tok{In} ERC20 Weekly Security Intelligence Report
July 27, 2026 – August 2, 2026
- Weekly Snapshot: tokens analyzed
- 224,932
- Ethereum
- 3,902
- Base
- 15,136
- BNB Chain
- 205,894
All Chains
32 checks 1.5 times the All Chains share or more, and 5 points above it
| Check | All Chains | Ethereum | Base | BNB Chain |
|---|---|---|---|---|
| Trade Simulation | ||||
| Honeypot: Bought, Cannot Sell | not measured | not measured | not measured | not measured |
| Cannot BuyCounted by the old rule: a liquid token with no simulated buy counted as a failed buy. | 24 1.1% of liquid | 1 2.0% | 6 3.1% | 17 0.9% |
| Tax Above 15% | not measured | not measured | not measured | not measured |
| Transfer Blocked | not measured | not measured | not measured | not measured |
| Trading Restrictions | ||||
| Tax MechanismCounted by the old rule: a tax that the token moves through its shared transfer function, or writes as amount / (100 / fee), did not count. | 204,353 91% | 2,634 68% | 10,656 70% | 191,063 93% |
| Modifiable TaxCounted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a setter of such a tax (a shared transfer function, or amount / (100 / fee)) did not count. | 65 <0.1% | 28 0.7% | 4 <0.1% | 33 <0.1% |
| Trading Cap ActiveCounted by the old rule: a whole-supply swap that failed counted as an active trading cap. | 176,967 79% | 2,260 58% | 8,015 53% | 166,692 81% |
| Trading Cap MechanismCounted by the old rule: the limit of a number type (uint192 to uint248, the limit of a cast), which no trade can reach, counted as a trading cap. Also, a stored value that is only an overflow test or the whole supply counted as a trading cap. | 4,722 2.1% | 659 17% (well above All Chains) | 1,810 12% (well above All Chains) | 2,253 1.1% |
| Modifiable Trading CapCounted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a function that writes such a value (an overflow test or the whole supply) counted as a trading cap setter. | 4,370 1.9% | 520 13% (well above All Chains) | 1,651 11% (well above All Chains) | 2,199 1.1% |
| Position Cap ActiveCounted by the old rule: a whole-supply swap that failed counted as an active position cap. | 9,165 4.1% | 318 8.1% | 1,245 8.2% | 7,602 3.7% |
| Position Cap MechanismCounted by the old rule: a stored value that is only an overflow test or the whole supply counted as a position cap. | 222 0.1% | 146 3.7% | 6 <0.1% | 70 <0.1% |
| Modifiable Position CapCounted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a function that writes such a value (an overflow test or the whole supply) counted as a position cap setter. | 102 <0.1% | 38 1.0% | 3 <0.1% | 61 <0.1% |
| Trading CooldownCounted by the old rule: the block number of a vote checkpoint, which every transfer writes, counted as a cooldown. | 17 <0.1% | 4 0.1% | 6 <0.1% | 7 <0.1% |
| Access Controls | ||||
| Blacklist / WhitelistCounted by the old rule: a check that runs only when tokens are minted or burned, such as the total-supply vote checkpoints, counted as a list. | 1,922 0.9% | 318 8.1% (well above All Chains) | 692 4.6% | 912 0.4% |
| PausableCounted by the old rule: a lock that a transfer sets and clears in the same call counted as a pause. | 2,142 1.0% | 163 4.2% | 305 2.0% | 1,674 0.8% |
| Modifiable PauseCounted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a function that only sets and clears a transfer lock, or only clears a flag that never blocks, counted as a pause setter. | 1,199 0.5% | 116 3.0% | 58 0.4% | 1,025 0.5% |
| Allowance Bypass | not measured | not measured | not measured | not measured |
| Owner Privileges | not measured | not measured | not measured | not measured |
| Transfer GuardedCounted by the old rule: a check that runs only in a mint or burn branch that transfer can never enter, or a lock that transfer sets and clears, counted as a guard. | not measured | not measured | not measured | not measured |
| TransferFrom GuardedCounted by the old rule: a check that runs only in a mint or burn branch that transferFrom can never enter, or a lock that transferFrom sets and clears, counted as a guard. | not measured | not measured | not measured | not measured |
| Contract Behaviour | ||||
| External Call | not measured | not measured | not measured | not measured |
| TimebombCounted by the old rule: an overflow test of the time plus a duration, a 0 compared with a true/false value, and an amount that meets the time only through a shared helper, counted as a deadline; a type limit or a zero compared with the time counted as a deadline, and a deadline in a packed field and a time check inside a small helper did not count. | not measured | not measured | not measured | not measured |
| View Modifies State | not measured | not measured | not measured | not measured |
| Supply & Lifecycle | ||||
| Mint or BurnCounted by the old rule: a mint that only a one-time initializer can call counted as a mint, and a burn that only the holder, or a spender within the holder's allowance, can make counted as a mint or burn. | 40,178 18% | 2,845 73% (well above All Chains) | 12,264 81% (well above All Chains) | 25,069 12% |
| Self-Destruct | 1 <0.1% | 0 0.0% | 0 0.0% | 1 <0.1% |
| Token Profile | ||||
| Source Available | 224,736 >99% | 3,901 >99% | 14,941 99% | 205,894 100% |
| Proxy Contract | 782 0.3% | 104 2.7% | 594 3.9% | 84 <0.1% |
| From a Launchpad | not measured | not measured | not measured | not measured |
| Listed on DEX | 36,127 16% | 643 17% | 2,964 20% | 32,520 16% |
| Has Liquidity | 2,132 0.9% | 51 1.3% | 195 1.3% | 1,886 0.9% |
| Transfer Tested | not measured | not measured | not measured | not measured |
| Code Analysed | not measured | not measured | not measured | not measured |
1.5 times the All Chains share or more, and 5 points above it
Live token screening
Want the risk profile for a token right now?
Run a free tok{In} scan to surface honeypot behavior, transfer restrictions, privileged controls, and pool-specific risk signals before users interact.
Scan a Token Now Free