tok{In} ERC20 Weekly Security Intelligence Report
September 28, 2026 – October 4, 2026
- Weekly Snapshot: tokens analyzed
- 249,301
- Ethereum
- 4,278
- Base
- 37,767
- BNB Chain
- 106,008
- Robinhood Chain
- 101,248
Rows marked with an arrow open to show which launchpads the tokens came from and the tokens themselves. The tokens are as measured when the week was published: a scan today can show a different result, because pools, owners and settings change. A liquidity figure that is struck through cannot be true: a price feed probably gave the pool the price of another asset.
All Chains
32 checks| Check | All Chains | Ethereum | Base | BNB Chain | Robinhood Chain |
|---|---|---|---|---|---|
| Trade Simulation | |||||
| 171 6.2% of liquid | 98 20% (well above All Chains) | 22 2.2% | 15 6.8% | 36 3.4% | |
| 256 9.3% of liquid | 14 2.9% | 109 11% | 14 6.4% | 119 11% | |
| 1 <0.1% of liquid | 0 0.0% | 0 0.0% | 0 0.0% | 1 0.1% | |
| Transfer Blocked | 0 0.0% of tested | 0 0.0% | 0 0.0% | 0 0.0% | 0 0.0% |
| Trading Restrictions | |||||
| Counted by the old rule: a tax that the token moves through its shared transfer function, or writes as amount / (100 / fee), did not count. | 151,338 61% | 2,175 51% | 18,788 50% | 98,345 93% (well above All Chains) | 32,030 32% |
| Counted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a setter of such a tax (a shared transfer function, or amount / (100 / fee)) did not count. | 383 0.2% | 34 0.8% | 94 0.2% | 96 0.1% | 159 0.2% |
| 3,612 1.4% | 233 5.4% | 750 2.0% | 343 0.3% | 2,286 2.3% | |
| Counted by the old rule: the limit of a number type (uint192 to uint248, the limit of a cast), which no trade can reach, counted as a trading cap. Also, a stored value that is only an overflow test or the whole supply counted as a trading cap. | 19,903 8.0% | 1,258 29% (well above All Chains) | 4,598 12% | 1,652 1.6% | 12,395 12% |
| Counted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a function that writes such a value (an overflow test or the whole supply) counted as a trading cap setter. | 17,318 6.9% | 941 22% (well above All Chains) | 3,022 8.0% | 1,453 1.4% | 11,902 12% |
| 607 0.2% | 34 0.8% | 22 0.1% | 22 <0.1% | 529 0.5% | |
| Counted by the old rule: a stored value that is only an overflow test or the whole supply counted as a position cap. | 7,197 2.9% | 466 11% (well above All Chains) | 431 1.1% | 144 0.1% | 6,156 6.1% |
| Counted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a function that writes such a value (an overflow test or the whole supply) counted as a position cap setter. | 6,066 2.4% | 72 1.7% | 26 0.1% | 65 0.1% | 5,903 5.8% |
| Counted by the old rule: the block number of a vote checkpoint, which every transfer writes, counted as a cooldown. | 114 <0.1% | 26 0.6% | 29 0.1% | 34 <0.1% | 25 <0.1% |
| Access Controls | |||||
| Counted by the old rule: a check that runs only when tokens are minted or burned, such as the total-supply vote checkpoints, counted as a list. | 24,077 9.7% | 494 12% | 3,288 8.7% | 12,146 12% | 8,149 8.0% |
| Counted by the old rule: a lock that a transfer sets and clears in the same call counted as a pause. | 3,041 1.2% | 261 6.1% | 1,431 3.8% | 654 0.6% | 695 0.7% |
| Counted by the old rule: a setter that only a misread constant made, or a write from transfer itself (such as the total supply), could count. Also, a function that only sets and clears a transfer lock, or only clears a flag that never blocks, counted as a pause setter. | 2,372 1.0% | 219 5.1% | 1,247 3.3% | 342 0.3% | 564 0.6% |
| 292 0.1% | 41 1.0% | 4 <0.1% | 32 <0.1% | 215 0.2% | |
| 174,310 70% | 1,509 35% | 25,147 67% | 100,500 95% | 47,154 47% | |
| Counted by the old rule: a check that runs only in a mint or burn branch that transfer can never enter, or a lock that transfer sets and clears, counted as a guard. | 38,895 16% | 1,544 36% (well above All Chains) | 8,320 22% | 13,995 13% | 15,036 15% |
| Counted by the old rule: a check that runs only in a mint or burn branch that transferFrom can never enter, or a lock that transferFrom sets and clears, counted as a guard. | 38,906 16% | 1,547 36% (well above All Chains) | 8,321 22% | 13,995 13% | 15,043 15% |
| Contract Behaviour | |||||
| 48,910 20% | 1,229 29% | 12,306 33% (well above All Chains) | 24,598 23% | 10,777 11% | |
| Counted by the old rule: a type limit or a zero compared with the time counted as a deadline, and a deadline in a packed field and a time check inside a small helper did not count. | 19,866 8.0% | 532 12% | 6,276 17% (well above All Chains) | 6,581 6.2% | 6,477 6.4% |
| View Modifies State | 0 0.0% | 0 0.0% | 0 0.0% | 0 0.0% | 0 0.0% |
| Supply & Lifecycle | |||||
| Counted by the old rule: a burn that only the holder, or a spender within the holder's allowance, can make counted as a mint or burn. | 90,731 36% | 1,650 39% | 21,905 58% (well above All Chains) | 7,691 7.3% | 59,485 59% (well above All Chains) |
| 10 <0.1% | 3 0.1% | 0 0.0% | 7 <0.1% | 0 0.0% | |
| Token Profile | |||||
| 235,250 94% | 3,665 86% | 31,155 83% | 105,301 99% | 95,129 94% | |
| 29,046 12% | 381 8.9% | 8,681 23% (well above All Chains) | 18,012 17% | 1,972 1.9% | |
| 146,814 59% | 77 1.8% | 16,686 44% | 93,975 89% | 36,076 36% | |
| 121,479 49% | 1,914 45% | 14,288 38% | 54,549 52% | 50,728 50% | |
| 2,746 1.1% | 482 11% | 985 2.6% | 220 0.2% | 1,059 1.0% | |
| 247,033 99% | 4,096 96% | 36,527 97% | 105,553 >99% | 100,857 >99% | |
| Code Analysed | not measured | not measured | not measured | not measured | not measured |
1.5 times the All Chains share or more, and 5 points above it
Static analysis version: 1.0.17 for 73% of the tokens, 1.0.19 for 27% of the tokens, 1.0.18 for <0.1% of the tokens. A newer version can change what a static-analysis figure counts, so part of this week is counted under each meaning.
Honeypot: Bought, Cannot Sell
171 (6.2% of liquid)Examples, deepest pool liquidity first
Launchpads
Where the week's tokens came from, and how often each launchpad's tokens carry a flag
| Launchpad | Tokens | Honeypot: Bought, Cannot Sell |
|---|---|---|
| All tokens | 249,301 | 6.2% |
Flap | 83,058 | 3.0% |
four.meme | 34,273 | 0.0% |
Doppler | 13,618 | 7.1% |
Zora | 12,182 | 0.0% |
Lunch.fun | 622 | — too few to rate |
Pools.trade | 579 | 2.1% |
Pons | 479 | 0.6% |
Clanker | 449 | — too few to rate |
| No launchpad match | 102,487 | 6.9% |
A token is matched to a launchpad by a stored scan, its bonding-curve pool, its deployer, its bytecode or its address. “No launchpad match” does not prove that a token came from no launchpad. Rates marked ▲, in amber, are well above the chain's own. A rate is not shown under 20 tokens, and a launchpad needs 50 tokens for a row.
Live token screening
Want the risk profile for a token right now?
Run a free tok{In} scan to surface honeypot behavior, transfer restrictions, privileged controls, and pool-specific risk signals before users interact.
Scan a Token Now Free