| Risk factor | Finding | Evidence | Date |
|---|---|---|---|
| Sellable | Yes | ChainSift simulation | 24 Oct 2026 |
| Buy tax | 0% | Contract | 24 Oct 2026 |
| Sell tax | 0% | Contract | 24 Oct 2026 |
| Admin mint | Not found | Implementation code | 24 Oct 2026 |
| Transfers pausable | Not found | Implementation code | 24 Oct 2026 |
| Address blacklist | Enabled | Implementation code | 24 Oct 2026 |
| Upgradeable proxy | Yes — a single wallet can replace the code | Proxy contract | 24 Oct 2026 |
| Source verified | Yes | Block explorer | 24 Oct 2026 |
| Top-10 holders | 5.2% | Holder distribution | 24 Oct 2026 |
| Liquidity locked | No | LP holders | 24 Oct 2026 |
| Holders | 14492 | Token contract | 24 Oct 2026 |
| Deployed by | 0x9b78d8…5ebb5c |
| Code can be replaced by | 0x7d1c49…fe53e9 — a single wallet |
| Current code | 0xfa41b6…7c7b90 |
| Holders | 14,492 |
| Rank | Address | Share |
|---|---|---|
| #1 · Uniswap v4 pool · contract | 0x8366a3…e40951 | 2.57% |
| #2 | 0x828987…b74bd9 | 0.35% |
| #3 | 0x255c0e…6a07a7 | 0.32% |
| #4 | 0x181206…5aa046 | 0.31% |
| #5 | 0x9dfc0f…6b6b71 | 0.31% |
This automated check looked at the contract code behind McRib and found a few things worth understanding before deciding anything. The contract includes a blacklist function, which means the owner has the technical ability to block specific wallet addresses from transferring or selling the token — even after you've bought in. More significantly, this contract uses an upgradeable proxy, which means a single wallet can swap out the underlying code entirely, including adding features that aren't present today, such as taxes, transfer limits, or minting. In practice, this means the current snapshot of "no admin mint found" or "transfers not pausable" describes the contract as it stands now, not necessarily how it will behave in future, since the code itself can be replaced. Liquidity is also not locked, meaning whoever holds the liquidity pool tokens could withdraw the paired funds at any time, which affects how easily the token can be bought or sold on the open market. On the positive side, no honeypot behaviour was detected in this check — the simulation was able to both buy and sell with 0% tax — and the contract source is verified on the block explorer, meaning the code is at least publicly readable. Holder concentration is relatively low, with the top 10 wallets holding 5.2% of supply as of the check.
It's important to be clear about what this check does not cover. This is an automated read of contract mechanics only — it does not evaluate who the team behind McRib is, whether there's a roadmap or real utility, how tokens are allocated or vested, whether any legal entity stands behind the project, or what the people controlling the upgradeable proxy or blacklist function intend to do with that power. A contract can score well on technical indicators while still carrying risk tied to the people and decisions behind it, and nothing here speaks to that.
Before putting money in, it's worth looking into who controls the proxy admin and blacklist permissions — some projects route this through a multisig or timelock, which at least adds friction and visibility to any change, while others leave it with a single wallet. It's also worth checking whether the liquidity pool is paired with a recognisable asset and looking at how concentrated that LP ownership is, since unlocked liquidity paired with a single controlling wallet is a different risk profile than unlocked liquidity spread across many holders. Searching for the team's public presence, any audit reports, and community discussion of this specific contract address can also help fill in the gaps this check doesn't reach.
Contracts change after they are checked. Tell us where to reach you and we will say when this one does. Free for three contracts, no account.
We checked 18 points out of 100.
The other 82 are where money is usually lost: who the team is, where the tokens sit, what the documents actually say, and what the project chose not to put on its front page.