Quantum Audit Logo

Is Wrapped Ether (Wormhole) Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Wrapped Ether (Wormhole) WETH
7vfCXT…voxs
Solana Not verifiedLast checked 3d ago 1 audit on record
DexScreener ↗
How is this score calculated? → Critical Risk
Executive SummaryAI Copilot

This audit of the Wrapped Ether (Wormhole) (WETH) SPL token mint reveals critical risks. The mint authority is still active, allowing for unlimited new token creation and potential dilution. Additionally, there is a high concentration of tokens among the top 10 holders, posing a significant market manipulation risk. Third-party registry data was available and corroborated these findings.

1 Critical1 High1 Low
Volume 24h
$12.85M
Liquidity
$6.51M
Price
$2517.6000
Token Age
3y
Top 10 Holders
78.0%

Security Findings

1 Crit1 High1 Low
Critical

Mint Authority Not Revoked

C-01The mint authority is BCD75R…YMV7. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
FixVerify on-chain that the mint authority is set to null before treating supply as fixed.
StatusUnresolved
High

Holder Concentration > 70%

H-01Top 10 token accounts hold 80.24% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
IssueTop 10 token accounts hold 80.24% of supply. Coordinated sell-off would crash price; single-whale dumps are common in this range.
FixExercise caution due to the significant risk of market manipulation and price volatility from large holders. Monitor holder distribution closely.
StatusUnresolved
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch.
IssueToken name, symbol, or image can be changed post-launch.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalHigh3/10

The token is an SPL token operating under the `spl-token` program. It has a total supply of 4,702,911,261.571 tokens with 8 decimals. A significant technical risk (7.3 Access Control) is the active mint authority, , which retains the power to create new tokens. The freeze authority, however, has been revoked, preventing arbitrary freezing of holder accounts. The token does not utilize Token-2022 extensions like permanent delegates or transfer hooks, and balance mutability is disabled.

GovernanceHigh1/10

The economic stability of the token (7.4 Economic) is challenged by a high concentration of ownership, with the top 10 token accounts holding 80.24% of the total supply. This level of concentration makes the token highly susceptible to price manipulation from large sell-offs. Liquidity is robust at $3,589,210, and the 24-hour volume of $4,203,101 results in a normal Volume/Liquidity Ratio of 1.17, indicating organic trading activity. The DEX pair has been active for 1354 days, providing a long track record.

UpgradesMedium4/10

The token's core functionality is governed by the `spl-token` program, which is a fixed program. While the token itself is not upgradable in the EVM sense (7.7 Upgrades), the `metadata_mutable` flag is set to `True`, meaning the token's name, symbol, or image can be altered post-launch. The mint authority remains active, allowing for changes to the total supply. The freeze authority has been revoked, preventing future changes to account freezing capabilities.

Security Checklist

1/4 checks passed
Contract VerifiedFail
No Mint Function?
Liquidity LockedFail
Not a ProxyPass

Liquidity Depth

$7.62M across 30 pairs
Orca wpSOLanalysed$6.51M85.5%RaydiumSOL$449.2K5.9%Orca wpUSDC$226.9K3.0%Meteora DLMMSOL$107.6K1.4%Orca v2USDC$62.4K0.8%Orca wpSOL$47.8K0.6%
Show 4 more pairsShow less
Orca wpcbBTC$42.6K0.6%Orca v2SOL$37.9K0.5%Orca wpUSDC$36.3K0.5%RaydiumUSDC$24.3K0.3%

The 20 remaining pairs hold $69.1K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

8 factors
  • Ownership status UNKNOWN (owner could not be resolved)
  • Mint capability UNKNOWN (implementation ABI unreadable)
  • Contract source NOT verified
  • Top-10 concentration > 70% (78.0% total → 78.0% effective; 78.0% in EOAs, 0.0% in contracts — extreme)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • 1 Critical finding(s) from audit
  • 1 High finding(s) from audit
  • 1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

6 more on the record
Traderclaw (TCLAW)Critical RiskinfinityCritical RiskThe IQ Bull (AMEN)Critical RiskCredible Finance (CRED)Critical RiskSheepcoin (SHEEP)Critical RiskThe Movement (MOVEMENT)Critical Risk

Would You Like a More Detailed Audit of Wrapped Ether (Wormhole)?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit