SpaceX Super Intelligence (SpaceX Super Intelligence) security report
Radar AI scanned the verified SpaceX Super Intelligence contract on BNB Smart Chain. Findings include trapped native BNB risk, owner-controlled fee exclusions, a buy-enable dependency, and fixed fee-recipient routing. No public mint, proxy, blacklist, or unrestricted tax setter was identified.
The contract does not expose an obvious mint, proxy, blacklist, or unrestricted tax-modification path. However, its payable receive function has no withdrawal mechanism, owner-controlled fee exclusions can create privileged fee treatment while ownership is active, and trading remains buy-disabled until enableTrading is called. Supplied GoPlus evidence reports the owner address as zero, but the current tradingEnabled state was not supplied.
Trust score: 65/100. Source verified: Yes. Chain: bsc. Contract: 0x691a1d51cbe2ef08204e6bad00c41bee534f8c4b.
This report was last modified on 2026-10-13 and contains 4 material findings.
medium finding: Fee proceeds and liquidity recipient are fixed to constructor-supplied addresses
Trading fees are converted and routed to constructor-configured recipients rather than a changeable, governed treasury. Fund proceeds are sent to fundReceiver and newly added liquidity is assigned to deployFeeReceiver, so deployment parameters determine ongoing value routing.
Evidence: The constructor stores tokenPass.fundReceiver in _cfgx and deployFeeReceiver in _deployer. _executeSwapAndLiquify transfers fundPortion to _cfgx.fundReceiver and calls addLiquidity with _deployer as the liquidity-token recipient. The constructor ABI exposes both recipient inputs.
Recommendation: Publish and verify recipient addresses, use a governed treasury or multisig where appropriate, and emit explicit fee-routing events for operational monitoring.
medium finding: Native BNB can be permanently trapped
The contract accepts native BNB through receive() but exposes no function that transfers or withdraws native currency. Any BNB sent directly to the token contract cannot be recovered through the verified interface.
Evidence: Token.sol defines receive() external payable {}. The source contains no payable withdrawal function, selfdestruct path, or other native-currency transfer routine.
Recommendation: Remove the payable receive function if native BNB is not required, or add a narrowly controlled withdrawal function with documented authorization, recipient constraints, and event logging.
medium finding: Owner can selectively exempt addresses from transfer fees
While ownership is active, the owner can change fee-exemption status for arbitrary address arrays. Exempted addresses do not pay the buy or sell fees applied when transfers involve swapPair, creating a privileged fee-treatment control.
Evidence: setExclusionFromFee(address[] calldata accounts, bool value) is onlyOwner and writes isExcludeFromFee for each supplied address. _transfer skips fee calculation when either side is excluded. GoPlus reports owner_address as the zero address, so this control appears inactive at the supplied scan state, but the verified code retains the permission if ownership is transferred.
Recommendation: Remove discretionary exemption changes, constrain them to immutable infrastructure addresses, or emit and monitor dedicated events with governance and timelock controls before changing exemptions.
medium finding: Trading can remain permanently disabled for buys
Buys from swapPair revert while tradingEnabled is false, and only the owner can call enableTrading. If deployment or ownership renunciation occurs before enabling trading, the buy path can remain unavailable permanently.
Evidence: In _transfer, buys satisfy from == swapPair and revert with TDP3 when !tradingEnabled. enableTrading() is external onlyOwner and requires tradingEnabled to be false. GoPlus reports owner_address as 0x0000000000000000000000000000000000000000, while no current tradingEnabled value was supplied.
Recommendation: Enable trading atomically during deployment or use an immutable, auditable launch mechanism. Verify tradingEnabled before ownership renunciation and document the state transition.