High risk
Risk Index
100/ 100
The report is marked as High risk with a risk index of 100 due to several significant red flags. Notably, some contracts including 'Trading', '0x43b4…dA6A', and '0xCD3D…F0E6' are linked to a known scam, and two contracts are unverified, which raises concerns about transparency. The 'GMX' contract contains owner-controlled functions, indicating centralized control that could affect users. Additionally, the project website lacks links to social media or GitHub, limiting external verification. Several important checks such as honeypot simulation, buy/sell tax analysis, and ownership verification could not be performed on multiple contracts.
AIAI explanation, may be wrong
Red flags 4
Sorted by weight
-
+60
Linked to a known scam
Trading (0xb5f4…9fC6) was deployed by HyperVault vault deployer (0x4A79…e041), labelled scam (source: postmortem, https://decrypt.co/341539/3-6m-drained-from-hyperliquid-defi-platform-hypervault-in-abnormal-withdrawal). 2 more such links.
-
+25
Contract code is not verified
The source code of unnamed contract (0xCD3D…F0E6), unnamed contract (0x43b4…dA6A) is not published on the explorer: nobody can check what the contract does.
-
+10
Owner-controlled functions in the code
The code has functions that let the owner change the rules: minting new tokens (GMX (0xfc5A…ad0a)). They are not harmful by themselves, but dangerous in the hands of a single wallet.
-
+5
The site links to no socials or GitHub
The site does not link to X, Telegram, Discord or GitHub.
Checklist
- Code verifiedNo
- Owner is a multisig or timelockUnknown
- Withdrawals not controlled by one walletUnknown
- Deployer is not a fresh walletYes
- Deployer has no abandoned projectsUnknown
- Contracts older than 7 daysYes
- Not a honeypotYes
Contracts 10 of 164
The contracts the site uses most
| Name | Role | Chain | Address | Verified | Owner | Age |
|---|---|---|---|---|---|---|
|
GMX
This contract is likely a token contract named GMX that manages token balances, allowances, minting, burning, and staking-related functions. It appears to play a central role in the protocol's token management and governance. AI |
Token | Arbitrum | 0xfc5A…ad0a | Yes | Unknown | 5y |
|
ExchangeRouter via proxy
The ExchangeRouter contract likely handles various trading-related actions such as creating and canceling orders, deposits, withdrawals, and claiming rewards. It acts as a central router for executing trades and managing user interactions with the exchange. AI |
Router | Arbitrum | 0x69C5…f5d5 | Yes | Unknown | 2y |
|
Reader
The Reader contract appears to provide read-only functions to fetch detailed account, market, order, and position information. It likely serves as a data access layer for the protocol. AI |
— | Arbitrum | 0x5Ca8…b824 | Yes | Unknown | 2y |
|
RewardTracker
This RewardTracker contract likely manages staking and reward distribution, allowing users to stake tokens, claim rewards, and track balances. It supports private modes for claiming, staking, and transfers. AI |
Staking | Arbitrum | 0x4d26…ea13 | Yes | Unknown | 5y |
|
RewardTracker
Another RewardTracker contract similar to the previous one, probably managing staking and reward tracking for different tokens or reward types within the protocol. AI |
Staking | Arbitrum | 0x908C…9dD4 | Yes | Unknown | 5y |
|
RewardTracker
This RewardTracker contract also manages staking and rewards, likely for fee-related tokens or rewards, supporting staking, claiming, and transfer functions. AI |
Staking | Arbitrum | 0xd2D1…728F | Yes | Unknown | 5y |
|
DataStore
The DataStore contract appears to be a general-purpose storage contract that manages various data types such as addresses, booleans, bytes32, integers, and strings. It provides functions to add, remove, and query stored data. AI |
— | Arbitrum | 0xFD70…92d8 | Yes | Unknown | 3y |
|
Trading
This Trading contract likely manages trading operations such as opening and closing positions, limit orders, liquidations, and fee calculations. It appears to be a core component of the trading functionality in the protocol. AI |
— | HyperEVM | 0xb5f4…9fC6 | Yes | Unknown | 14mo |
|
Unnamed contract
This contract is unverified and has no descriptive information; its purpose is a guess based on limited data and the name 'AllData' found in site code, possibly related to data aggregation or storage. AI |
— | HyperEVM | 0xCD3D…F0E6 | No | Unknown | 14mo |
|
Unnamed contract
This unverified contract named 'Staking' is likely related to staking functionality, but its exact purpose is uncertain due to lack of verification and limited information. AI |
Staking | HyperEVM | 0x43b4…dA6A | No | Unknown | 14mo |
The site references 154 more contracts of its own. Aegis checks the 10 it uses most; the rest were not checked and do not count in the Risk Index.
Not checked
These never count as passed
-
Honeypot simulation
GoPlus does not cover this chain: no buy / sell simulation ran · 6 contracts
-
Buy / sell tax
GoPlus does not cover this chain: no buy / sell simulation ran · 10 contracts
-
Who owns the contract
The check could not run · 10 contracts
What Aegis knows about this team
-
0x5F79…0Cf8 Deployer on Arbitrum · deployment service
- Wallet age
- 5y
- First funded by
- 0x1FcC…3Dc1
- Contracts created before
- 20
- Deployed here
- GMX, RewardTracker, RewardTracker, RewardTracker
-
0xE7Bf…a068 Deployer on Arbitrum
- Wallet age
- 3y
- First funded by
- high-volume wallet (exchange / bridge / faucet)
- Contracts created before
- 50+
- Deployed here
- ExchangeRouter, Reader, DataStore
- Its contracts in Aegis data
- 53
-
- Wallet age
- 15mo
- First funded by
- 0xF6f1…e891
- Contracts created before
- 37
- Deployed here
- Trading, Unnamed contract, Unnamed contract
- Its contracts in Aegis data
- 40
Links from these wallets to other sites appear here as Aegis scans more of them.
Links on the site
The site links to no socials, docs or GitHub.
This report describes on-chain facts and risk signals found by automated checks. Not financial advice: do your own research before you sign anything.