UrAnus (URANUS) security report
SecureChain Radar AI scanned the verified UrAnus URANUS contract. The source is a fixed-supply OpenZeppelin ERC-20 without mint, blacklist, fee, pause, or upgrade controls. Medium-risk concerns include approximately 89.07% supply held by one unlocked contract address, only six reported holders, no detected DEX venue, and approximately $18,009.87 in reported liquidity. Slither was not run.
No Critical or High severity vulnerability was identified in the reviewed source. The contract has fixed supply and unrestricted standard ERC-20 transfers, but GoPlus reports only six holders, approximately 89.07% held by one unlocked contract address, no detected DEX listing, and approximately $18,009.87 in reported liquidity. These conditions create meaningful concentration, liquidity, and exit-risk concerns despite the absence of privileged token controls.
Trust score: 72/100. Source verified: Yes. Chain: ethereum. Contract: 0x60fb70d48660b0a358ef03365e28662a258c7318.
This report was last modified on 2026-09-19 and contains 2 material findings.
medium finding: Extreme token concentration in a single unlocked contract address
A single contract address holds approximately 89.07% of the total token supply, while GoPlus reports only six holders and marks that holding as not locked. The reviewed token contract itself does not provide administrative controls to redistribute or seize balances, but control or failure of the large holder contract could materially affect supply available to the market and token price.
Evidence: GoPlus reports holder 0x000000000004444c5dc75cb358380d2e3de08a90 with 890,657,171.920058875588988228 URANUS, equal to 89.065717%, with is_locked=0 and is_contract=1. GoPlus also reports holder_count=6. The token source mints the entire fixed supply to the constructor recipient through _mint(recipient, TOTAL_SUPPLY).
Recommendation: Identify the large holder contract and document its purpose, withdrawal or distribution logic, and control model. Confirm whether the balance is reserved, burned, escrowed, or actively controlled, and disclose any release schedule or concentration limits to users.
medium finding: Very limited apparent market liquidity and no detected DEX venue
The project reports approximately $18,009.87 in liquidity, while GoPlus reports is_in_dex=0. This can cause substantial price impact, make exits difficult, and amplify losses even though the token contract itself does not impose a sell restriction.
Evidence: Project data reports liquidityUsd=18009.87. GoPlus reports is_in_dex=0, cannot_buy=0, cannot_sell_all=0, buy_tax=0, and sell_tax=0. The token source contains only standard ERC-20 transfer and allowance functions and no liquidity-management mechanism.
Recommendation: Verify the active trading venue, pair address, reserve balances, and liquidity ownership or lock status independently of the token contract. Treat quoted prices and expected execution values cautiously until meaningful, verifiable liquidity exists.