| Risk factor | Finding | Evidence | Date |
|---|---|---|---|
| Sellable | Yes | Transfer simulation | 2 Oct 2026 |
| Buy tax | No data | Contract | 2 Oct 2026 |
| Sell tax | No data | Contract | 2 Oct 2026 |
| Admin mint | Not present | Contract | 2 Oct 2026 |
| Transfers pausable | Not present | Contract | 2 Oct 2026 |
| Address blacklist | Not present | Contract | 2 Oct 2026 |
| Upgradeable proxy | No | Contract | 2 Oct 2026 |
| Source verified | Yes | Block explorer | 2 Oct 2026 |
| Top-10 holders | 40% | Holder distribution | 2 Oct 2026 |
| Holders | 1019293 | Token contract | 2 Oct 2026 |
| Deployed by | 0xbd11ce…b5856c |
| Current owner | None — ownership renounced |
| Holders | 1,019,293 |
| Rank | Address | Share |
|---|---|---|
| #1 | 0x8c2e59…e9d3ba | 15.33% |
| #2 | 0x941e64…44898a | 6.61% |
| #3 | 0x5d6575…221f35 | 3.61% |
| #4 | 0x8752a7…0740cc | 2.89% |
| #5 | 0x65293f…2633c8 | 2.40% |
This automated check looked at the TOSHI contract on Base and found no honeypot behaviour: a transfer simulation showed the token can be bought and sold. No admin mint function was detected, meaning nothing in the code as reviewed lets the contract owner create new tokens out of thin air and dilute holders. Transfers are not pausable, so no on/off switch was found that could freeze trading contract-wide. No address blacklist function was detected, meaning no built-in mechanism was found to block specific wallets from moving their tokens. The contract is not upgradeable through a proxy, so the logic deployed on-chain today was not found to be swappable for different logic later. The source code is verified on the block explorer, which means the code humans and tools can read matches what's actually running, supporting the reliability of this check. Buy and sell tax data was not available at the time of this check, so any transaction-level fee percentages are unconfirmed. Holder concentration is moderate-to-notable: the top 10 wallets hold 39.6% of supply across just over 1 million holders, which is a factor worth weighing alongside everything else.
It's important to be clear about what this check does not cover. This is a purely mechanical, automated read of the contract's code and on-chain data as they existed at the time of the scan. It says nothing about who is behind the project, whether the team has doxxed identities, what their track record is, how tokens were allocated at launch, whether there are vesting schedules or insider unlock cliffs, what the stated use case or roadmap is, or whether any marketing claims are accurate. Legal structure, regulatory status, and the intent of the people controlling the contract are entirely outside the scope of an on-chain mechanics check like this one.
Before making any decision, it's worth independently verifying who holds the top wallets and whether any are known exchange or liquidity-pool addresses rather than individuals, since that changes what concentration figures actually mean. Check whether liquidity is locked or burned and for how long, look at the project's own documentation and social channels for team identity and token distribution plans, and search for independent commentary or audits beyond this automated result. None of this replaces your own research or professional financial advice, and this summary should not be read as a recommendation to buy, hold, or sell.
Contracts change after they are checked. Tell us where to reach you and we will say when this one does. Free for three contracts, no account.
We checked 18 points out of 100.
The other 82 are where money is usually lost: who the team is, where the tokens sit, what the documents actually say, and what the project chose not to put on its front page.