Radar by SecureChain AI

Openbellerium (PAIDBELL) security report

Radar by SecureChain AI scanned Openbellerium (PAIDBELL) on Ethereum. The verified source shows a standard fixed-supply ERC-20 without visible mint, blacklist, fee, or upgrade controls, but every non-mint transfer calls an immutable external distributor that can revert and block transfers.

The token has no visible privileged mint, blacklist, tax, or upgrade mechanism in the verified source. The main material risk is the external distributor callback in _update: a configured distributor can cause transfers to revert, creating a conditional token-transfer lock.

Trust score: 62/100. Source verified: Yes. Chain: ethereum. Contract: 0x8a49f1d1883a821831b3ef6d022726c5f5c9deda.

This report was last modified on 2026-10-08 and contains 1 material finding.

medium finding: External distributor callback can block all token transfers

Every non-mint transfer performs an external call to the immutable distributor address after updating balances. If the configured distributor contract reverts, runs out of gas, or becomes intentionally nonfunctional, the entire token transfer transaction reverts. This can prevent transfers, swaps, and integrations that rely on ERC-20 movement. The risk requires a nonzero distributor and failure or hostile behavior in that external contract.

Evidence: LaunchToken._update calls IHolderDistributor(distributor).onTransfer(from, to, value, balanceOf(from), balanceOf(to)) whenever from != address(0) and distributor != address(0). The constructor accepts distributor_ and stores it as an immutable distributor. No try/catch or fallback path exists around the external call.

Recommendation: Audit the deployed distributor implementation and its administrative controls. Consider removing the mandatory callback, adding a nonblocking design, or allowing a controlled and transparent mechanism to disable or replace the callback if it fails. Test transfer behavior when the distributor reverts or consumes excessive gas.