Quantum Audit Logo

Is Zcash Safe?

On-chain security analysis — is it a scam or legit?

Is this your token? Publish your own audit on this page →

Zcash ZEC
A7bdiY…QXaS
Solana Not verifiedLast checked 3d ago 1 audit on record
Executive SummaryAI Copilot

This SPL token mint presents critical risks due to an unrevoked mint authority, allowing for unlimited token creation and potential dilution of all holders. Additionally, the token's metadata is mutable, enabling changes to its name, symbol, or image post-launch. Holder distribution data from chain-native RPC was unavailable, but a third-party registry provided top 10 holder concentration.

1 Critical1 Low
Volume 24h
$7.87M
Liquidity
$2.58M
Price
$949.9600
Token Age
10mo
Top 10 Holders
37.1%

Security Findings

Critical

Mint Authority Not Revoked

C-01The mint authority is FvULaw…NYds. The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
IssueThe mint authority is . The holder of this key can mint unlimited new tokens, diluting all current holders to zero value.
FixVerify on-chain that the mint authority is set to null before treating supply as fixed.
StatusUnresolved
Low

Mutable Metadata

L-01Token name, symbol, or image can be changed post-launch.
IssueToken name, symbol, or image can be changed post-launch.
FixVerify metadata against off-chain expectations before trusting branding.
StatusUnresolved

Category Ratings

TechnicalMedium4/10

The Zcash (ZEC) token is implemented using the classic spl-token program. A critical finding is the active mint authority at , which retains the power to mint new tokens. The freeze authority has been revoked, preventing any entity from freezing holder accounts. The token has a supply of 8,885,362,694,112 raw units with 8 decimals, and no Token-2022 extensions like permanent delegate, transfer hook, or default account state frozen are active. Balance mutability is also disabled.

GovernanceHigh1/10

The token exhibits healthy liquidity with $2,932,779 in total DEX liquidity and a 24-hour volume of $7,131,284. The volume-to-liquidity ratio is 2.43, which is considered normal and does not suggest wash trading. The DEX pair has been active for 312 days, indicating a reasonable track record. Holder concentration shows the top 10 accounts hold 37.34% of the supply, which is below thresholds for high concentration risk.

UpgradesMedium4/10

The mint authority remains active at , allowing for potential changes to the token's supply. The freeze authority has been revoked, which is a positive security measure. However, the token's metadata is mutable, meaning its name, symbol, or image can be altered post-launch. No Token-2022 specific upgradeability flags for transfer fees or transfer hooks are enabled.

Security Checklist

Contract VerifiedFail
No Mint Function?
Liquidity LockedFail
Not a ProxyPass
HoneypotNoneBuy Tax0.0%Sell Tax0.0%

Liquidity Depth

Show 4 more pairsShow less

The 20 remaining pairs hold $56.7K between them and are not listed.

The risk score reads depth across every pair. The volume figure and the volume-to-liquidity ratio elsewhere on this page describe only the pair this audit analysed, so the two are not directly comparable.

What Raised This Score

  • Ownership status UNKNOWN (owner could not be resolved)
  • Mint capability UNKNOWN (implementation ABI unreadable)
  • Contract source NOT verified
  • Top-10 concentration > 30% (37.1% total → 37.1% effective; 37.1% in EOAs, 0.0% in contracts — moderate)
  • Liquidity NOT locked (owner can withdraw — rug-pull risk)
  • 1 Critical finding(s) from audit
  • 1 Low finding(s) from audit

Each factor is an on-chain fact recorded at the time of this analysis. The score is computed from them by a deterministic function, so the same contract returns the same score for anyone who runs the audit. How scores are computed

Related Audits

Collector Crypt (CARDS)High RiskMumu the Bull (MUMU)High RiskMeteora (MET)High RiskNietzschean Penguin (PENGUIN)High RiskKuroHigh RiskUdin din din dun (UDIN)High Risk

Would You Like a More Detailed Audit of Zcash?

Our AI-powered scanner gives you a deeper, real-time smart contract analysis — free, with every scoring factor shown.

Get Detailed Audit