Aloka the Peace Dog (ALOKA) security report
Radar AI scanned Aloka the Peace Dog on BNB Smart Chain. The verified source is a fixed-supply OpenZeppelin ERC-20 with no owner, fees, blacklist, pause, upgradeability, or post-deployment minting. The key finding is medium-severity initial supply centralization because the constructor assigns the complete configured supply to the deployer.
No critical or high-severity exploit was identified from the verified source. One medium-severity centralization risk exists because the constructor initially assigns all tokens to msg.sender, giving that address control over the initial supply until it transfers or otherwise disposes of those tokens. Slither was not run.
Trust score: 90/100. Source verified: Yes. Chain: bsc. Contract: 0xf9a60c67f391c049f84626a260da3f57d8ecad63.
This report was last modified on 2026-10-08 and contains 1 material finding.
medium finding: Entire initial supply is assigned to the deployer
The constructor calls _mint(msg.sender, initialSupply_), so one deployer address receives the full configured token supply at deployment. Although the contract has no later owner-only functions or mint authority, the initial recipient can transfer the supply and materially influence token availability and distribution while retaining its balance.
Evidence: Verified source contracts/BEP20.sol: constructor(string memory name_, string memory symbol_, uint256 initialSupply_) invokes _mint(msg.sender, initialSupply_). OpenZeppelin ERC20._mint then credits the complete amount to the supplied account. The ABI exposes no owner, mint, pause, blacklist, fee, or upgrade functions.
Recommendation: Document the intended initial allocation and use a transparent distribution or vesting process if concentration is not intended. Review deployment and treasury procedures to ensure the deployer-controlled allocation is handled according to the published token plan.