On-chain security analysis — is it a scam or legit?
The BridgeToken implementation is a standard ERC-20 token with administrative minting capabilities.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Share held by contracts — treasury, vesting, bridge or staking — is discounted against share held by wallets when the score is computed: a contract cannot decide to sell the way an anonymous holder can, though it can still be drained or voted to sell. Effective concentration is the figure the risk score is actually calculated from.
Holder balances as recorded by the audit of Oct 26, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are not locked or burned, so whoever holds them can withdraw that liquidity.
0xd7f7…6e150x42f2…54fa0x6584…d02d0x3f81…f6c40x9908…409a0x0abb…1df60x12e8…86050x9c8e…64e30xc53a…b7510xe4b8…5627No privileged address appears among these holders: the unlocked liquidity sits with independent providers, not with the deployer.
0.0% of the pool's LP is burned or time-locked. 82.1% is held, unlocked, by 10 address(es) other than the owner/deployer. No single one holds a majority: their exits thin the market rather than hand anyone the pool. Some pools are concentrated-liquidity (V3/V4) positions; shares above are by position as GoPlus reports them. This assessment covers the main pool, which holds 8% of the token's DEX liquidity; the other pools were not assessed.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
The contract lets its controller — a contract — mint new supply. Nothing independent vouches for whoever holds them, so each is a live risk to holders.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
The verified source code was reviewed and no issue rising to Informational severity or above was identified. This is a statement about the code that was read, not a guarantee: the review covers the published source only. Fact-layer checks (mint/owner authority, mint capability, holder concentration) were applied separately and feed the risk score.
Re-check after any contract upgrade or ownership change, both of which can alter behaviour without changing this page.
Acknowledged
The ten largest holders own 81.4% of supply. What remains: 27.7% in wallets, 53.6% in other contracts. 13,334 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Wormhole Bridged WSOL (WSOL). 13,334 holders.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $1.5M (DexScreener, all pools). 24h trading volume $240K (CoinGecko, all markets, daily snapshot). 24h trading volume $43K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A token representing another asset's units 1:1, backed by a wrapping contract, a custodian or a bridge. The class itself adds no points; the contract and market facts decide the score. Basis: CoinGecko category: Bridged-Tokens. Tokenomics — Supply: mintable with no on-chain cap found. Control: a contract. Code: upgradeable proxy. Fees: no buy or sell tax. Market: $1.5M of DEX liquidity across 8 pools. Launch: 1149 days of market history.
The backing is the risk: check who holds the underlying asset and how redemption works.
Acknowledged
The BridgeToken implementation is a standard ERC-20 token with administrative minting capabilities. The contract utilizes a Beacon proxy pattern for upgradability. No critical vulnerabilities were identified in the provided source code analysis. The protocol relies on a centralized owner contract to manage supply and metadata updates.
The contract implements standard ERC-20 functionality with robust arithmetic safety provided by Solidity 0.8.x. 7.1 Architecture follows a standard Beacon proxy pattern, ensuring consistent implementation across instances. 7.2 Code Security is high, with no reentrancy or overflow issues detected. 7.3 Access Control is strictly enforced via the onlyOwner modifier on sensitive functions like minting.
7.4 Economic risk is tied to the centralized minting authority, which can increase supply at will. 7.5 Governance is currently managed by an external contract, which acts as a single point of failure. 7.6 External dependencies are minimal, reducing the attack surface for flash loan or oracle-based manipulation.
7.7 Upgrades are handled via a Beacon proxy, allowing for implementation updates. 7.8 Operations are simplified by this pattern, though it introduces a dependency on the Beacon contract's integrity. The upgrade mechanism is standard but requires trust in the owner's ability to manage the implementation address securely.
The protocol is well-structured. It is recommended to transition the owner address to a multi-signature wallet or a decentralized governance contract to mitigate the risks associated with a single point of failure in the minting and upgrade processes.
Ensure that the Beacon contract is also secured behind a multi-sig to prevent unauthorized implementation swaps.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The Wrapped SOL (SOL) contract on Arbitrum is 0x2bcc6d6cdbbdc0a4071e48bb3b969b06b3330c07. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for Wrapped SOL is 70/100 (High risk) as of Oct 26, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Ownership: Retained; Mint: Mintable; Liquidity lock: Not locked; Upgradeability: Upgradeable; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
Liquidity lock: Not locked (as of Oct 26, 2026). Total DEX liquidity: $1.49M.
As of Oct 26, 2026, the 10 largest holders own 81.4% of the supply across 13,334 holders. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
