DOGEBALL (DOGEBALL) security report
Radar AI scanned DOGEBALL on Ethereum. The verified contract is a minimal fixed-supply ERC-20 with no visible tax, blacklist, pause, proxy, or post-deployment mint controls. A medium-severity business-logic risk remains because the constructor assigns the entire initial supply to the deployer.
The verified contract does not expose an obvious honeypot, blacklist, fee-manipulation, upgradeability, or unauthorized minting path. The main identified risk is the constructor’s allocation of the full fixed supply to the deployer, which creates significant centralized distribution control until those tokens are transferred or otherwise dispersed.
Trust score: 88/100. Source verified: Yes. Chain: ethereum. Contract: 0xba41ff65fd0a19aa75dd4e6a04e9d3c15acab887.
This report was last modified on 2026-10-13 and contains 1 material finding.
medium finding: Entire initial supply is assigned to the deployer
The constructor mints the full fixed supply directly to msg.sender. This gives the deployer control over the initial token distribution and creates a material concentration and sell-side risk if that allocation is not managed transparently.
Evidence: contracts/Token.sol constructor: _mint(msg.sender, 1000000000 * 10 ** decimals()); The derived contract contains no allocation schedule, vesting mechanism, timelock, or secondary distribution control. GoPlus also reports is_mintable=0, indicating the concern is the initial allocation rather than ongoing mint authority.
Recommendation: Document the deployer allocation and distribution plan, and consider verifiable vesting, timelocks, or transparent multisignature-controlled distribution for material allocations. Users should independently review token-transfer history before relying on the distribution model.