| Risk factor | Finding | Evidence | Date |
|---|---|---|---|
| Sellable | Yes | Transfer simulation | 20 Oct 2026 |
| Buy tax | 0% | Contract | 20 Oct 2026 |
| Sell tax | 0% | Contract | 20 Oct 2026 |
| Admin mint | Enabled | Implementation code | 20 Oct 2026 |
| Transfers pausable | Enabled | Implementation code | 20 Oct 2026 |
| Address blacklist | Enabled | Implementation code | 20 Oct 2026 |
| Upgradeable proxy | Yes — a timelock with a 1-day delay can replace the code | Proxy contract | 20 Oct 2026 |
| Source verified | Yes | Block explorer | 20 Oct 2026 |
| Top-10 holders | 35.4% | Holder distribution | 20 Oct 2026 |
| Liquidity locked | No | LP holders | 20 Oct 2026 |
| Holders | 89356 | Token contract | 20 Oct 2026 |
| Deployed by | 0x36c2e6…aeb537 |
| Code can be replaced by | 0x4a515a…91f5e3 — a timelock with a 1-day delay |
| Current code | 0x7da4c5…0fa543 |
| Holders | 89,356 |
| Rank | Address | Share |
|---|---|---|
| #1 | 0x5a52e9…70efcb | 18.48% |
| #2 | 0xf97781…41acec | 4.25% |
| #3 | 0xd2dd7b…e6869f | 2.74% |
| #4 | 0x7d766b…68107d | 2.55% |
| #5 | 0x3eba30…51bf23 | 1.44% |
This automated check found several capabilities built into the PAXG contract that give its owner significant control over the token. The owner can mint new supply, meaning the total number of tokens in circulation can be increased at the owner's discretion. Transfers can be paused by the owner, which would stop holders from sending or trading the token during that period. The contract supports blacklisting, so specific addresses can be blocked from transacting. The owner can also change balances directly, which means account holdings can be adjusted without the holder's involvement. On top of this, the contract is upgradeable through a proxy pattern, with a one-day timelock before any new code takes effect — in practice this means all of the above behaviours, and potentially others not yet visible in the current code, could be altered after a one-day notice period. None of this means these powers will be used in a particular way; it means the underlying code allows for them, which is a different question from whether they are exercised responsibly.
It's worth noting that these controls are common in regulated, asset-backed stablecoin-style tokens, where issuers retain administrative functions to meet compliance obligations, such as freezing addresses linked to illicit activity. Source code was verified on the block explorer at the time of this check, and no honeypot-style selling restriction was detected in transfer simulation, with buy and sell taxes both reading 0%. Holder concentration shows the top 10 wallets controlling 35.2% of supply, and liquidity for this token was not found to be locked at the time of the check.
This check only reads contract mechanics as they exist on-chain on the date of the scan. It does not assess who controls the owner wallet or timelock, whether that entity is a regulated company or an anonymous individual, the terms under which tokens are redeemable for underlying assets, legal or custodial arrangements, audit history, or the intentions behind any of the permissions listed above. A high or low score here reflects code structure, not trustworthiness of the people or organisation behind it.
Before making any decision, it would be worth independently verifying who controls the admin and timelock addresses, reading any publicly available terms of service, attestations, or reserve audits associated with the token issuer, checking whether the project has a history of exercising pause, mint, or blacklist functions, and reviewing the liquidity arrangements on the specific trading venue being considered rather than relying on-chain data alone.
Contracts change after they are checked. Tell us where to reach you and we will say when this one does. Free for three contracts, no account.
We checked 18 points out of 100.
The other 82 are where money is usually lost: who the team is, where the tokens sit, what the documents actually say, and what the project chose not to put on its front page.