On-chain security analysis — is it a scam or legit?
SolanaThe token mint maintains active Mint and Freeze authorities, posing significant centralization risks to supply and holder access.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Solana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 27, 2026
The 20 remaining pairs hold $25.0K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
An independent third-party risk registry classifies this token as high-risk based on its own dataset.
Do not interact with this token.
Unresolved
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
The freeze authority is . The holder can freeze any holder's account, blocking transfers and effectively confiscating funds.
Avoid tokens whose freeze authority is not revoked unless the issuer is a regulated stablecoin operator.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
The ten largest holders own 62.2% of supply. Of that, 28.1% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 28.2% in wallets, 5.9% in other contracts. 17,731 holders in total. For a verified reference asset the largest holders are custodians, exchanges and bridges; concentration is reported, not scored.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
Listed on CoinGecko as Hex Trust Wrapped XRP (WXRP), market cap $65M. 17,731 holders. Verified by: CoinGecko.
Match the contract address against the project's official channels before trading.
Acknowledged
Liquidity $666K (DexScreener, all pools). 24h trading volume $410K (CoinGecko, all markets, daily snapshot). 24h trading volume $2.1M (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
The contract lets its controller — the freeze authority — mint new supply; freeze or blacklist individual addresses; change the token's name, symbol and image. These are the issuer's controls by design; for a verified issuer they are counterparty risk — the issuer can act on any holder, including you.
Check who holds these powers and whether a timelock or multisig stands between them and holders.
Acknowledged
A token representing another asset's units 1:1, backed by a wrapping contract, a custodian or a bridge. Scored as an established reference asset: its identity is verified, so the issuer's or protocol's controls (listed as findings) are real and are priced once as counterparty risk, and LP locks and holder concentration are not scored — its pools belong to market makers and its largest holders are exchanges, bridges and custody. Basis: CoinGecko category: Wrapped-Tokens. Tokenomics — Supply: mintable with no on-chain cap found. Control: the freeze authority. Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $666K of DEX liquidity across 30 pools. Launch: 242 days of market history.
The backing is the risk: check who holds the underlying asset and how redemption works.
Acknowledged
The token mint maintains active Mint and Freeze authorities, posing significant centralization risks to supply and holder access. Third-party registry data indicates concerns regarding metadata mutability and authority status. Holder concentration is moderate, and liquidity is sufficient, though the lock status of the pool liquidity remains unverified.
The token utilizes the standard SPL Token program (v3). 7.1 Architecture is standard for SPL mints, while 7.2 Code Security relies on the audited core program. 7.3 Access Control is currently centralized under address for both minting and freezing. 7.8 Operations are subject to these active authorities.
7.4 Economic factors show a healthy volume/liquidity ratio of 3.43. 7.5 Governance is centralized, with the top 10 holders controlling 34.11% of the supply. 7.6 External market data confirms $527,818 in liquidity, though the status of pool liquidity withdrawal rights is unknown.
7.7 Upgrades are not applicable to SPL mints, but metadata mutability allows for branding changes. The mint and freeze authorities remain active, allowing for potential supply inflation or account freezing. No Token-2022 extensions were detected.
Users should monitor the mint and freeze authorities for potential revocation.
Verify the liquidity lock status on the specific DEX platform to ensure pool creator withdrawal risks are mitigated. Before interacting, confirm that the metadata matches the expected branding, as the current configuration allows for post-launch modifications.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Add your links and get it Verified
