On-chain security analysis — is it a scam or legit?
SolanaThis SPL token mint presents critical risks due to an unrevoked mint authority, allowing for unlimited token creation and potential dilution of all holders.
Read the full analysisEach factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed
Holder balances as recorded by the audit of Sep 22, 2026
The 20 remaining pairs hold $66.9K between them and are not listed. The risk score reads depth across every pair.
Whether the LP tokens are locked could not be determined.
The mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
Verify on-chain that the mint authority is set to null before treating supply as fixed.
Unresolved
Token name, symbol, or image can be changed post-launch.
Verify metadata against off-chain expectations before trusting branding.
Unresolved
This SPL token mint presents critical risks due to an unrevoked mint authority, allowing for unlimited token creation and potential dilution of all holders. Additionally, the token's metadata is mutable, enabling changes to its name, symbol, or image post-launch. Holder distribution data from chain-native RPC was unavailable, but a third-party registry provided top 10 holder concentration.
The Zcash (ZEC) token is implemented using the classic spl-token program. A critical finding is the active mint authority at , which retains the power to mint new tokens. The freeze authority has been revoked, preventing any entity from freezing holder accounts. The token has a supply of 8,885,362,694,112 raw units with 8 decimals, and no Token-2022 extensions like permanent delegate, transfer hook, or default account state frozen are active. Balance mutability is also disabled.
The token exhibits healthy liquidity with $2,932,779 in total DEX liquidity and a 24-hour volume of $7,131,284. The volume-to-liquidity ratio is 2.43, which is considered normal and does not suggest wash trading. The DEX pair has been active for 312 days, indicating a reasonable track record. Holder concentration shows the top 10 accounts hold 37.34% of the supply, which is below thresholds for high concentration risk.
The mint authority remains active at , allowing for potential changes to the token's supply. The freeze authority has been revoked, which is a positive security measure. However, the token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. No Token-2022 specific upgradeability flags for transfer fees or transfer hooks are enabled.
Before interacting with this token, verify the current status of the mint authority on-chain to confirm it has been revoked, which would prevent further token issuance.
Monitor the token's metadata for any unexpected changes to its branding. Understand that while the freeze authority is revoked, the active mint authority introduces a significant risk of supply dilution.
Free for any token on the record. It links to this page and always shows the current score and the date it was checked.
Score changes are recorded as dated snapshots — history is append-only and cannot be edited.
The Zcash (ZEC) contract on Solana is A7bdiYdS5GjqGFtxf17ppRHtDKPkkRqbKtR27dxvQXaS. Compare it with the address the project itself publishes before trading: other contracts can carry the same name and ticker.
Quantum Audit's risk score for Zcash is 41/100 (Medium risk) as of Sep 22, 2026, computed by a deterministic function from on-chain facts — Contract verified: Verified; Mint: Mintable; Upgradeability: Fixed code; Honeypot: None found; Buy / sell tax: 0% / 0%. A score is a dated snapshot of those facts, not a guarantee; each one is listed on this page.
As of Sep 22, 2026, the 10 largest holders own 32.9% of the supply. The Holders section on this page shows who they are by holder type.
Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.
Get Detailed Audit Is this your token? Publish your own audit on this page
