Early-stage security check — honeypot & rug-pull analysis
SolanaThe XTO token exhibits a highly secure technical configuration with all administrative authorities revoked and 100% of liquidity permanently burned.
Read the full analysisSolana holder types come from the account itself: a program-derived account (no private key — vaults, vesting, pools) counts as a contract; anything else is a wallet. DEX pools are matched to the token's own pools and left out of the concentration the score reads.
Holder balances as recorded by the audit of Oct 20, 2026
The risk score reads depth across every pair.
The LP tokens of the analysed pool are locked or burned.
A third-party risk registry has flagged the token for high holder correlation. This suggests that multiple top wallets may be controlled by the same individual or group, potentially masking the true level of supply concentration.
Analyze the transaction history between the top 10 wallets to identify coordinated movements before taking large positions.
Unresolved
The mint authority is set to null. This ensures that no additional tokens can ever be minted, protecting holders from supply dilution.
No action required; this is a positive security state.
Resolved
The freeze authority is set to null. The creator cannot freeze user accounts or block transfers, ensuring the token remains permissionless.
No action required; this is a positive security state.
Resolved
100% of the pool's LP tokens have been burned. This means the liquidity in the DEX pool can never be withdrawn by the creator or any other party.
No action required; this significantly reduces the risk of a liquidity rug pull.
Resolved
The ten largest holders own 5.1% of supply. Of that, 0.7% in DEX pools — not holders that can sell, so excluded from the concentration score. What remains: 4.4% in wallets, 0.0% in other contracts. 2,568 holders in total.
Watch the largest wallets that are not exchanges, pools or locks — those are the ones that can move the price.
Acknowledged
2,568 holders. Not listed by CoinGecko or any exchange GoPlus tracks. Nothing independent confirms who is behind this token, so every power its contract grants is scored at face value.
Match the contract address against the project's official channels before trading.
Acknowledged
100.0% of the pool's LP is burned or time-locked. 100.0% of the pool's LP tokens are burned — that liquidity can never be withdrawn by anyone.
Check the lock's end date and beneficiary on the locker's own page before relying on it.
Acknowledged
Liquidity $152K (DexScreener, all pools). 24h trading volume $488K (DexScreener, all pools).
Size any position to the liquidity and daily volume shown — they set how much you can sell and at what price.
Acknowledged
A community token whose value comes from attention rather than a product. Being a meme is not a risk in itself: it is scored on exactly the same contract and market facts as any other token. The class itself adds no points; the contract and market facts decide the score. Basis: launched on pump.fun, a meme launchpad. Tokenomics — Supply: fixed — the contract has no mint function. Control: nobody (ownership renounced). Code: not upgradeable (no proxy). Fees: no buy or sell tax. Market: $152K of DEX liquidity across 1 pools. Launch: launched on pump.fun, 3 days of market history.
Expect attention-driven volatility; the facts in this report say whether the contract itself can be used against holders.
Acknowledged
The token's oldest DEX pool is 3 days old. Age is not part of the risk score — a new token is not a risky one by default — but a short history means fewer trades and holder changes behind the facts in this report.
Re-check ownership, liquidity and holder distribution as the token matures; those are the facts that move early.
Acknowledged
The XTO token exhibits a highly secure technical configuration with all administrative authorities revoked and 100% of liquidity permanently burned. The primary risk identified is a third-party registry signal regarding high holder correlation, though direct concentration remains low at 4.41% for the top 10 sellable wallets. Third-party registry data for rug-pull flags was checked, but only correlation signals were present.
The mint utilizes the spl-token-2022 program with no active extensions such as transfer hooks or fees (7.1). Access control is fully decentralized as both the mint and freeze authorities are revoked, preventing supply inflation or account freezing (7.3). The token is correctly initialized with 6 decimals and a fixed supply of approximately 999.7 trillion raw units (7.2).
Economic health is supported by $154,173 in DEX liquidity and a normal volume/liquidity ratio of 3.17 (7.4). Holder concentration is exceptionally low, with the top 10 sellable wallets holding only 4.41% of the supply (7.5). However, a third-party registry indicates high correlation between these wallets, which may suggest coordinated market activity (7.6).
The token is immutable as all administrative keys are nullified, ensuring no future changes to the mint logic (7.7). Metadata is also marked as non-mutable, protecting the token's branding and identity from post-launch modification (7.8). No upgradeable extensions like transfer fees or hooks are present.
Monitor the top holder wallets for coordinated sell-offs, as the high correlation signal suggests they may be controlled by a single entity or group.
Since the liquidity is 100% burned and the mint authority is revoked, the token is protected against common 'rug pull' mechanics like liquidity removal or infinite minting. Verify the current holder distribution on-chain periodically to ensure no new large clusters emerge. Treat the token as a fixed-supply asset with no administrative intervention possible.
This token is brand new. Run a deeper AI-powered analysis of the contract code — free and instant.
Get Detailed Audit Is this your token? Publish your own audit on this page
