CONTRACT ANALYSIS

ARBIX

Scanned September 9, 2026 · Check a different contract →

Code review

ARBIX

BNB Chain · 0xd20ef930139d6437
View source →
0
capabilities present
7
undetermined
7
checks run
Warn someone before they buy:Share on XShare on RedditShare on LinkedIn
🪤

How the owner could rug you

None of the common owner-side rug mechanisms were found in the code. That is not a clean bill of health — see the limits below.

Owner can mint new tokens
Undetermined

Code: No mint function or role visible in the truncated source

Owner can pause or block transfers
Undetermined

Code: No pausable/transfer gate logic visible in the truncated source

Owner can blacklist addresses
Undetermined

Code: No blacklist mapping or modifier visible in the truncated source

Owner can change transfer fees
Undetermined

Code: No fee/tax variables or setter functions visible in the truncated source

Contract is upgradeable via proxy
Undetermined

Code: No proxy pattern or admin upgrade function visible in the truncated source

Owner can withdraw user funds or reserves
Undetermined

Code: No withdraw or rescue functions visible in the truncated source

Owner retains privileged powers
Undetermined

Code: No ownership renouncement or immutable owner pattern visible in the truncated source

This checks only what the code can do. It cannot see whether liquidity is locked, how concentrated holders are, or what the team intends — those need live on-chain data. Absence of these mechanisms is not proof a token is safe.

What this could cost you

How much money would you put into this? We'll show you what you could actually lose — in dollars, not just a scary word like "risk."

$

None of the common rug mechanisms were found, so there's nothing to calculate against here. That's not the same as "safe" — see the limits above.

Scope of this review

This contract's source is 24,967 characters — only the first 9,000 were analyzed, so parts of it were not examined. That's the real reason, not a vague size limit: 15,967 characters were cut off the end.

What the code allows

Mint authority present
Undetermined

Evidence: No minting function or role detected in visible code

This allows: Ability to create new tokens after deployment can dilute existing holders

Owner has special privileges
Undetermined

Evidence: No explicit owner-only modifiers or functions visible

This allows: Owner privileges can be used to change token economics or block transfers

Transfer restrictions or pausing
Undetermined

Evidence: No pause, tradingEnabled flag, or transfer gate code visible

This allows: Restrictions can be used to halt trading or create honeypots

Fees or taxes on transfers
Undetermined

Evidence: No fee calculation or setter functions visible

This allows: Dynamic fees can be raised to confiscate holder balances

Proxy or upgradeable pattern
Undetermined

Evidence: No proxy admin or delegatecall logic visible

This allows: Upgradeability lets an admin replace contract logic arbitrarily

Pausable mechanism
Undetermined

Evidence: No Pausable contract inheritance or pause/unpause functions visible

This allows: A pause can freeze all token activity

Ownership renounced or retained
Undetermined

Evidence: No renounceOwnership call or immutable owner pattern visible

This allows: Retained ownership means privileged actions remain possible

Worth reading yourself

  • Only OpenZeppelin Context, IERC20, and SafeMath libraries are present in the visible portion; no custom token logic, owner variables, or admin functions have been seen yet.

What this did not check

  • Source code was truncated at 9000 characters, so many functions and state variables may be missing from this analysis.
  • Liquidity lock status, holder concentration, and actual on‑chain balances are not visible in the source and were not checked.

Automated review of verified source only. Not an audit. Does not cover on-chain state, holder distribution, liquidity, or deployer behavior. It cannot tell you whether a token is safe or whether to buy it. Absence of a finding is not evidence that a contract is sound — it may mean the relevant code was not readable, not verified, or not reached.

Want more than the free read?

A real security researcher personally reads this contract's verified source — not an automated re-run of the free check.

What's checked

The same 7 owner-power categories as the free check — mint authority, ability to disable trading, blacklist power, mutable fees, upgradeability, privileged withdrawal, and whether ownership is still active — plus 4 categories the free tier doesn't cover: exact current fee values and where they're set, whether ownership itself can be transferred (and to whom), any hardcoded or owner-settable exceptions to fees/limits/blacklist, and external contracts this one calls out to and trusts.

How it's done

I read the contract's actual verified source directly — no token-window truncation, since a person isn't limited by an LLM's context size the way the free tier is. Every finding cites the specific function or modifier it comes from; if the code doesn't determine something, the report says so instead of guessing.

What you get

A written report emailed to you within 24 hours: a plain-English summary, every finding with its evidence, and what the review could not determine from source alone.

Disclaimer: this is a capability review of verified source code, not a formal security audit and not investment advice. It reports what the contract's owner/admin technically CAN do — it does not check on-chain state, liquidity depth, holder concentration, or deployer behavior, and it does not certify a contract as safe.

Building something that needs this programmatically?

By purchasing, you agree to our Terms of Service and Privacy Policy.

This is a surface read

It reports capabilities visible in source. It does not model economics, test exploit paths, or reason about how contracts interact. A real review does — with runnable proofs for anything it claims.

Request a security review →

Paid reviews go further than this free scan: every finding is signed, timestamped, and hash-chained into a record — self-scored 16/20 against an independent standard →

✉️Email us