| Risk factor | Finding | Evidence | Date |
|---|---|---|---|
| Sellable | Yes | Transfer simulation | 6 Oct 2026 |
| Buy tax | 0% | Contract | 6 Oct 2026 |
| Sell tax | 0% | Contract | 6 Oct 2026 |
| Admin mint | Not present | Contract | 6 Oct 2026 |
| Transfers pausable | Enabled | Contract | 6 Oct 2026 |
| Address blacklist | Not present | Contract | 6 Oct 2026 |
| Upgradeable proxy | No | Contract | 6 Oct 2026 |
| Source verified | Yes | Block explorer | 6 Oct 2026 |
| Top-10 holders | 68% | Holder distribution | 6 Oct 2026 |
| Liquidity locked | No | LP holders | 6 Oct 2026 |
| Holders | 215800 | Token contract | 6 Oct 2026 |
| Deployed by | 0xe2d0f9…124bbe |
| Holders | 215,800 |
| Rank | Address | Share |
|---|---|---|
| #1 · contract | 0x677fd4…6ca1a1 | 51.79% |
| #2 | 0x460ae5…966537 | 7.37% |
| #3 | 0xa63eac…0a0182 | 2.12% |
| #4 | 0xf97781…41acec | 1.71% |
| #5 · contract | 0xd2e6e9…3284f4 | 1.00% |
This automated check scanned the ONDO contract on Ethereum and found a score of 13 out of 18, with a few points worth unpacking before anything else. Transfers can currently be paused by whoever holds the owner privileges on this contract — in practice, this means that address has the technical ability to freeze trading for all holders at once, regardless of what any individual holder wants to do with their tokens. No admin mint function was detected, meaning the contract does not appear to let the owner create new tokens out of thin air and dilute existing holders, and no blacklist function was found either, so there's no built-in mechanism to block specific addresses from transacting on the date of this check. The contract is not upgradeable, so the underlying logic cannot be swapped out later via a proxy. Buy and sell tax both read 0%, and a transfer simulation returned sellable, meaning no honeypot behaviour was detected — tokens could be sold in the simulation. Source code is verified on the block explorer, which allows anyone to read the actual logic rather than trusting a black box. Two findings stand out as higher-risk: top-10 wallets hold 67.9% of supply, a concentration level where large holders moving their positions could affect price significantly, and liquidity is not locked, meaning whoever controls that liquidity pool retains the ability to withdraw it.
It's important to be clear about what this check does not cover. This is a mechanical read of the contract's code and on-chain data only — it says nothing about who is behind the project, whether the team has a track record, how the token's supply schedule or incentives are structured, what legal entity (if any) stands behind it, or what their intentions are. A verified, well-structured contract can still sit behind a project with weak fundamentals or unclear governance, and this check has no way of detecting that.
Before putting money in, it's worth looking up who controls the owner/admin address and whether those privileges sit behind a multisig or timelock, checking whether the project has published any information about team identity and token allocation schedules, reviewing where and how liquidity is held given it isn't locked, and looking at holder distribution over time rather than as a single snapshot. None of this constitutes investment advice, and nothing here confirms or rules out risk beyond what was detected on the date of the check.
Contracts change after they are checked. Tell us where to reach you and we will say when this one does. Free for three contracts, no account.
We checked 18 points out of 100.
The other 82 are where money is usually lost: who the team is, where the tokens sit, what the documents actually say, and what the project chose not to put on its front page.