Anti-Rug report: PUMP

Valid Token-2022 mint on mainnet-beta (network verified by genesis hash).

Genesis hash verified for mainnet-beta:

5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d

Requested mint account:

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"owner":"TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"} · slot 460544425 · verify ↗

Limitations: Validity does not imply legitimacy: anyone can create a mint with any name.

Source solana-rpc · checked 23/10/2026, 18:26:09 UTC

Mint authority is revoked: no one can mint more. Supply is fixed at 826322330457.487515.

Mint account:

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"mintAuthority":null,"supply":"826322330457487515","decimals":6} · slot 460544425 · verify ↗

Limitations: Reflects the state at the observed slot; an authority can be changed in any later transaction while it exists.

Source solana-rpc · checked 23/10/2026, 18:26:09 UTC

Freeze authority is revoked: no one can freeze holder token accounts.

Mint account:

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"freezeAuthority":null} · slot 460544425 · verify ↗

Limitations: Reflects the state at the observed slot.

Source solana-rpc · checked 23/10/2026, 18:26:09 UTC

Risky Token-2022 extensions: TransferHook.

Severity:

medium

TransferHook: No hook program is set, but DMdBa812dBW1CHVhmTyUyVcrBnSbZbfoFC7U14k4riH1 can enable one later.:

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"type":14,"status":"risk","severity":"medium","state":{"kind":"TransferHook","authority":"DMdBa812dBW1CHVhmTyUyVcrBnSbZbfoFC7U14k4riH1","programId":null}} · slot 460544425

MetadataPointer: Metadata pointer fixed to pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn.:

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"type":18,"status":"pass","severity":"info","state":{"kind":"MetadataPointer","authority":null,"metadataAddress":"pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn"}} · slot 460544425

TokenMetadata: Embedded token metadata (evaluated by the metadata check).:

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"type":19,"status":"pass","severity":"info","state":{"kind":"TokenMetadata","updateAuthority":null,"mint":"pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn","name":"Pump","symbol":"PUMP","uri":"https://ipfs.io/ipfs/bafkreibcglldkfdekdkxgumlveoe6qv3pbiceypkwtli33clbzul7leo4m","additionalMetadata":[]}} · slot 460544425

Limitations: Mint-level extensions only; per-account extensions (e.g. CPI guard, memo requirement) are not evaluated. Programs referenced by extensions (e.g. transfer hooks) are not audited.

Source solana-rpc · checked 23/10/2026, 18:26:09 UTC

Largest wallet holds 2.98%, top-10 wallets 12.61%; unverified program-controlled accounts 58.24%; verified protocol accounts 0.00%. Concentrated holdings let a few wallets crash the price by selling.

Severity:

low

Concentration summary (basis points of total supply):

{"top1WalletBps":298,"top10WalletsBps":1261,"programControlledBps":5824,"verifiedProtocolBps":0} · slot 460544434

program-derived address (pool/vault/locker? — not verified): 27.74% of supply:

Cfq1ts1iFr1eUWWBm8eFxUzm5R3YA3UvMZznwiShbgZt · {"amount":"229261858182103957","tokenAccounts":["7AN6avKCJPMkXkW8kPwMuHmaWvJeHH69e8rKpLf9rdfk"],"class":"program_controlled"} · slot 460544434 · verify ↗

program-derived address (pool/vault/locker? — not verified): 9.68% of supply:

8UhbNoBXmGoxJr2TeWW8wmSMoWmjS2rTT2tVJxzuTogC · {"amount":"80000000010000236","tokenAccounts":["5Sbgq5EJP7JQDkZQ22cSwWQXFofwsJiuygkPXraDthwf"],"class":"program_controlled"} · slot 460544434 · verify ↗

program-derived address (pool/vault/locker? — not verified): 4.23% of supply:

9pkFKCR1mdS31JxjKdtmWg2awZUg6vJUYVY722DAcXzv · {"amount":"35000000010000254","tokenAccounts":["GGNKqK95ZFFyKem9Gqx7uvc7De4cBTjxYMJYssHWVaAM"],"class":"program_controlled"} · slot 460544434 · verify ↗

program-derived address (pool/vault/locker? — not verified): 3.02% of supply:

BBvQteuawKB2UtExfevL8HYLjWWsgmWXsp922vFbvCfT · {"amount":"25000000010023050","tokenAccounts":["FapAcxVZBeeyQYMH5uyFmWM8i9HKvAfPqYAe2yYmAQao"],"class":"program_controlled"} · slot 460544434 · verify ↗

program-derived address (pool/vault/locker? — not verified): 3.02% of supply:

GTeSSwovPiVirpvWJpThUWiLDSLsuApmJw621Yom3MhB · {"amount":"25000000010000234","tokenAccounts":["HXVBCbgfPaUaQguWtdxQ3MSDF61oW22P1F7gKceWcZYv"],"class":"program_controlled"} · slot 460544434 · verify ↗

wallet: 2.98% of supply:

9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM · {"amount":"24629953004305872","tokenAccounts":["A3NHkq47aEWwcGbkknGrF5ZbgU84riDRiJWd8Vu6RcT2"],"class":"wallet"} · slot 460544434 · verify ↗

program-derived address (pool/vault/locker? — not verified): 2.90% of supply:

AvqFxKNrYZNvxsj2oWhLW8det68HzCXBqswshoD2TdT6 · {"amount":"24000000010000267","tokenAccounts":["3q1s1v1Ka1jMdcLPHhudzbYSiHvDoYDSnnJVgbsd2D1q"],"class":"program_controlled"} · slot 460544434 · verify ↗

wallet: 2.49% of supply:

85WTujfJ9meJq5hfjAeb5gftj7n8Q7QTsZJbRqMD5ERS · {"amount":"20624963169250002","tokenAccounts":["aBL2UafVZeTDHBa5Y74z2dpBSUMHckkBEhuQLzxda7s"],"class":"wallet"} · slot 460544434 · verify ↗

program-derived address (pool/vault/locker? — not verified): 2.31% of supply:

8UHpWBnhYNeAQURWjAABp8vSrzfYa69o7sfi65vYLC42 · {"amount":"19131083343250258","tokenAccounts":["29dkQLrrJY6FS464bSVFoCogiNADvZRsBUCTvvNmeRBY"],"class":"program_controlled"} · slot 460544434 · verify ↗

wallet: 1.91% of supply:

96HiV4cGWTJNCjGVff3RTHgPXmpYz7MSrGTAmxNKVWM9 · {"amount":"15812471763000000","tokenAccounts":["HKmnRgxMUHwpHqzVKPzF5SyrerioM2tYnBnSFDb7iESV"],"class":"wallet"} · slot 460544434 · verify ↗

Limitations: Only the 20 largest token accounts are visible via getTokenLargestAccounts; smaller holders are not aggregated. One entity can split holdings across many wallets (Sybil); concentration may be understated. Program-derived owners are not assumed safe: they may be AMM pools, lockers, or creator-controlled vaults.

Source solana-rpc · checked 23/10/2026, 18:26:11 UTC

Immutable on-chain metadata with no impersonation or hidden-character indicators.

Metadata (token-2022-extension):

pumpCmXqMfrsAkQ5r49WcJnRayYRqmXz6ae8H7H9Dfn · {"name":"Pump","symbol":"PUMP","uri":"https://ipfs.io/ipfs/bafkreibcglldkfdekdkxgumlveoe6qv3pbiceypkwtli33clbzul7leo4m","updateAuthority":null,"isMutable":false} · slot 460544425 · verify ↗

Limitations: The metadata URI (image, description, socials) is NOT fetched: off-chain content is unverified and may change. Impersonation is checked only against a short list of major mainnet tickers; bridged tokens can legitimately share a ticker.

Source solana-rpc · checked 23/10/2026, 18:26:09 UTC

None of the known privileged or creator addresses own a top-20 token account (heuristic).

Privileged / creator addresses compared:

{"DMdBa812dBW1CHVhmTyUyVcrBnSbZbfoFC7U14k4riH1":["transfer-hook authority"]}

Limitations: HEURISTIC: a match shows a shared address, not proven coordination; no match does not prove independence (funds can move through fresh wallets). Funding-source / transaction-graph clustering is not performed in this MVP. Only the 20 largest token accounts are visible via getTokenLargestAccounts; smaller holders are not aggregated.

Source solana-rpc · checked 23/10/2026, 18:26:11 UTC

No liquidity source supported by this scanner was found. This says nothing about whether DEX liquidity exists or can be removed.

pump.fun bonding curve PDA (not found):

H15XgDRavM1bBjjjcXwW3jm21h3P7WXjf9bargCasY6q · slot 460544425

Canonical PumpSwap pool PDA (not found):

5gUAeizj5pFyohujUajCwvkvD8wfYyWvCQo6QBku87nR · slot 460544426

Limitations: Supported in this MVP: pump.fun bonding curve and the canonical PumpSwap pool. Raydium, Orca, Meteora and non-canonical PumpSwap pools are NOT checked. No price or liquidity history is produced; values are a snapshot at the observed slot.

Source solana-rpc · checked 23/10/2026, 18:26:09 UTC

No risky authority actions in the scanned window (15 transactions); earlier history was not checked.

burn:

8AaQG9v4AgMJAnqbXV1sxd3mi7M2kNxjaetvXxdzvNUEaCorK4i2vopBpea9Z4FCui79WVmb1XXmPxzLv1oc7vU · {"amount":"13535224199","source":"9WtcfpuiF6dVKroycsi3E1k7vYQP8XmT7RBjcptdcfjX","authority":"99mRw3EzdJZWEUjgp1nrU4WeHsukUBjbh7gYE7pm4F3c"} · slot 460544420 · verify ↗

Limitations: Scanned 200 most recent signatures referencing the mint and parsed 15 successful transactions. Only instructions that reference the mint account are visible (e.g. freezes of token accounts are included, plain transfers are ignored). History is a recent window only; older authority changes (including creation) may not be shown.

Source solana-rpc · checked 23/10/2026, 18:26:10 UTC