| Risk factor | Finding | Evidence | Date |
|---|---|---|---|
| Sellable | Yes | ChainSift simulation | 23 Oct 2026 |
| Buy tax | 0% | ChainSift simulation | 23 Oct 2026 |
| Sell tax | 0% | ChainSift simulation | 23 Oct 2026 |
| Admin mint | Not found | Implementation code | 23 Oct 2026 |
| Transfers pausable | Not found | Implementation code | 23 Oct 2026 |
| Address blacklist | Enabled | Implementation code | 23 Oct 2026 |
| Upgradeable proxy | Yes — a single wallet can replace the code | Proxy contract | 23 Oct 2026 |
| Source verified | Yes | Block explorer | 23 Oct 2026 |
| Top-10 holders | 100% | Holder distribution | 23 Oct 2026 |
| Holders | 77607 | Token contract | 23 Oct 2026 |
| Deployed by | 0xeff893…663b0e |
| Code can be replaced by | 0xeff893…663b0e — a single wallet |
| Current code | 0x3872ea…b09847 |
| Holders | 77,607 |
| Rank | Address | Share |
|---|---|---|
| #1 | 0xeff893…663b0e | 100.00% |
| #2 · contract | 0xffffa6…5ec697 | 0.01% |
| #3 | 0xffff33…91bdfa | 0.01% |
| #4 · contract | 0xfffe70…530d58 | 0.01% |
| #5 · contract | 0xfffdca…6f7462 | 0.01% |
This automated check looked at STONKEX's contract code on Base and found a mix of features worth understanding before going further. The contract includes a blacklist function, which means whoever controls the owner wallet can block specific addresses from transferring or trading the token — effectively freezing a holder out at will. More significantly, the contract uses an upgradeable proxy pattern, which means a single wallet has the power to swap out the entire contract logic at any time, including adding new restrictions, changing tax rates, or altering anything else on this page, even if those things aren't present today. Token source code is verified on the block explorer, meaning the code is publicly readable, though that alone says nothing about what the owner chooses to do with their control. On the positive side, no admin mint function or transfer-pausing mechanism was found in the current implementation, and a simulated transaction showed the token can be bought and sold with 0% tax on each side, with no honeypot behaviour detected on the date of this check. Holder concentration is a separate concern: the top 10 wallets hold 100% of supply, despite there being over 77,000 holders on record, which suggests supply is extremely concentrated among a small number of addresses relative to the broader holder count.
It's important to be clear about what this check does not cover. This is an automated read of contract mechanics only — it does not evaluate who is behind the project, how tokens were distributed, what the team has said or promised, whether there is a legal entity behind it, or what their intentions are. A verified, non-malicious-looking contract can still sit behind a team that behaves irresponsibly, and conversely, flagged mechanics don't necessarily mean harm is intended. None of this is an assessment of the people or business behind STONKEX, only of what the code technically permits.
Before putting money into this or any token, it's worth looking into who holds the proxy admin and owner wallet keys, and whether those are controlled by a multisig, a timelock, or a single private key. Check whether the top-10 holder wallets are known entities (such as exchanges or liquidity pools) rather than individuals, since that changes the concentration picture considerably. Look for any public statements, audits, or documentation from the team about why the blacklist and upgrade functions exist and whether there are any commitments limiting their use. Finally, consider checking the project's social channels and any independent audit reports, since none of that is captured by this contract-level scan.
Contracts change after they are checked. Tell us where to reach you and we will say when this one does. Free for three contracts, no account.
We checked 18 points out of 100.
The other 82 are where money is usually lost: who the team is, where the tokens sit, what the documents actually say, and what the project chose not to put on its front page.