- Cult of Kek
SolanaSPL Token
Token Security Score
Base Info
- Address
- 4Nof8i...AjhuUT
- Total Supply
- 10000999999999
- Methods
- Static Analysis, On-Chain Analysis
- Language
- Rust
- Token Deploy Time
- a month ago
- Last Check By (UTC)
- 2024-07-27 06:11:49
Summary
- 0
- Critical
- 4
- Major
- 3
- Medium
- 0
- Minor
- 0
- Informational
Holding Info
Security
Automated Analysis
Account Authority
Minting Authority
The minting authority is an address or entity granted permission to create new tokens within a token's ecosystem.
Based on the on-chain analysis, the mint authority is 2p7zpUsro6botoE74PkNdFLTNTEWr1T6QuN1u1ybuB1u, meaning that additional tokens can be minted beyond the current supply.
Freeze Authority
The freeze authority is a control mechanism within some token ecosystems that allows the designated authority to prevent specific accounts from transferring tokens.
Based on the on-chain analysis, since the freeze authority is 2p7zpUsro6botoE74PkNdFLTNTEWr1T6QuN1u1ybuB1u, as a central entity or mechanism it can block or freeze token transfers between accounts.
MetaData and Update Authority
Token Extensions
External Dependencies
Executive Summary
This inspection detailed the findings from a preliminary fast-track behavior and security analysis of a token that utilizes Solana's built-in program including Solana Token Program and Solana Token Program 2022. The scan aimed to verify various aspects of the token, including deployment configuration, real-time transactions, token holder distribution, and adherence to a memecoin security checklist, which may interest stakeholders looking to understand potential risks.
Assessment Objective
Disclaimer
This document outlines the results of a preliminary fast-track behavior and security analysis and does not constitute an official security assessment. Stakeholders should proceed with a full-scale audit to understand and evaluate the token's security posture.
Methodology
The scan employed automated tools capable of quickly analyzing the token based on predefined metrics and checklists. The focus was on identifying overt issues that could be readily apparent without in-depth testing.
Limitations
This scanned result reflects the findings from a fast-track behavior and security analysis and should not be interpreted as a comprehensive security audit. The inspection result is limited to the following:
- Detailed manual review by security experts.
- Extensive static analysis.
- Dynamic analysis in varied operational scenarios.
- In-depth investigation of complex vulnerabilities or logic flaws.
Findings Summary
- 0 Critical
- Critical risks are those that impact the safe functioning of a platform and must be addressed before launch. Users should not invest in any project with outstanding critical risks.
- 4 Major
- Major risks can include centralization issues and logical errors. Under specific circumstances, these major risks can lead to loss of funds and/or control of the project.
- 3 Medium
- Medium risks may not pose a direct risk to users’ funds, but they can affect the overall functioning of a platform.
- 0 Minor
- Minor risks can be any of the above, but on a smaller scale. They generally do not compromise the overall integrity of the project, but they may be less efficient than other solutions.
- 0 Informational
- Informational errors are often recommendations to improve the style of the code or certain operations to fall within industry best practices. They usually do not affect the overall functioning of the code.
- 0 Discussion
- The impact of the issue is yet to be determined, hence requires further clarifications from the project team.
Findings
ID | Title | Severity |
|---|---|---|
No Data | ||
TP-1 Mint Authority not None
Severity: Major
Category: Centralization
Based on the onchain analysis, the mint authority is 2p7zpUsro6botoE74PkNdFLTNTEWr1T6QuN1u1ybuB1u, meaning that additional tokens can be minted beyond the current supply.
If the mint authority's private key were compromised, it could lead to the unauthorized creation of tokens. This would potentially disrupt the token's market circulation by diluting the token supply and possibly crashing its value.
TP-2 Freeze Authority not None
Severity: Major
Category: Centralization
Based on the onchain analysis, the freeze authority is 2p7zpUsro6botoE74PkNdFLTNTEWr1T6QuN1u1ybuB1u, as a central entity or mechanism it can block or freeze token transfers between accounts.
Unauthorized freezing of token accounts can halt the circulation of tokens, affecting market liquidity and trust.
TP-3 Major Token Holders
Severity: Major
Category: Centralization
Top 20 token holders owns 100.0% of the total supply. Major token holders may dump the tokens in the market (such as AMM) for profit.
Compromise of accounts holding large token amounts could lead to market manipulation or crash through mass selling.
TP-4 Initial Token Distribution
Severity: Major
Category: Centralization
Based on the on-chain analysis, the initially minted 1000000000 Cult of Kek token has been transferred to the token account 5mcimMKYHJ2PaxiSNZTfN6BDsEpYNKrb6t79fR1RXhaA in the transaction: GS16eaHw9tYvQKDwQvnLkdnhJiN5oRTKqGdWqUwkqGW6axbZxGar9Z92hEYRCKxhEe6kdLeD3MYGqFotzAHvjeL
This could be a centralization risk as those accounts can distribute tokens without obtaining the consensus of the community. Any compromise to those accounts that hold undistributed tokens may allow the attacker to steal and sell tokens on the market, resulting in severe damage to the project.
TP-6 Newly Initiated Project
Severity: Medium
Category: Volatile Market
Based on the onchain analysis, Cult of Kek is launched only 0 Months 0 Days 12 Hours ago. (First mint: GS16eaHw9tYvQKDwQvnLkdnhJiN5oRTKqGdWqUwkqGW6axbZxGar9Z92hEYRCKxhEe6kdLeD3MYGqFotzAHvjeL)Thus the token may haven't been well tested by the market and the community yet.
TP-8 Insufficient DEX Liquidity Could Impact The Token Stability
Severity: Medium
Category: Volatile Market
Based on the onchain analysis, there is a Raydium Authority V4 pair of Cult of Kek / SOL(liquidity token address: DnTQfprN3o2rhx4YUNat3v75bd4zQN5iQqf5PoEeRKgK) on the Raydium DEX. This liquidity pair only holds 657776671.061875 of Cult of Kek, which is only 0.01% of the total supply(10000999999999.0). Such low DEX liquidity may leads to dramatic price change in a short time.
TMP-1 Update Authority of Token Metadata
Severity: Medium
Category: Centralization
Based on onchain analysis, the update authority exists (2p7zpUsro6botoE74PkNdFLTNTEWr1T6QuN1u1ybuB1u) and the isMutable option is set to True.
Unauthorized changes to metadata could mislead users and platforms, disrupting ecosystem operations based on incorrect token information. https://developers.metaplex.com/token-metadata/update
Disclaimer
This document outlines the results of a preliminary fast-track behavior and security analysis and does not constitute an official security assessment. Stakeholders should proceed with a full-scale audit to understand and evaluate the token's security posture.