Security

Smart Contract Security

The QZEN token contract is a minimal ERC-20 built on OpenZeppelin v5, battle-tested, audited libraries used by thousands of projects.

Zero Admin Functions

The QZEN contract has no owner, no admin keys, no pause function, no upgrade mechanism, and no backdoors. Once deployed, it is fully decentralized and immutable. Not even the deployer can modify it.

Verified On-Chain

The contract source code is publicly verified on BaseScan, and separately on Blockscout. Anyone can read, audit, and verify it at any time. Verification means the published source compiles to the bytecode that is actually deployed, so the claims above about admin functions are checkable rather than promises.

One thing worth saying before you find it. The two explorers hold slightly different copies of the source, because the comments at the top of the file were edited after deployment and the later version was submitted to BaseScan. Blockscout carries the file as it was deployed. Neither difference touches a single line of executable code, and the deployed bytecode is the same in both cases.

The version on BaseScan carries a comment listing a seven way distribution. That split was never the canonical allocation, it was never executed, and nothing was ever distributed according to it. The canonical allocation is the one shown on the home page and in TOKENOMICS.md, and none of that has been executed either: almost the entire supply is still in the wallet that deployed the contract.

We cannot correct the comment. An explorer will not replace a source it has already verified, which is the same property that makes verification worth anything. So it stays, and this paragraph exists instead. If the two ever seem to disagree, the contract code is authoritative about what the token does, and TOKENOMICS.md is authoritative about what was intended.

Liquidity: the Open Hand

The Uniswap V3 LP position was locked on Unicrypt (UNCX) through July 4, 2026, Day of the Open Hand, to protect the launch period. That lock has not been renewed: the founders left the pool untouched by choice, not by chain. 100% of the launch liquidity remains in the pool, and the pool balances are verifiable on BaseScan at any time.

Reporting Issues

If you discover a security concern, email contact@qzen.dev immediately.