSize any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
StatusAcknowledged
Info

What the token's controller can do

QA-POWERSThe contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
IssueThe contract lets its controller — nobody (ownership renounced) — change the token's name, symbol and image. Ownership is renounced, so nobody can use them now.
FixCheck who holds these powers and whether a timelock or multisig stands between them and holders.
StatusAcknowledged
Info

Asset class: Governance token

QA-PROFILEA token whose main use is voting on a protocol's decisions (delegation and vote checkpoints in its code). The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Governance. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $388K of DEX liquidity across 30 pools. Launch: launched on pump.fun (PumpSwap), 918 days of market history.
IssueA token whose main use is voting on a protocol's decisions (delegation and vote checkpoints in its code). The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Governance. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $388K of DEX liquidity across 30 pools. Launch: launched on pump.fun (PumpSwap), 918 days of market history.
FixCheck how much of the voting supply insiders hold and what governance can change.
StatusAcknowledged

Category Ratings

TechnicalLow10/10

The Wormhole Token (W) is implemented using the standard `spl-token` program. Both the mint authority and freeze authority have been revoked, ensuring that no new tokens can be minted and no holder accounts can be frozen. The token has 6 decimals and an initialized supply of approximately 10 billion tokens. There are no indications of advanced Token-2022 extensions like permanent delegates or transfer hooks (7.1 Architecture, 7.3 Access Control).

GovernanceLow7/10

The token exhibits a moderate level of holder concentration, with the top 10 holders that can sell accounting for 36.19% of the total supply. The DEX liquidity stands at $132,300, which is sufficient for current trading volumes, with a healthy 24-hour volume to liquidity ratio of 0.89. However, 0.0% of the pool's liquidity is burned or locked, meaning the entire liquidity can be withdrawn by its current holders, whose identities are not verifiable (7.4 Economic). The trading pair has been active for 566 days.

UpgradesLow8/10

The mint authority and freeze authority are both revoked, preventing any further changes to the token's supply or account freeze status. While the token uses the classic SPL Token Program v3, its metadata is mutable, allowing for potential changes to its name, symbol, or image post-launch (7.7 Upgrades). There are no other upgrade-related authorities or Token-2022 specific upgrade flags present.

Security Checklist

3/4 checks passed
Contract VerifiedPass
No Mint FunctionPass
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

$387.7K across 30 pairs
PumpswapUSDCanalysed$132.6K34.2%Orca wpUSDC$108.4K28.0%Orca wpSOL$63.3K16.3%Raydium CLMMTIP$48.8K12.6%Meteora DYN2SOL$16.0K4.1%Orca wpSZ$7.8K2.0%
Show 4 more pairsShow less
Orca wpUSDC$2.9K0.8%RaydiumSOL$2.2K0.6%Meteora DLMMJTO$1.5K0.4%Orca wpSOL$6550.2%

The 20 remaining pairs hold $3.5K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

2 factors
  • Liquidity NOT locked (100% of the pool; this pool is 34% of DEX liquidity) — who holds it cannot be verified
  • Top-10 concentration > 20% (36.2% total → 29.2% effective; 24.5% in EOAs, 11.7% in contracts)

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
three.ws (THREE)Low RiskmaxxingLow RiskLive Action Roleplay (LARP)Low RiskBIKE TYSON (BIKETYSON)Low RiskEffective Accelerationism (E/ACC)Low RiskAgencyLow Risk

Would You Like a More Detailed Audit of Wormhole?

Paste the contract address into our AI-powered scanner for a deeper real-time report — free, with every scoring factor shown.

Get Detailed Audit