Anti-Rug report: PHP

Valid Token-2022 mint on mainnet-beta (network verified by genesis hash).

Genesis hash verified for mainnet-beta:

5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d

Requested mint account:

Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump · {"owner":"TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"} · slot 460454363 · verify ↗

Limitations: Validity does not imply legitimacy: anyone can create a mint with any name.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

Mint authority is revoked: no one can mint more. Supply is fixed at 976474768.776689.

Mint account:

Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump · {"mintAuthority":null,"supply":"976474768776689","decimals":6} · slot 460454363 · verify ↗

Limitations: Reflects the state at the observed slot; an authority can be changed in any later transaction while it exists.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

Freeze authority is revoked: no one can freeze holder token accounts.

Mint account:

Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump · {"freezeAuthority":null} · slot 460454363 · verify ↗

Limitations: Reflects the state at the observed slot.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

Extensions present (MetadataPointer, TokenMetadata) carry no identified holder risk.

MetadataPointer: Metadata pointer fixed to Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump.:

Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump · {"type":18,"status":"pass","severity":"info","state":{"kind":"MetadataPointer","authority":null,"metadataAddress":"Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump"}} · slot 460454363

TokenMetadata: Embedded token metadata (evaluated by the metadata check).:

Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump · {"type":19,"status":"pass","severity":"info","state":{"kind":"TokenMetadata","updateAuthority":null,"mint":"Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump","name":"PHP-UP-2026","symbol":"PHP","uri":"https://metadata.j7tracker.io/metadata/rFAOV3WoUt.json","additionalMetadata":[]}} · slot 460454363

Limitations: Mint-level extensions only; per-account extensions (e.g. CPI guard, memo requirement) are not evaluated. Programs referenced by extensions (e.g. transfer hooks) are not audited.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

Largest wallet holds 3.34%, top-10 wallets 16.74%; unverified program-controlled accounts 4.50%; verified protocol accounts 10.86%. No wallet concentration above thresholds.

Concentration summary (basis points of total supply):

{"top1WalletBps":334,"top10WalletsBps":1674,"programControlledBps":450,"verifiedProtocolBps":1086} · slot 460454364

PumpSwap canonical pool (verified PDA, AMM liquidity): 10.86% of supply:

YQ4NNeQxHAtdcB8ohx21eJ9U8eTzxNRvGNHkRaA4Pnw · {"amount":"106047278846871","tokenAccounts":["67Nh73G8yz9isceykXujiuhSeTSjsNj8YgT6u7FFGQxn"],"class":"verified_protocol"} · slot 460454364 · verify ↗

wallet: 3.34% of supply:

A8pZuUXnN4bAC66DMfJkKYSgNGDvWGz7KCVFdYnfJynr · {"amount":"32630587907118","tokenAccounts":["dkrvod4n6w2EjsiYcrSP4ZNSUf4sqX22opXFL6jyzqi"],"class":"wallet"} · slot 460454364 · verify ↗

wallet: 2.58% of supply:

DFZYHaTZiRFWo23q5NQZCBTxXGZi36ZwVNP62iyB2Vmj · {"amount":"25228079672674","tokenAccounts":["38Eh9NN7iz8EWoW7JLkVcaBySfBVXADAqB4L8CfFtxf8"],"class":"wallet"} · slot 460454364 · verify ↗

program-derived address (pool/vault/locker? — not verified): 2.46% of supply:

8JgUXcFdXBcgNoC1YeDpewcLqkckuM5j3YU9oCGdSSvh · {"amount":"24045800233752","tokenAccounts":["CMcNMdbR5h7pBLaeUteePU8VPoLKKQSJF2zjXjde73Pe"],"class":"program_controlled"} · slot 460454364 · verify ↗

program-derived address (pool/vault/locker? — not verified): 2.03% of supply:

ELnpdJeWer4xsHUff93WPnmECYpDXE4GW1y2QmXtzFBm · {"amount":"19899342491190","tokenAccounts":["C7eZHEXGtwaG7EN6Qh4y3qcg377DsaQD6GHMMDk18SDP"],"class":"program_controlled"} · slot 460454364 · verify ↗

wallet: 2.02% of supply:

6vnTF4QHeGcJd3VyKpqD3NALk76xfJ3x3Jqbt7b34aSu · {"amount":"19769414498539","tokenAccounts":["8WHcUSuCxzQKMUXU3uUBWVqkfWiPA1oDe7PHpCwigQ2t"],"class":"wallet"} · slot 460454364 · verify ↗

wallet: 1.46% of supply:

FBoZoQi1DPrAEV4YAKJmfeSAVgw3CTPqx2RidhPwXj6y · {"amount":"14353938925431","tokenAccounts":["GhoUTmJgFZRXrYSskPmVWEpEVpcro1s4KMcieQ9N3NMx"],"class":"wallet"} · slot 460454364 · verify ↗

wallet: 1.37% of supply:

Ff6SgUNA5Zg6Gtm9b89KyFxAp7tMMPhNb1BCpPHJPcG8 · {"amount":"13392205684244","tokenAccounts":["FAET9dU8qA1eYncM77zbLHSXFARmKJ5wDhGRkkrk5rsK"],"class":"wallet"} · slot 460454364 · verify ↗

wallet: 1.33% of supply:

ELAfUvH9oWZCBnEZvpeGzReWd5Hvp5D9Hf9wJzp1hxGN · {"amount":"13044857012555","tokenAccounts":["GTRCRRwfJEVqgcun74tfHcar6zRqd5vJY54jV77xuAFm"],"class":"wallet"} · slot 460454364 · verify ↗

wallet: 1.32% of supply:

78KXkKV4J2jMQeb9SsCejRB5ZSH6m81xVL66gGqQUZS2 · {"amount":"12934786921003","tokenAccounts":["FQjnU5Dvc2u8RzK47o6WBZ1o6DsM66vHZqH7usSfph4g"],"class":"wallet"} · slot 460454364 · verify ↗

Limitations: Only the 20 largest token accounts are visible via getTokenLargestAccounts; smaller holders are not aggregated. One entity can split holdings across many wallets (Sybil); concentration may be understated. Program-derived owners are not assumed safe: they may be AMM pools, lockers, or creator-controlled vaults.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

Immutable on-chain metadata with no impersonation or hidden-character indicators.

Metadata (token-2022-extension):

Cbkg5w7V7W2J2sUmecnyN825CbvwvXwasfhduVtNpump · {"name":"PHP-UP-2026","symbol":"PHP","uri":"https://metadata.j7tracker.io/metadata/rFAOV3WoUt.json","updateAuthority":null,"isMutable":false} · slot 460454363 · verify ↗

Limitations: The metadata URI (image, description, socials) is NOT fetched: off-chain content is unverified and may change. Impersonation is checked only against a short list of major mainnet tickers; bridged tokens can legitimately share a ticker.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

Liquidity sits in the canonical PumpSwap pool (257.640604928 SOL). The LP mint's supply is 0: all LP tokens were burned, so no LP holder can withdraw liquidity through the AMM.

pump.fun bonding curve (PDA of the mint):

3to9rBS4nGJVkhmiUu4ekZAcrV75X7EmZ9mBaMcv4csC · {"realSolReservesLamports":"0","realTokenReserves":"0","virtualSolReserves":"0","virtualTokenReserves":"0","complete":true,"creator":"DLEdCMTLm7ZEPt16ChW8WdnfQNtVonGzFnP9kuxxFT2C"} · slot 460454363 · verify ↗

PumpSwap canonical pool (PDA derived from the mint, owner/discriminator/mints verified):

YQ4NNeQxHAtdcB8ohx21eJ9U8eTzxNRvGNHkRaA4Pnw · {"lpMint":"3RWCSQ1VWWa3g3QX5HP2PtwMh3fjfJ1Ste3B7MSfvesi","lpSupplyRecordedByPool":"4193388341738","lpCirculatingSupply":"0","coinCreator":"DLEdCMTLm7ZEPt16ChW8WdnfQNtVonGzFnP9kuxxFT2C"} · slot 460454363 · verify ↗

Pool quote vault (WSOL):

3dVSj2jXVBVR45vh7mrVqHZRnkxYT3kCNhgdNtgzwhbv · {"lamports":"257640604928"} · slot 460454363 · verify ↗

Pool base vault:

67Nh73G8yz9isceykXujiuhSeTSjsNj8YgT6u7FFGQxn · {"amount":"106047278846871"} · slot 460454363 · verify ↗

Limitations: Supported in this MVP: pump.fun bonding curve and the canonical PumpSwap pool. Raydium, Orca, Meteora and non-canonical PumpSwap pools are NOT checked. No price or liquidity history is produced; values are a snapshot at the observed slot. The PumpSwap program is upgradeable by its upgrade authority; its code was not audited here. Only the canonical pool created by pump.fun migration is located; liquidity elsewhere is not counted. 58 trailing bytes of the pool layout were not interpreted.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

None of the known privileged or creator addresses own a top-20 token account (heuristic).

Privileged / creator addresses compared:

{"DLEdCMTLm7ZEPt16ChW8WdnfQNtVonGzFnP9kuxxFT2C":["pump.fun creator"]}

Limitations: HEURISTIC: a match shows a shared address, not proven coordination; no match does not prove independence (funds can move through fresh wallets). Funding-source / transaction-graph clustering is not performed in this MVP. Only the 20 largest token accounts are visible via getTokenLargestAccounts; smaller holders are not aggregated.

Source solana-rpc · checked 23/10/2026, 13:08:24 UTC

No risky authority actions in the scanned window (15 transactions); earlier history was not checked.

Limitations: Scanned 200 most recent signatures referencing the mint and parsed 15 successful transactions. Only instructions that reference the mint account are visible (e.g. freezes of token accounts are included, plain transfers are ignored). History is a recent window only; older authority changes (including creation) may not be shown.

Source solana-rpc · checked 23/10/2026, 13:08:26 UTC