Published proof, not
just promises
Every audit we publish includes a browser-first report, documented findings, and a verification page that anyone can independently check.
Request an Audit
Published Reports
Read our latest published audit with verified findings and project details.
Audit Distribution Procedure
How a completed SMC Audits report moves from internal sign-off to public publication: sign-off, responsible disclosure to the project team, a response window, publication to the public report library with the contract address and Sourcify verification method, and announcement. Sponsored reference audits carry no NDA; paid client audits follow their engagement contract. The standard response window is 14 days for fixable findings, tighter for critical findings, and a short courtesy notice for renounced or immutable contracts.
- Project
- SMC Audits
- Chain
- Audit Type
- Published
- 5 November 2026 at 15:34
Project
Chain
Audit Type
PublishedSecurity Score
Yukan (BuybackBabyToken) Security Review
SMC Audits reviewed the Yukan (BuybackBabyToken) token and the dividend distributor it deployed on BNB Chain, a PinkSale buybackBaby generator template, using source verified on Sourcify. The review found 17 issues: 0 critical, 1 high, 1 medium, 1 low and 14 informational. The headline risk is that the marketing fee receiver can halt every taxed sell through an EIP-7702 delegation, because it is paid with a 2,300-gas transfer that reverts on failure (SMC-H-01). Ownership reads as renounced, but the deployer stays permanently authorized and keeps fee, receiver, exemption and buyback control up to the 25% cap (SMC-M-01). No outsider can freeze or drain the token under the live configuration, and 99.61% of the LP is burned.
- Project
- Yukan (BuybackBabyToken)
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:38
Security Score
WKC (WikiCat Coin) Security Review
SMC Audits reviewed the WKC / WikiCat Coin token on BNB Chain, a widely reused token-generator template, using source verified on Sourcify. The review found 7 issues: 0 critical, 0 high, 0 medium, 2 low and 5 informational. No issue in the live contract results in loss of user or protocol funds. The contract holds powers that would be severe if active, including unbounded mint, fee settings that can brick transfers, and pause and blacklist switches, but all are neutralized because ownership is renounced to 0x0000…0001. The live code-level findings are the standard ERC-20 approve race and a blacklist bypass with a permanent-freeze latency.
- Project
- WKC / WikiCat Coin
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:38
Security Score
OCICAT Ecosystem Security Review
SMC Audits reviewed the OCICAT ecosystem on BNB Smart Chain: the OCICAT V2 token, the deprecated V1 token, the WBNB/OCICAT liquidity position and its DXLock time-lock, the MultiStakeRewards staking farm and the OcicatNFT governance-weight NFT. The review found 20 issues: 0 critical, 2 high, 3 medium, 8 low and 7 informational. The most significant issues are in the staking farm: a decimal mismatch over-issues rewards by about 1e12 and leaves the farm insolvent (SMC-H-01), and the owner can withdraw the entire reward reserve at any time (SMC-H-02). User principal, holder balances and staked LP cannot be stolen by an attacker, and 76.3% of the LP is time-locked until 29 April 2028.
- Project
- OCICAT
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:38
Security Score
GIANT (GTAN) Token Security Review
SMC Audits reviewed the GIANT (GTAN) token on BNB Chain at its verified source: the token, its transfer and fee logic, the swap-and-liquify fee processing, the holding and transaction limits, and the owner privileges. The review found 9 issues: 0 critical, 0 high, 2 medium, 2 low and 5 informational. The most significant issue is an owner-triggerable condition that permanently blocks all sells, which becomes a one-way honeypot if ownership is renounced in that state (SMC-M-01). No unprivileged path to theft, drain or freeze was found. The code is a constrained fee-token template: fees are capped, limits are floored, trade-open is one-way, and there is no mint function and no blacklist.
- Project
- GIANT (GTAN)
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:38
Security Score
ZDK (ZEDEK) Token Security Review
SMC Audits reviewed the ZDK / ZEDEK token on BNB Chain using source verified on Sourcify. The review found 11 issues: 0 critical, 1 high, 2 medium, 3 low and 5 informational. No issue in the live configuration lets an arbitrary caller take another holder's balance. The most significant issues concern the owner, a live EOA, which can block holder sells to the Pancake pair (SMC-H-01), and a tax-inventory state that ordinary sells can reach in which every later sell reverts until tokens are sent to the contract (SMC-M-02). The token's integrity depends on the owner key not using its sell switch.
- Project
- ZDK / ZEDEK
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:30
Security Score
TWD (THE WORD) Token Security Review
SMC Audits reviewed the TWD / THE WORD token on BNB Chain, a CoinManufactory reflection token, using source verified on Sourcify. The review found 11 issues: 0 critical, 1 high, 1 medium, 1 low and 8 informational. No issue lets an outside attacker take user funds. Renounced ownership does not make the token admin-free: the developer fee receiver, a live EOA that can no longer be replaced, can stop every sell on the TWD/WBNB pair through EIP-7702 and lift the stop at will (SMC-H-01). The deployer can also withdraw 30% of supply from an expired PinkLock and sell it fee-free (SMC-M-01). Fuzz and invariant tests found no honeypot, fee drift or accounting error in normal trading.
- Project
- TWD / THE WORD
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:30
Security Score
The Kingdom Coin (TKC) Security Review
SMC Audits reviewed the KingdomCoin (TKC) token on BNB Smart Chain, a PancakeSwap V2 fee-on-transfer token with an owner-managed blacklist. The review found 12 issues: 0 critical, 2 high, 1 medium, 4 low and 5 informational. The most significant issues are owner controls: the owner can zero the fee configuration so every sell reverts and then renounce, making the freeze permanent (SMC-H-01), or set a 100% sell fee or blacklist the pair to trap buys and liquidity exits (SMC-H-02). The PancakeSwap router is blacklisted on-chain today, so removeLiquidityETH reverts for every LP (SMC-M-01). There is no arbitrary mint, no proxy and no path for an unprivileged attacker to steal balances or pool funds.
- Project
- The Kingdom Coin (TKC)
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:30
Security Score
Phoenix Token (PHT) Security Review
SMC Audits reviewed the Phoenix Token (PHT) token and the dividend tracker it deployed on BNB Chain, using source verified on Sourcify. The review found 13 issues: 0 critical, 1 high, 2 medium, 2 low and 8 informational. No issue lets an outside attacker take user funds. Renounced ownership does not make the token admin-free: the hardcoded marketing wallet can make every taxed sell impossible with a gas-burning EIP-7702 delegation under BSC's per-transaction gas cap (SMC-H-01). Any holder can freeze every taxed sell for about 0.0013 BNB, with no repair (SMC-M-01), and 15.69% of supply sits in expired PinkLock locks held by deployer-linked wallets (SMC-M-02). The dividend tracker is solvent.
- Project
- Phoenix Token (PHT)
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:30
Security Score
BTC Dragon (BTCDragon) Security Review
SMC Audits reviewed the BTC Dragon (BTCDragon) token and the BTCB dividend tracker it deployed on BNB Chain, using source verified on Sourcify. The review found 15 issues: 0 critical, 0 high, 0 medium, 2 low and 13 informational. No issue lets an outside attacker take user funds, and no wallet can halt sells. Ownership was renounced in January 2024 and every owner and tracker admin function is dead. The most significant observation is time-bound: the marketing wallet owns the PinkLock02 lock holding 71.37% of the LP, which unlocks on 13 January 2029; after that date it could remove the liquidity and sell fee-free for about 91.7% of the pool's BNB.
- Project
- BTC Dragon (BTCDragon)
- Chain
- BNB Smart Chain (EVM)
- Audit Type
- Smart Contract Audit
- Published
- 5 November 2026 at 09:22
Security Score