Binance AI Agent (币安龙虾) security report
Radar by SecureChain AI scanned Binance AI Agent’s verified BNB Smart Chain contract. The source is a plain fixed-supply OpenZeppelin ERC-20 with no owner, fees, blacklist, pause, upgradeability, or mint function. One medium-severity issue was identified: the constructor assigns the entire initial supply to the deployer without vesting or distribution controls. Slither was not run.
No critical or high-severity vulnerability was identified in the verified contract. The main material risk is medium severity: the constructor gives the entire initial supply to the deployer, so allocation and distribution depend on deployer-controlled transfers.
Trust score: 86/100. Source verified: Yes. Chain: bsc. Contract: 0x3783dcefe8811c1293cc0c71cb57109845490e06.
This report was last modified on 2026-10-07 and contains 1 material finding.
medium finding: Entire initial supply is assigned to the deployer without vesting controls
The contract mints the complete constructor-supplied initial supply to msg.sender in one transaction. The token has no vesting, timelock, allocation cap, or distribution mechanism, so the deployer can initially transfer the full supply. This is a business-logic and concentration risk rather than an ongoing privileged mint or administrative exploit.
Evidence: In contracts/bnb.sol, the constructor executes _mint(msg.sender, initialSupply_). The Token contract defines no owner, vesting, timelock, or distribution controls, and exposes only standard ERC-20 transfer and allowance functions.
Recommendation: Document the initial allocation and deployer-control model. If distribution integrity is required, use a vesting or timelock contract and separate allocation addresses before launch. Review transfers from the deployment allocation independently from the token contract.