cryptolicit

Contract source is not published

The contract code has not been verified on the block explorer, so nobody can read what it does.

Why it matters

Every other check is made on bytecode alone; anything unusual is hidden by default.

Severity in our model
Warning
Applies to
Ethereum and other EVM chains
Where we read it
Contract analysis (GoPlus Security)
Tokens we found it on
9 tokens of 5,361 checked

What this tells you, and what it does not

This is a check that passed. It removes one specific way a token can fail — and only that one. A contract whose ownership is renounced can still have been designed badly; a token with a burned pool can still lose every buyer; a listing on a large exchange says the exchange did its own review, not that the price will hold. Read the passes as the absence of a particular trap, never as a recommendation.

What to check next

The findings above this one on the token page matter more than this one. Work down from the blocking properties, then the warnings, and treat the passes as context.

How to check it yourself

Everything we report can be verified without us. Open the contract on the block explorer for its chain, read the verified source if there is one, and look at the holders tab: who holds the supply, whether the pool tokens sit in a lock contract or a personal wallet. For market data, compare the pool size with how much actually trades — a pool nobody trades in is a number, not an exit.

If you are about to buy, the cheapest test is the smallest one: buy a tiny amount, then immediately try to sell it. A contract that blocks selling will tell you so for a few dollars instead of everything you were about to put in.

Questions

What does "Contract source is not published" mean on a token?

The contract code has not been verified on the block explorer, so nobody can read what it does. Every other check is made on bytecode alone; anything unusual is hidden by default.

Does it mean the token is a scam?

No. It is a property of the contract or a fact about the market, read from a public source at a point in time. On its own it does not stop you selling. It is context, and it matters most alongside the other findings on the token page.

Where do you read it from?

From contract analysis (GoPlus Security), which reads the deployed contract and its authorities directly on chain.

All checks · how the verdict is calculated · tokens we have checked